
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: OQjBqL7BCegzIdLs3AIqkf86gUqBEmj6KxXeTHRzm4g=
Subject key identifier: AB:32:9B:19:80:25:A8:46:49:D1:E3:03:D1:6C:B2:E4:5B:75:A3:90
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019F848CDC070D6F50EF6CA1EFE0D1841E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 19BD
Signing time: Tue 21 Jul 2026 12:00:51 +0000
Manifest this update: Tue 21 Jul 2026 12:00:51 +0000
Manifest next update: Wed 22 Jul 2026 12:00:51 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: tXjvZjgqg36grc+51/mn+Y9cCa88BwqeRa/Nw9uCdQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:dc:07:0d:6f:50:ef:6c:a1:ef:e0:d1:84:1e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Jul 21 12:00:51 2026 GMT
Not After : Jul 22 12:00:51 2026 GMT
Subject: CN=ab329b198025a84649d1e303d16cb2e45b75a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:0c:ed:34:69:30:88:02:e1:3b:ef:57:f5:
62:93:3a:be:a2:20:81:95:1d:57:aa:c4:b0:37:34:
f9:7d:04:2e:ee:de:37:ac:81:32:72:1a:9f:0b:79:
b1:2b:3e:57:88:02:d8:02:51:f5:a7:d3:7e:c7:ee:
4a:db:80:9b:86:7e:69:6f:6f:b5:5f:26:9d:14:30:
63:4e:78:06:b4:bf:f0:df:08:0f:00:90:36:e4:34:
4f:cd:00:56:ca:05:e3:d8:5a:77:82:bf:a0:52:9d:
a9:d7:17:7d:3e:5e:e7:4d:3d:9d:57:d3:21:32:fd:
b6:68:bc:07:8f:35:7d:cf:89:c1:8d:50:a6:f8:99:
1e:4a:c5:e0:d5:b8:8a:25:64:81:45:8e:e7:f4:08:
c8:9b:ed:1b:be:00:c9:6f:17:ba:1c:16:b9:0f:0b:
78:09:8c:94:18:42:ce:7c:53:83:b5:b1:d0:ba:90:
4c:9a:b1:70:67:32:a4:a4:31:6b:e6:5f:bd:64:d3:
ee:ef:e8:1a:f0:53:aa:a0:54:ce:b4:8a:f2:a7:ec:
35:ea:9d:d6:d8:4d:52:e5:8c:c3:5f:84:56:d4:25:
4d:6f:25:30:a4:a5:52:95:ca:0f:f0:02:a2:fa:88:
d9:15:7e:f0:d5:d9:1d:2a:a4:93:1a:e5:06:4d:f5:
cd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:9B:19:80:25:A8:46:49:D1:E3:03:D1:6C:B2:E4:5B:75:A3:90
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1a:e6:e4:07:da:be:b2:28:0a:0b:73:b3:4e:93:1c:3d:ef:
2c:7f:a0:e2:d3:4c:ec:a0:f5:8b:94:7a:89:ea:97:60:1e:de:
58:d4:ac:ec:4e:b7:34:bc:b0:ef:08:1f:ad:11:c5:09:5f:6a:
c4:9c:f8:b0:5a:46:c0:59:56:00:22:f6:f2:41:50:e2:23:b0:
1c:e5:88:00:98:45:8c:10:f5:b9:c0:c0:2d:61:bb:46:f7:a2:
05:d6:88:0b:eb:d8:a8:2f:d0:ec:2a:0e:8b:09:3d:fa:36:63:
f0:ed:b5:01:c1:fe:95:d1:16:33:f5:2a:07:0a:10:7b:4e:8d:
37:f7:4e:fb:fe:1a:1d:c4:70:dd:06:f7:cd:ba:06:62:02:c0:
2d:cf:bb:91:f9:1c:b7:bd:8b:fc:43:10:05:d3:c0:bc:be:a3:
a2:cc:75:6e:9f:ed:84:e8:5f:70:f4:49:bb:f0:65:b4:ef:9e:
c5:b5:f4:33:9c:4c:2b:6b:72:a8:d9:c7:0c:d4:d9:84:c9:84:
ab:2b:00:13:c0:39:54:e2:7d:cf:1e:e9:ad:34:2b:03:77:7b:
df:af:6e:91:3e:af:99:5c:39:79:a0:f1:b1:3a:d0:36:82:f9:
68:68:61:bf:23:d2:b9:0b:75:77:59:14:9e:cd:31:f2:3d:5c:
6d:d6:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:52:32 2026 by rpki-client