Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: 7qirWZZxxOnPDKvDO6fRH7/cQumu1AYUQsC2sATLTpU=
Subject key identifier: 58:BE:14:11:A9:B4:D6:8C:90:DF:DF:EF:B0:6D:C1:5F:48:35:65:D1
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019F9211AE95446B7995F58F89647EBB56D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 19C4
Signing time: Fri 24 Jul 2026 03:01:00 +0000
Manifest this update: Fri 24 Jul 2026 03:01:00 +0000
Manifest next update: Sat 25 Jul 2026 03:01:00 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: AbnRx7evnh/maPU8wQK+Z5kHS90tmLcxMQLTdA5yXYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:ae:95:44:6b:79:95:f5:8f:89:64:7e:bb:56:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Jul 24 03:01:00 2026 GMT
Not After : Jul 25 03:01:00 2026 GMT
Subject: CN=58be1411a9b4d68c90dfdfefb06dc15f483565d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:31:e9:a2:47:9d:7b:f8:52:a2:d9:c5:5e:
a4:e7:21:c1:d4:a6:6a:ea:b2:40:1e:4e:ec:5e:6b:
2f:a4:39:8d:ca:ee:7c:a0:5a:f5:9a:0d:43:af:2e:
68:8a:22:b4:41:ad:27:1f:13:49:53:ca:7a:9a:04:
d7:21:5a:e2:48:79:03:e1:b9:3e:ad:8e:04:62:74:
af:8d:bc:6c:07:df:aa:26:6d:26:3a:2a:41:2e:79:
9b:a3:8b:fc:01:d2:f6:81:f8:21:d6:91:c1:5c:63:
ec:20:f1:98:2b:5d:1e:12:f2:64:bd:f2:95:93:7f:
94:0f:d2:98:d7:87:03:31:01:1a:ec:cb:fa:29:ee:
76:26:51:86:bf:3c:2a:14:33:c7:ab:43:5a:c9:dc:
a3:a4:07:7f:93:42:07:57:6f:c5:d1:0a:25:dc:93:
ce:de:89:e1:8c:63:19:c5:fb:41:ff:64:41:0a:ea:
37:77:bf:22:58:ae:f2:5c:fd:2c:7b:9a:e1:61:f4:
2e:59:ff:8b:10:df:4a:16:3f:a5:66:da:8b:ec:a6:
ae:bb:48:28:f4:65:59:04:23:0f:e5:ac:3f:e7:81:
db:85:ac:a7:d0:76:39:cd:24:78:f8:47:72:78:59:
e0:40:af:42:cb:56:f1:74:b1:89:3e:fd:80:52:19:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:14:11:A9:B4:D6:8C:90:DF:DF:EF:B0:6D:C1:5F:48:35:65:D1
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f3:49:df:a0:30:82:80:bb:ae:1d:9d:e5:ad:41:8f:ec:b6:
45:14:ad:5d:6b:a8:14:9f:1e:cc:fb:34:71:5f:dd:74:a2:d6:
4d:b1:e3:c7:bf:0e:b2:cd:de:59:69:05:10:ee:cd:d7:60:d7:
1f:c0:f0:0c:eb:cd:c3:87:0c:37:49:13:10:84:69:54:23:17:
bc:aa:7d:10:30:12:46:75:33:75:8f:95:9f:6e:9b:01:46:5f:
6b:49:af:e8:4c:4a:a0:4e:31:40:86:14:00:b1:c0:29:9c:92:
68:c4:7e:b6:63:cc:fc:ff:ae:0d:37:60:c0:e3:8d:d9:a4:e1:
e4:c6:74:e0:1c:bd:d2:23:d6:89:19:19:ae:70:35:e8:9f:7e:
99:74:34:61:f5:ce:c0:ac:06:bc:02:63:31:dd:76:f9:9d:fc:
2e:0a:68:6f:24:a7:04:8d:38:7f:a6:8a:9a:85:f1:3c:d1:8f:
45:e9:b6:ed:37:f0:e4:08:a6:df:95:84:8a:e1:10:9a:19:80:
e0:48:f8:f0:8f:12:1e:a9:7b:98:87:3f:ff:5a:9a:02:08:64:
ba:4a:b6:38:82:38:87:71:de:bb:0d:5d:0d:72:37:75:6f:ea:
14:4c:2b:42:c4:0a:20:0c:b5:c1:df:a4:64:b4:af:95:3d:63:
e1:5f:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:29 2026 by rpki-client