Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: B/YApaVhlRQaVAkqASFXVnN0UXYeeribV7rwcgK/Frg=
Subject key identifier: A8:79:3B:C3:75:48:CA:34:46:0E:F2:EF:BF:E7:20:A2:4F:20:C3:5C
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019F8FEBC31753CB8AC2BA83D7AE8F86B21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 0A3D
Signing time: Thu 23 Jul 2026 17:00:20 +0000
Manifest this update: Thu 23 Jul 2026 17:00:20 +0000
Manifest next update: Fri 24 Jul 2026 17:00:20 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: DNFx8cZGe91EB2jcQgNJMgvaQ8mhaYm22sJJZuglRFc=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:c3:17:53:cb:8a:c2:ba:83:d7:ae:8f:86:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jul 23 17:00:20 2026 GMT
Not After : Jul 24 17:00:20 2026 GMT
Subject: CN=a8793bc37548ca34460ef2efbfe720a24f20c35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:cc:1f:13:21:c4:63:fa:e1:29:a5:e6:f2:
63:b6:7c:df:55:54:61:92:86:6a:21:fa:6b:fe:96:
f7:8d:aa:f1:03:29:8a:43:e1:22:37:b5:e2:b5:aa:
0c:ff:3f:64:ac:ef:cb:f4:b7:b2:a0:ca:9c:10:6c:
99:9c:27:5f:02:a9:b7:93:5d:d2:73:a2:12:31:9d:
33:d8:63:85:99:92:49:04:43:35:7a:99:7a:32:49:
49:7a:e6:90:41:5f:b6:18:d1:0b:ed:cf:d2:53:2c:
22:d9:78:bc:85:d2:11:e5:81:eb:5d:ec:21:68:d2:
ff:a6:7a:87:35:aa:ba:ac:2c:8f:fd:73:95:90:6a:
4d:10:18:07:43:73:53:6f:0c:a9:cb:ad:3d:a3:c7:
31:6f:51:89:3e:a4:d7:ec:f6:c9:83:6d:d2:b9:de:
c3:25:13:73:55:98:19:9c:8b:22:50:aa:54:a3:b2:
64:8c:af:29:87:e5:06:70:ba:28:d2:15:88:67:d4:
95:75:36:f1:05:9e:51:0e:9f:90:b2:2d:f4:74:cc:
8f:ec:16:c7:27:f3:95:0f:44:e1:d6:3e:15:92:e2:
21:84:9e:60:b8:1b:3c:cd:bc:a3:08:a1:f5:bc:9b:
7a:fe:88:91:ae:20:87:2e:ec:82:b3:33:19:ee:21:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:3B:C3:75:48:CA:34:46:0E:F2:EF:BF:E7:20:A2:4F:20:C3:5C
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ad:a3:99:d9:aa:02:13:1b:7e:18:d7:96:cf:77:7f:83:44:
b9:5a:ee:2e:a9:32:65:24:20:94:57:06:ba:0f:e1:6d:b4:de:
76:aa:10:c0:df:68:88:0f:16:32:a5:d0:aa:13:2f:45:c3:59:
94:e4:91:ce:59:87:02:04:33:67:83:f2:38:3a:36:ce:36:ac:
8f:62:48:47:df:6c:0e:00:1a:08:07:cb:3b:c1:7d:a0:61:7d:
2a:51:7b:81:2a:f0:4d:dd:19:2a:27:2f:60:c8:1c:4d:93:69:
57:d1:5d:a9:4c:07:15:48:79:9f:1b:e0:d7:65:fd:ca:94:f6:
70:9b:7e:de:e5:07:ec:8c:42:89:4e:94:20:09:cc:4f:f2:49:
53:18:cc:3b:fa:4c:24:91:88:0b:eb:a9:98:c5:58:d1:fc:80:
bb:3e:0e:04:61:50:eb:db:5d:cb:47:4e:bd:9d:f6:47:ff:26:
04:8e:7e:b3:73:85:18:cc:98:84:ff:3f:6b:f8:7c:42:7d:9b:
5d:56:47:2f:f4:53:38:8c:fc:3e:76:3f:d8:b0:2b:5f:8b:77:
bb:1a:4a:22:ea:0b:b2:cc:03:67:fb:b4:14:6b:6b:98:d8:7a:
9c:14:f8:ad:24:a4:0f:c7:42:13:08:95:f0:13:aa:aa:b7:30:
fe:10:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:37 2026 by rpki-client