Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: qn5shxSyP6UPN/qwMqN1omFrZu6j2WXt8vEN0JozeEQ=
Subject key identifier: 57:A6:F9:AF:17:40:DE:AF:AC:EE:33:A3:68:3D:F7:89:13:38:0F:55
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019FA3AA70AD74C36A4BFFE200B7CFC99C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0D05
Signing time: Mon 27 Jul 2026 13:01:23 +0000
Manifest this update: Mon 27 Jul 2026 13:01:23 +0000
Manifest next update: Tue 28 Jul 2026 13:01:23 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: XX99sHavmE1pyM23rWQxa7kdxINWNJF1XGqdhUN858U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:aa:70:ad:74:c3:6a:4b:ff:e2:00:b7:cf:c9:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jul 27 13:01:23 2026 GMT
Not After : Jul 28 13:01:23 2026 GMT
Subject: CN=57a6f9af1740deafacee33a3683df78913380f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:7a:52:d9:e8:0b:ab:f7:3a:71:29:42:14:
34:91:21:4f:8a:2a:95:5e:15:35:62:b2:9a:c2:9f:
89:06:26:b4:c8:b4:2f:97:b8:63:f6:51:d2:b2:2f:
18:39:b0:41:18:0b:3e:30:83:fc:08:1f:64:b1:fe:
3b:a5:1e:e1:97:77:27:7d:51:0f:a5:a1:79:f7:fb:
9b:2b:c9:b4:e2:cf:17:7d:2b:f8:f2:ee:81:9c:2d:
f5:d1:4a:7b:8b:e5:44:33:03:dc:20:73:df:36:f9:
1b:05:c7:25:14:87:20:68:51:c7:81:c7:2c:01:79:
be:5b:ac:7d:06:82:f9:ce:ef:b6:9b:86:38:99:0d:
72:72:a1:f9:80:11:f3:e7:10:6d:99:e9:d2:6b:6e:
8c:8a:0c:f8:46:05:19:44:ed:dc:a9:99:dd:a4:ac:
f1:c5:df:46:fa:cc:a7:0d:df:b0:aa:3d:4d:55:10:
b1:92:de:91:ec:a5:b9:de:39:8b:b4:69:74:a3:33:
36:91:33:2e:e0:40:91:aa:a3:0b:65:8b:ec:87:46:
4a:57:d1:81:1d:83:85:9f:86:06:f4:5b:0a:3b:7a:
ac:b1:65:82:35:05:30:95:cd:c6:54:7e:68:86:3b:
f7:43:f5:bc:ec:b3:4c:95:85:fa:d4:0d:bd:a0:24:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:F9:AF:17:40:DE:AF:AC:EE:33:A3:68:3D:F7:89:13:38:0F:55
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:85:c2:da:04:9a:60:ef:47:a7:46:be:c8:a3:70:f9:63:ce:
97:74:b8:2c:41:d5:fa:9d:aa:52:c5:10:b4:64:0a:4f:6c:a1:
fe:81:a0:33:71:e1:2d:71:2f:d6:f8:6b:84:fb:96:45:e8:bf:
a7:7b:95:36:08:f9:a5:2c:87:a9:8a:e6:33:26:7e:02:b7:40:
69:96:8f:12:77:53:7e:99:8a:75:b9:40:3d:d7:f7:d9:f3:35:
29:8a:4b:1d:de:a8:21:26:40:9e:cf:02:53:c0:4f:af:b5:68:
b1:4a:5e:7b:15:99:6b:2b:9d:bc:e4:92:ba:e6:f6:d6:ea:9a:
b3:a3:14:4b:d1:f6:0f:b7:d4:40:d5:91:4c:e1:89:e1:cb:86:
e1:47:21:cd:96:e4:5b:7c:98:07:e4:f4:a2:d6:6c:82:0c:48:
7d:50:60:c7:36:38:8e:67:7f:69:7c:09:76:5b:0e:58:75:c5:
63:81:b6:97:54:fb:c1:8d:50:33:18:4a:a6:4e:c6:80:2f:d1:
21:1e:7c:31:65:3b:5e:1f:75:02:21:ee:0a:21:8b:4a:36:b5:
11:9c:a4:52:31:a1:04:27:db:63:8f:bd:31:4e:0e:2b:ec:aa:
ce:6b:b8:fe:9c:b2:d2:18:55:09:12:30:f2:99:21:eb:55:cc:
23:c6:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:50:44 2026 by rpki-client