Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: WttI2ntaVYGXwYURjsbMca5/0MyxHZ/Ecff3+hejn44=
Subject key identifier: 00:92:DD:79:66:F4:12:41:5D:75:0B:0D:11:91:3B:41:CF:11:8A:76
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019F92ECBFA31C0B28194DC9F213101DA7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:00:16 +0000
Manifest this update: Fri 24 Jul 2026 07:00:16 +0000
Manifest next update: Sat 25 Jul 2026 07:00:16 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: UF/3p+Nks67pYihuu/9hyhJRSggfhTpQ1EcsHAtOX8o=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:bf:a3:1c:0b:28:19:4d:c9:f2:13:10:1d:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jul 24 07:00:16 2026 GMT
Not After : Jul 25 07:00:16 2026 GMT
Subject: CN=0092dd7966f412415d750b0d11913b41cf118a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d4:f2:0c:90:87:77:94:25:65:d9:d5:04:b9:
49:f4:64:0c:92:b8:0e:ba:52:16:e6:91:65:d2:c8:
63:79:6a:52:82:ee:a8:f9:ef:83:07:ed:1e:92:92:
4b:d4:63:b4:1f:a6:eb:36:45:01:00:6e:dd:88:ca:
7b:8b:35:76:7e:c9:d7:46:15:f7:b3:85:0a:38:41:
e7:64:d4:1e:24:12:5e:dc:44:7f:4a:04:e0:e4:6a:
6f:e1:42:18:50:50:01:ba:cf:ed:df:9c:01:8c:c0:
a6:50:f0:87:a8:0b:f1:48:49:df:2a:d0:5a:38:a2:
30:62:4d:e3:27:a8:44:86:9c:82:0e:f1:5f:42:dd:
69:0c:7e:59:e1:b5:57:81:62:1a:37:2a:ad:f5:ca:
2d:79:18:14:99:1c:86:91:6e:ac:28:38:9a:41:db:
6f:a0:90:f7:d3:ad:be:6a:7c:84:a0:e9:75:30:03:
2a:13:12:ee:04:64:09:15:34:b8:c4:3f:45:62:65:
33:42:4d:c7:c9:83:97:05:12:89:b9:6f:73:37:f6:
a1:01:b4:73:83:41:2a:91:a4:5c:b4:5d:4a:e8:a6:
bc:50:de:84:30:4b:0b:1f:6a:c6:1e:a8:90:9e:79:
4c:4f:d0:ac:8c:40:16:c8:1c:95:d1:b2:78:6a:bc:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:92:DD:79:66:F4:12:41:5D:75:0B:0D:11:91:3B:41:CF:11:8A:76
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:67:2a:21:d4:80:90:30:f2:cd:03:47:59:4f:4a:e8:57:34:
6e:0d:7e:76:14:e1:4f:b2:12:d2:a6:37:c8:88:09:ae:0a:cb:
55:77:15:f2:3b:49:01:1e:02:87:ea:83:d2:1b:d7:f5:87:41:
7a:6a:5d:1b:85:9b:b1:2f:3b:2b:d4:7c:d2:0a:34:90:ea:1a:
07:cf:ea:c4:ba:1f:3b:cd:4a:0d:d9:39:67:8a:ff:a8:fc:14:
02:31:67:3d:98:87:cf:79:6d:25:5e:3f:03:dd:22:a7:f5:50:
21:63:f6:77:7d:95:87:e1:a5:0f:67:9b:79:be:ea:7e:b2:76:
50:56:b7:21:13:7d:97:40:ae:8c:39:70:00:57:04:86:99:16:
c2:40:e4:c0:41:61:52:48:1c:8b:92:8c:7a:e8:26:87:87:fe:
85:a0:87:81:a3:3e:a9:55:90:3f:3e:f4:5c:24:bd:18:fb:d7:
46:79:95:c4:a0:9f:7a:79:f5:28:db:17:91:d7:39:9e:a2:10:
44:bd:6d:04:93:79:7f:fd:6d:54:1a:ac:c4:d8:81:2f:79:5d:
2c:0f:0d:ee:bf:93:c4:20:b6:e7:ee:d7:18:e9:8a:62:3f:b2:
d2:e8:07:e0:1b:fe:11:60:0a:81:70:d1:28:1c:98:7e:66:be:
27:82:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:58 2026 by rpki-client