Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
File: Y56u7x9LomYtRYnGlhfCIjT8f9U.mft (raw, json)
Hash identifier: 6iADcCSGbf6nbEoZJ1cMqPea2C0RUcwBbgh7L5r1bb4=
Subject key identifier: A5:70:31:25:CB:20:F7:7F:FD:BE:FC:02:AA:5C:79:20:FD:AE:33:94
Authority key identifier: 63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
Certificate issuer: /CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Certificate serial: 019F946DAE12978E86C0D862C99027777E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
Manifest number: 10
Signing time: Fri 24 Jul 2026 14:00:43 +0000
Manifest this update: Fri 24 Jul 2026 14:00:43 +0000
Manifest next update: Sat 25 Jul 2026 14:00:43 +0000
Files and hashes: 1: 5C7B9sK-52QOcFqJhruOpWErXiM.roa (hash: 4/5+RXA9GJGFx9VqeqH9sQ5DjIRLWG8YQmxsy4IiZ1g=)
2: Y56u7x9LomYtRYnGlhfCIjT8f9U.crl (hash: gddQ2/rb7gWmuW8s570ML47n2cDICjbcnPKO9/EiNKo=)
3: _GYRtRrE3o1gXliLdkCD1K39Pkw.roa (hash: MdvV5iINAnufC2VKyyJ2tO5THU9NvjiQkS7qbbRGAKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:ae:12:97:8e:86:c0:d8:62:c9:90:27:77:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Validity
Not Before: Jul 24 14:00:43 2026 GMT
Not After : Jul 25 14:00:43 2026 GMT
Subject: CN=a5703125cb20f77ffdbefc02aa5c7920fdae3394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:69:b7:84:64:be:cc:3e:e5:01:90:34:7b:5f:
4a:66:11:fd:c2:b3:ed:63:3b:59:d4:8c:d8:dd:c2:
07:e1:57:d7:89:fa:dc:d3:a1:7c:89:60:84:6c:9b:
e3:a8:4e:19:f4:0f:5b:6e:5f:6d:c2:a4:95:b7:f5:
31:78:07:5f:72:30:79:2c:d8:6b:4b:af:dc:c9:47:
d7:3e:ce:94:9e:b5:8e:2f:ac:01:f6:9e:0d:73:83:
39:39:d1:29:f5:fa:ca:b8:88:b9:0e:da:15:1b:46:
39:33:70:52:d9:ba:e7:61:70:9a:dd:0e:a3:ec:53:
4e:3d:c9:2c:e1:9e:80:3b:b4:84:6a:a3:25:2f:a6:
87:ad:79:ef:3c:2b:bb:5b:34:6d:88:2a:94:24:4a:
8f:b3:9a:e0:58:2a:ec:39:00:b8:bf:4d:b0:ed:e3:
80:e2:70:e1:40:ae:4a:cf:4e:a8:7f:51:3e:e2:44:
57:a9:1a:aa:e5:32:f6:74:d0:5e:78:14:71:59:b0:
67:19:39:96:a9:d1:95:df:f4:43:fc:fc:47:2a:b6:
2c:f4:c7:90:70:f6:a1:0b:25:b1:95:87:d5:dd:dc:
7a:ba:97:f5:1a:4b:42:7e:9f:de:ee:2b:2f:87:45:
6d:f3:37:3e:6a:dd:06:c5:d5:bb:d5:ab:c9:1f:01:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:70:31:25:CB:20:F7:7F:FD:BE:FC:02:AA:5C:79:20:FD:AE:33:94
X509v3 Authority Key Identifier:
keyid:63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b6:56:66:4a:07:af:6c:1b:f1:35:d3:2a:15:fe:9e:81:ee:
1d:6a:75:fc:db:ec:0a:39:13:da:db:2f:ad:f4:78:51:df:18:
6a:45:23:fd:06:61:a6:af:05:50:05:4f:43:dc:e5:50:3f:d6:
cd:4f:a5:1d:79:2e:29:d5:72:2f:cb:6e:a1:55:a2:e0:80:17:
92:5c:7b:49:64:b7:19:f5:ef:7c:61:e1:fb:a6:d6:db:b2:dc:
60:11:b6:1a:ac:07:28:74:07:b5:76:f6:7d:2f:70:46:27:88:
19:6f:0c:52:0b:22:fd:43:d9:cd:8f:3b:2f:94:fd:05:02:99:
93:77:9b:d8:db:a1:9b:be:47:b0:71:2e:c5:75:b8:b1:d7:5d:
22:f2:64:4d:bd:fd:e2:2f:06:5a:98:d6:e2:5e:70:15:f0:26:
6d:a8:bd:41:49:c9:e8:56:82:a6:d1:c6:cc:35:13:86:87:29:
8e:06:cb:79:87:f6:25:30:af:20:6e:fd:d6:08:e4:e1:80:da:
36:b4:74:49:a9:73:60:f6:29:02:46:e6:37:85:e8:85:87:70:
1f:17:5b:70:23:39:0f:d3:62:b2:a8:90:db:9c:32:84:67:51:
ea:d3:d4:6e:2f:eb:4e:71:fc:a2:da:4d:e9:83:f5:c6:0a:84:
2f:eb:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:15 2026 by rpki-client