Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
File: c89qsxYEWZuC1U3S9A-ysispwh4.mft (raw, json)
Hash identifier: 9cnBD2O4G0a6kqP9HlzQmvX/8jmtnz4DqM8A+zUvGx0=
Subject key identifier: D0:AD:9D:6F:8C:04:F7:BD:42:70:8B:B6:76:52:57:A8:59:27:5E:E1
Authority key identifier: 73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
Certificate issuer: /CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Certificate serial: 019F935A9A3B07885B1138BEBF2DE00FEAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:00:16 +0000
Manifest this update: Fri 24 Jul 2026 09:00:16 +0000
Manifest next update: Sat 25 Jul 2026 09:00:16 +0000
Files and hashes: 1: 4Bt4awQ3a_9RIM6HHri_qCJgSWg.roa (hash: oeWIAAnSZ4lhgU2K6FkPq7+EIWrrH2aLb/TTgduHWn0=)
2: AqCtuwGvVSgRJxVxr4mxQU1HkAM.roa (hash: O/QtFV+qDKvIVvd2P3gXnC1wGd9GAwJT7ubN9qYRXPs=)
3: c89qsxYEWZuC1U3S9A-ysispwh4.crl (hash: UI3Enum+5l26yI7yY2vk48kvbYCMot+gl0FHAwPUt50=)
4: zwmjAN4LcEyM9uxOrsR0kjbHDxQ.roa (hash: tZdW/oSxv26bqccrBhCTEl8SrQVT+jOlShFdNQKzxOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:9a:3b:07:88:5b:11:38:be:bf:2d:e0:0f:ea:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Validity
Not Before: Jul 24 09:00:16 2026 GMT
Not After : Jul 25 09:00:16 2026 GMT
Subject: CN=d0ad9d6f8c04f7bd42708bb6765257a859275ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:de:6e:8b:cd:82:bb:2b:6e:8c:f0:cd:8b:
cf:67:d0:e0:bc:ea:6b:ac:0c:e4:6a:09:31:6d:2b:
eb:56:96:e2:7c:c6:1d:4a:04:3b:41:00:9a:13:d6:
62:ee:3a:b3:2d:a7:16:77:0f:4b:ac:ba:40:71:6d:
58:f0:ec:4d:d3:e2:4a:7b:c9:b8:09:2b:c3:10:54:
4e:3a:d1:ba:85:62:95:29:a2:25:fc:b5:a1:34:ce:
ea:ac:61:62:7f:54:e2:52:6a:ee:25:1a:4f:19:d2:
75:46:91:f4:8e:06:8f:ca:45:33:26:de:be:59:63:
4e:2a:79:1c:aa:49:93:ae:a0:20:87:33:92:8a:2d:
20:50:d8:52:29:76:09:7e:ab:8b:9e:4f:31:84:ef:
63:0b:a9:0e:2e:1f:6f:fe:4a:9b:db:3b:18:dd:14:
0e:78:f0:2c:83:2d:70:57:88:fc:b7:ad:de:b1:d2:
b8:31:5a:2d:b8:db:8a:9f:09:fc:99:a2:09:2d:47:
4c:b5:e5:f4:7d:ea:8c:20:2b:a3:e9:72:fa:aa:64:
f5:1b:68:af:3b:b8:48:57:84:70:04:8f:2d:5a:7e:
83:ea:e0:5f:67:5b:5a:0d:1a:90:56:0b:ef:02:1f:
aa:33:04:e2:a1:75:63:95:42:7a:96:41:2e:f5:52:
c5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AD:9D:6F:8C:04:F7:BD:42:70:8B:B6:76:52:57:A8:59:27:5E:E1
X509v3 Authority Key Identifier:
keyid:73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1d:7a:56:47:67:90:52:3e:65:90:ad:53:2d:eb:5f:ae:b0:
94:09:6d:be:f0:5f:b3:6b:8d:7e:31:97:53:f5:17:00:7e:96:
6d:e9:35:ea:47:28:74:82:71:6c:68:53:71:d9:5c:62:97:96:
68:85:14:6c:45:99:39:5f:98:52:35:16:21:dd:75:3f:64:34:
b1:42:08:a3:5d:98:8b:7f:c3:04:7d:c4:a3:67:8f:65:fa:9a:
09:d6:6f:3d:82:7a:29:1a:84:37:5a:bc:a3:a6:2e:5a:b4:4b:
58:3a:a0:a6:dd:5e:3d:4e:54:8f:c1:ad:c8:23:cb:43:fd:82:
6e:d0:5d:39:e3:2a:d1:1b:10:8b:94:6e:fc:7c:c9:b7:fa:a9:
a6:0c:7a:d1:16:8c:8c:a8:7c:17:83:39:4d:b4:47:80:a6:19:
f8:5a:99:20:1c:34:26:c1:d8:22:c7:2a:d8:05:3f:e0:83:66:
9c:8f:05:fc:70:fc:07:85:6a:01:70:c8:6a:1c:94:6c:46:db:
a5:23:ef:d4:91:dc:9b:05:1a:42:c0:3d:bd:ac:4e:3e:08:dd:
46:57:36:16:01:33:1e:ac:ef:c8:5c:17:a1:ec:c8:de:0f:b1:
de:cd:b5:6d:e5:4b:93:d1:7f:ab:31:3e:3f:36:ee:cd:19:ca:
4a:52:36:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:32 2026 by rpki-client