Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: xkxtcAVpCxGk+tzbUKm8E59pNVdDIK+iKN4mjRU++oI=
Subject key identifier: FC:D5:94:A7:42:8B:5D:AB:F5:AD:90:72:1B:78:22:CB:10:DC:42:34
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019F946DFFC8A75361108DFF6851870AA1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 0395
Signing time: Fri 24 Jul 2026 14:01:04 +0000
Manifest this update: Fri 24 Jul 2026 14:01:04 +0000
Manifest next update: Sat 25 Jul 2026 14:01:04 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: bq3uTXzh18OmnHWr9VlymUPLeSX474yMg+nNXuMXH34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:ff:c8:a7:53:61:10:8d:ff:68:51:87:0a:a1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Jul 24 14:01:04 2026 GMT
Not After : Jul 25 14:01:04 2026 GMT
Subject: CN=fcd594a7428b5dabf5ad90721b7822cb10dc4234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:06:02:7b:f2:bd:f1:64:c3:2d:9e:17:ad:
51:4c:cc:8e:31:73:8a:d0:19:be:a7:bd:a0:e0:80:
d2:41:97:3b:7b:f0:dd:54:fc:89:9f:bd:71:65:15:
b5:c5:06:dd:9d:e4:3c:4f:96:a2:7b:57:d1:e5:7e:
48:8f:fa:ec:eb:cc:e3:64:c4:2d:af:2e:31:9f:3d:
2e:6e:84:bc:11:7c:c8:8e:da:7a:e8:35:35:46:fa:
2f:19:ba:e1:e5:e8:a3:c8:7a:35:2d:4d:e4:a8:67:
ef:5a:01:83:9f:47:62:51:19:68:a2:93:92:c4:fa:
d1:99:62:6c:b7:58:8c:ad:60:39:eb:0b:c6:7d:67:
b7:5f:68:a3:04:8c:0a:1c:11:d2:71:9b:97:85:95:
83:8b:9e:1f:18:93:77:b5:6c:96:60:d0:ef:07:15:
38:80:28:06:5d:e3:c1:6c:68:5f:68:44:5f:3c:7a:
57:fd:18:b2:d1:ec:34:13:85:6d:c9:15:0a:e5:25:
97:9a:ce:2d:53:b4:72:14:71:fb:65:84:08:45:bd:
c1:2c:3d:27:04:5b:bd:7d:9e:22:2d:d8:6f:05:5a:
27:6b:41:61:c7:a9:a1:29:a8:1d:72:2e:c2:18:87:
01:8d:a1:84:d1:3d:05:b1:8a:a7:e9:c1:b3:9d:22:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D5:94:A7:42:8B:5D:AB:F5:AD:90:72:1B:78:22:CB:10:DC:42:34
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:02:d9:4a:36:f6:24:4f:59:7e:e8:79:7c:98:76:4c:0c:88:
24:33:6d:72:e1:9e:29:44:c3:f1:df:77:fc:f0:37:b7:3d:fb:
38:1a:e3:bb:30:7e:58:18:5a:ff:97:2b:e5:63:0f:4d:4e:da:
da:37:f6:10:59:07:60:d6:f0:f1:90:22:eb:fe:67:e2:1d:98:
e3:3b:8b:ef:0b:88:21:a5:ec:d8:20:23:5e:29:44:3d:51:bb:
94:31:38:53:df:5f:35:f7:b4:42:0d:f7:d7:9d:87:12:31:cf:
1a:3e:4a:1b:6f:00:6f:8c:8b:1e:fd:7d:e8:cb:93:01:d4:a9:
e6:2c:87:a1:4e:8b:11:5c:bd:b4:6a:ba:f0:9c:e7:27:5d:76:
a9:c9:c7:f0:d6:5c:04:5d:4a:2c:96:0d:b1:b2:d8:e4:39:a8:
6d:3e:0b:14:c3:9d:a2:b6:2b:02:ea:e9:be:f1:65:d7:0b:4f:
95:c9:7c:0e:8c:64:b8:47:0d:2e:87:c7:a3:e5:09:6b:13:be:
51:c3:cd:ff:9f:4b:26:41:45:ec:45:8c:d2:1d:f3:e2:72:eb:
05:f6:91:50:bb:db:5f:e0:de:fe:fa:d7:be:15:1e:95:db:00:
c7:70:c7:e8:3e:0a:eb:8a:7c:4b:cd:1f:9f:b8:6a:12:ac:1c:
67:a9:81:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:34 2026 by rpki-client