
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: DfyKXZADwft0J4zDISD60NJVMmbXqV+FhDcyNdB4js8=
Subject key identifier: 01:AB:1F:70:FE:D6:7F:98:A3:D5:79:0B:14:F3:CE:2F:2A:EA:ED:23
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019F8EA2921B20CFB3972724FCCCFFD06431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 11:00:46 +0000
Manifest this update: Thu 23 Jul 2026 11:00:46 +0000
Manifest next update: Fri 24 Jul 2026 11:00:46 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: ufZ82C73H2gYn+qv6oMcfhwMq3PmNOxcDdyK3D/Zxl4=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:92:1b:20:cf:b3:97:27:24:fc:cc:ff:d0:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Jul 23 11:00:46 2026 GMT
Not After : Jul 24 11:00:46 2026 GMT
Subject: CN=01ab1f70fed67f98a3d5790b14f3ce2f2aeaed23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:ef:3d:5d:85:14:72:4b:0e:b4:15:9a:46:
8f:4e:2b:68:5e:01:a3:2e:fe:32:b0:4d:48:8a:73:
39:a0:a5:86:ba:1c:f9:16:1a:7a:28:99:26:55:f7:
81:43:a7:1a:95:df:69:15:35:7b:13:72:55:13:c3:
5a:d1:c8:30:af:cb:3e:1c:d4:34:40:f4:c1:02:dc:
60:5a:38:52:a0:d4:02:db:97:43:98:ce:0d:49:a7:
49:92:ee:c5:93:3a:13:a5:2b:68:26:72:f7:3f:d7:
37:b7:06:6f:ee:b3:a8:b3:0f:d7:4a:cd:5f:2f:d9:
21:fa:05:67:65:80:60:70:1e:db:9f:36:fe:99:b6:
a4:80:df:f2:be:0c:6f:7e:bb:56:74:0f:40:dd:04:
bf:2d:b9:54:20:41:67:d6:5b:4c:54:c1:e0:5e:47:
d9:ed:f7:1a:89:6c:ef:4c:e0:d4:8b:13:eb:2a:43:
f1:2e:65:9d:38:34:7d:e0:63:ba:f2:8a:0b:a3:4d:
2c:f5:3a:cc:1c:5a:13:ea:4b:30:62:4d:89:13:b9:
16:cd:3c:e2:65:ca:6d:23:b4:c1:8b:72:e2:c0:c4:
0f:4a:8e:fd:33:9e:12:46:b3:cd:a9:46:e9:62:64:
0a:66:ec:2e:71:f1:df:29:ea:20:8a:d3:f1:6c:b1:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:1F:70:FE:D6:7F:98:A3:D5:79:0B:14:F3:CE:2F:2A:EA:ED:23
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8c:eb:bf:69:15:01:53:02:77:6d:ed:07:db:9a:6b:77:fb:
67:27:fe:39:85:cf:ed:14:0b:78:f9:f5:34:f1:1f:5b:70:33:
f0:25:eb:74:d5:b1:36:5c:49:a6:7e:30:48:33:b0:7a:1d:c1:
57:c8:8f:a7:bd:89:48:f7:62:05:6d:7d:e3:40:af:d5:26:89:
e7:59:9b:8b:be:69:64:8f:db:f8:9c:2a:91:eb:41:6e:f3:b3:
5d:6f:01:8d:6c:13:53:7e:f9:0c:00:46:8a:fd:fa:57:b0:7b:
99:ed:79:69:c9:4c:4b:66:db:17:fa:c1:e8:0f:6f:69:f8:23:
e1:2c:33:3a:eb:06:08:96:34:97:5a:f8:9e:66:f7:d3:6f:df:
8d:f0:0a:38:23:a6:1d:a3:6c:3c:ac:4d:cc:1c:4d:c3:c8:47:
f4:6c:fb:9b:c9:b6:9b:25:dd:da:c7:57:4c:de:77:57:dc:2b:
55:d9:57:4c:9d:b4:2c:2b:76:cc:2d:4f:f2:ed:22:32:64:57:
95:7d:30:ba:88:9a:ff:42:ad:1b:18:4f:0b:7f:cf:85:63:d2:
d0:1d:b6:38:1a:c1:9c:d8:c6:70:83:f7:40:31:c1:b1:94:45:
1e:dc:b9:12:27:43:aa:44:72:c4:a9:d2:4d:94:30:45:df:c1:
08:89:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:15 2026 by rpki-client