Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: TAh24zroCZUfRk2Yq/G+qeUT7GH52RJ7p27LD9eBed4=
Subject key identifier: 64:6A:92:C8:42:04:7F:CC:A7:A8:33:70:79:3E:A1:24:4D:39:E9:D8
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019F940001B5BD7725630E5AB21094DF6B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 12B5
Signing time: Fri 24 Jul 2026 12:00:56 +0000
Manifest this update: Fri 24 Jul 2026 12:00:56 +0000
Manifest next update: Sat 25 Jul 2026 12:00:56 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: ogFg0R0EcyjIcXI7fL0gPOn7pWyM/ZXTJvEBhwHg9vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:01:b5:bd:77:25:63:0e:5a:b2:10:94:df:6b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jul 24 12:00:56 2026 GMT
Not After : Jul 25 12:00:56 2026 GMT
Subject: CN=646a92c842047fcca7a83370793ea1244d39e9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:a7:95:5e:7b:58:6d:de:7f:97:db:50:c3:
e7:09:4d:6e:83:d7:c5:b4:ef:35:fb:d7:71:e0:83:
0c:bc:3f:df:43:db:7e:60:3f:d0:ac:32:55:19:53:
87:2c:3c:f4:63:99:63:60:e9:58:8e:7f:3f:12:46:
6d:2d:f0:2e:7c:6b:da:33:7b:03:08:c5:7e:43:07:
cb:4a:bc:84:77:fa:c6:e8:aa:4b:8d:43:1c:e7:ac:
d5:b9:78:c9:31:97:78:8d:45:89:48:ab:40:4a:a9:
98:a6:d3:56:d5:0c:fa:24:f7:0b:06:2c:8c:21:19:
4e:6e:82:01:a4:2b:2a:dd:61:b8:bc:76:80:e5:fa:
f7:2a:c0:60:bb:d2:12:b8:04:99:a2:ee:7e:8c:00:
24:01:d6:dc:65:13:2f:fe:b6:db:20:dc:7e:c8:16:
28:67:4c:19:9f:ee:30:b0:9c:4c:33:8a:e8:05:45:
21:f6:b8:c1:89:d1:0f:40:a9:a4:08:a6:6a:95:b7:
62:f0:11:cb:48:c8:d6:59:ef:0a:a3:5a:d5:19:e5:
22:10:29:ef:e0:f4:45:e5:3a:07:19:43:c1:dc:6d:
b4:96:a3:d4:a8:44:5a:fb:96:be:ae:0a:cc:a0:d6:
05:2a:06:68:2b:a5:c6:f2:c8:cb:c9:13:1f:47:d3:
a1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:92:C8:42:04:7F:CC:A7:A8:33:70:79:3E:A1:24:4D:39:E9:D8
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fb:c2:63:c0:45:d0:19:f5:86:79:c9:d5:6d:f5:51:dc:66:
57:eb:82:0c:2c:30:6d:2e:c9:4c:1d:b2:48:73:36:08:af:1e:
1f:a4:57:46:3e:65:fc:2e:45:c8:25:42:ea:28:c4:87:1d:dd:
d4:94:ba:f4:ce:92:0f:03:b9:48:79:cc:4c:40:eb:5a:b8:7b:
7c:66:e5:9f:32:fe:1f:78:fe:5b:d2:75:8f:84:e8:27:00:5e:
c9:4d:b5:1e:85:42:42:70:a8:25:2f:26:e0:f7:8f:f4:b4:71:
93:22:d6:4f:db:a5:58:d2:03:bf:06:98:2d:3d:93:0c:8d:e2:
c8:68:79:d6:7d:e4:13:8c:ad:e1:d8:71:42:92:7f:3d:d7:79:
df:f8:b9:af:ca:8d:7f:7f:e5:e1:e4:ce:63:20:ac:a3:af:c2:
ec:71:60:03:19:ff:15:13:89:26:44:08:1f:f2:2a:72:7a:65:
73:4e:fa:49:33:15:e7:f3:7b:e4:6a:dd:66:46:ab:f3:52:c5:
e2:cc:49:1f:b8:a7:01:be:7f:5f:b2:2e:53:59:e9:2a:60:0f:
ee:cb:52:16:d3:88:98:f7:52:60:12:a1:e0:0c:e4:91:71:2a:
b2:a0:a0:7d:66:f9:6e:42:f0:c3:c1:97:9a:c2:f3:9c:97:ea:
b7:8f:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:22 2026 by rpki-client