Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
File: y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft (raw, json)
Hash identifier: lOw1jwwO5mnZKSHu4VSuSyOZDNgcI6HADma2Uh4w0Y8=
Subject key identifier: F9:2B:FE:E6:3D:C7:E0:51:B2:0C:69:02:51:88:0F:0C:BE:EF:04:63
Authority key identifier: CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
Certificate issuer: /CN=cb88a5ee7704889209de589b0e657961ed590c01
Certificate serial: 019F9549E3C75A7FE5831013234163D9BA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:15 +0000
Manifest this update: Fri 24 Jul 2026 18:01:15 +0000
Manifest next update: Sat 25 Jul 2026 18:01:15 +0000
Files and hashes: 1: y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl (hash: pvuMMzpCqCAKG9OQdwZ1auQW1gNdNmTE1uY4JTmKroc=)
2: zRdtGNLqz3DTStXWoWXkQVdYwlk.roa (hash: 7dOrZtxziMGSIF3EGdNDH44Ze2WHNrr7lOSga6pUGbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:e3:c7:5a:7f:e5:83:10:13:23:41:63:d9:ba:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb88a5ee7704889209de589b0e657961ed590c01
Validity
Not Before: Jul 24 18:01:15 2026 GMT
Not After : Jul 25 18:01:15 2026 GMT
Subject: CN=f92bfee63dc7e051b20c690251880f0cbeef0463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:ea:37:8f:e4:9b:37:33:e8:b9:e4:f6:c0:
63:01:3d:30:d5:72:23:ab:47:7f:b4:8a:9d:bf:5d:
54:25:c2:3d:38:17:92:59:4f:65:48:f9:bf:43:7a:
7f:5b:c8:73:5d:2f:a1:2b:2f:94:2e:22:4b:c1:29:
0f:fc:24:3c:3a:11:26:56:cb:ff:96:79:70:b0:b4:
84:c2:b6:3e:b8:47:73:ee:19:5b:64:35:f4:69:22:
66:c6:f7:c0:60:65:bf:98:a4:c4:63:03:b8:82:e5:
3a:81:90:42:c8:9a:0e:7b:f2:b6:a3:e3:58:6e:fc:
6f:83:a4:0f:87:66:fd:5c:a8:f0:a6:57:84:ec:cd:
a4:8c:37:c6:81:ec:09:2c:18:78:09:c6:be:c6:ef:
e3:46:b8:57:60:93:95:b8:ed:4f:9d:57:af:b7:e7:
bd:a2:1a:bc:7b:e3:61:37:ec:7d:cb:d5:a0:ee:57:
63:19:52:32:0c:59:90:5c:39:9e:42:94:6d:32:26:
16:5f:b8:ba:da:d2:25:16:37:e8:87:02:62:53:94:
d6:85:35:af:20:d0:44:1a:fb:6e:49:b1:35:6a:e4:
4b:98:04:9d:9f:0a:d0:bd:d7:f8:86:9f:07:d6:49:
ba:e9:ff:92:ad:54:27:02:55:4f:39:6a:d9:15:11:
80:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2B:FE:E6:3D:C7:E0:51:B2:0C:69:02:51:88:0F:0C:BE:EF:04:63
X509v3 Authority Key Identifier:
keyid:CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:5b:23:69:18:f0:4b:96:bb:a0:e2:e1:1c:ee:99:25:17:5f:
60:33:27:c9:38:c7:f6:0a:04:4b:11:bd:10:11:08:da:43:97:
c3:9a:0e:4b:38:d6:86:be:a2:f8:0d:4e:89:46:04:57:e8:a1:
57:f3:80:89:5c:45:ac:97:51:c1:57:0a:bd:5a:ff:a0:9c:5d:
1d:3a:03:fb:40:8e:b8:0a:16:1d:95:11:90:0d:27:f7:57:9f:
46:a7:f1:58:24:07:7b:cc:cc:e2:d1:a6:e8:1c:62:4d:d6:2f:
9a:2b:8f:db:b1:d1:f0:d5:37:03:4d:42:4c:b1:92:f7:8b:0e:
d1:a9:ca:c5:1e:c4:1f:3b:c1:5b:5f:d7:5e:3b:88:44:ca:bf:
05:b3:ac:b2:f6:d0:d3:d9:8c:36:7d:61:2d:f0:47:28:8a:af:
d3:c0:96:53:1a:b0:68:ad:9b:f4:e8:3a:cb:84:b8:5a:ea:47:
28:37:3b:7b:4f:95:b8:3a:43:ed:1a:70:f1:a1:77:c0:ae:2d:
0c:6b:c2:23:d7:5a:5a:59:7d:d7:98:40:89:55:a3:ab:fc:85:
ed:4c:41:0b:30:0d:86:ce:0a:04:47:05:f5:c9:a7:16:67:84:
b3:49:14:db:8f:2c:ca:3c:65:db:88:4a:f5:48:ca:f4:d3:22:
c5:4d:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:58 2026 by rpki-client