Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
File: Y-5tHR7Mr5eZu9XyttrORtht9Is.mft (raw, json)
Hash identifier: vNoiokFvZCctZKT0LphAD5bQeFey42yTGdq6k/TLeUc=
Subject key identifier: 09:50:91:95:49:02:F2:45:71:63:90:E2:7E:F0:D1:FD:B6:CA:F6:45
Authority key identifier: 63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
Certificate issuer: /CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Certificate serial: 019FA00404CC435723ACB4CD62AAE69B4314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
Manifest number: 08A7
Signing time: Sun 26 Jul 2026 20:00:45 +0000
Manifest this update: Sun 26 Jul 2026 20:00:45 +0000
Manifest next update: Mon 27 Jul 2026 20:00:45 +0000
Files and hashes: 1: 6ZBPRGxMRhzUL39PVDVSduo6FUc.roa (hash: mXhPY8g7CrKLHAIlSEURMCEabcnrrTvn2LVrA4zymb8=)
2: B0WU8sYjxbF2I99DOG4CZtJFemU.roa (hash: kZf8Vi7lYB4Gl+U+zxW5wY6bn3f+hQC1mSLMVib18Xg=)
3: Y-5tHR7Mr5eZu9XyttrORtht9Is.crl (hash: mj3CzX5J8+yfCHBJrOaNfmt313RtUXhX0NYEPUFvRkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:04:cc:43:57:23:ac:b4:cd:62:aa:e6:9b:43:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63ee6d1d1eccaf9799bbd5f2b6dace46d86df48b
Validity
Not Before: Jul 26 20:00:45 2026 GMT
Not After : Jul 27 20:00:45 2026 GMT
Subject: CN=095091954902f245716390e27ef0d1fdb6caf645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:bc:b2:02:4f:90:a8:cc:4e:58:ad:db:3b:
10:2b:25:58:4b:19:fa:bc:5c:84:92:43:d3:2a:48:
32:f0:f6:79:b6:a8:a6:e2:e9:6b:89:0f:7d:15:cf:
7d:37:b5:31:44:8f:6b:ea:25:73:b0:20:ce:08:d5:
bf:a5:2c:3b:cf:f3:29:bb:5b:d4:e9:69:ee:42:4a:
d2:50:d3:70:12:a3:cc:3b:c0:27:fd:79:5e:05:e5:
4d:f0:41:20:01:9a:8c:38:0c:48:97:1b:54:11:e6:
f5:a5:b3:81:3d:fe:fe:9c:ee:f1:d4:46:fd:cd:51:
4d:a1:ed:41:80:d5:77:37:a7:a3:36:56:03:01:53:
84:d1:84:20:68:c4:00:69:7f:f7:27:33:d9:ae:41:
e2:21:14:8d:89:ad:9b:37:3a:65:cc:f6:6f:b1:c8:
3c:a5:67:e0:14:06:ab:af:df:9b:39:d2:2a:d4:75:
66:d8:e6:97:ee:02:21:6e:5c:ec:ae:ac:b5:7a:c9:
42:d3:fd:96:aa:29:e3:19:83:78:33:41:a3:2e:19:
64:0b:4b:33:34:30:85:4d:38:d0:ab:cf:9c:f7:d9:
82:51:e9:0a:a6:47:17:71:1b:75:64:d7:0b:7e:eb:
93:e7:88:f0:b5:ce:70:d1:b1:38:2f:55:47:c0:fa:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:50:91:95:49:02:F2:45:71:63:90:E2:7E:F0:D1:FD:B6:CA:F6:45
X509v3 Authority Key Identifier:
keyid:63:EE:6D:1D:1E:CC:AF:97:99:BB:D5:F2:B6:DA:CE:46:D8:6D:F4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-5tHR7Mr5eZu9XyttrORtht9Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/5dc1d9-eba4-42c8-b3d6-d1c5f1b51e17/1/Y-5tHR7Mr5eZu9XyttrORtht9Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7e:6d:e1:c1:0b:66:c4:f8:51:de:24:d9:66:d1:20:8f:ae:
a9:35:c0:99:c8:a7:38:0d:67:01:c3:6f:3b:ab:8b:67:b0:f5:
8d:ec:df:0c:5b:bc:54:b6:a0:85:37:84:ca:7a:82:e1:39:8f:
27:d2:91:aa:dc:fb:dc:b2:d0:ba:64:1e:82:27:c6:ba:d4:9e:
ba:86:63:68:a0:ab:b9:f3:d1:0f:fb:df:cf:69:be:72:d4:30:
0f:2b:d1:93:47:6d:83:73:77:3d:08:07:8e:fd:bb:25:b9:bc:
da:6a:85:82:1d:40:af:13:e3:1e:55:ae:17:c5:8d:66:b9:8e:
53:b0:e3:13:05:22:d3:0e:e4:92:7d:ef:aa:e4:f9:d7:49:f3:
4c:cc:b0:d6:8e:e8:4d:73:86:af:5c:2a:28:7e:6f:9a:8f:5b:
65:1d:a3:68:f4:c9:5b:8a:28:e8:59:f0:3f:58:0e:20:de:d6:
62:65:96:36:37:1c:83:05:d0:ae:7a:32:12:2e:20:ea:0e:6f:
5e:c0:eb:85:e5:3c:d0:18:99:5c:dc:08:4e:7a:5f:b5:97:4c:
3b:7c:9a:94:61:21:db:00:2a:0a:38:1a:19:b9:21:aa:02:14:
70:ab:a6:50:ed:41:d9:e3:ab:0d:2b:79:bf:e8:bc:ab:47:88:
58:42:bf:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gBATMQ1cjrLTNYqrmm0MUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZWU2ZDFkMWVjY2FmOTc5OWJiZDVmMmI2ZGFjZTQ2ZDg2
ZGY0OGIwHhcNMjYwNzI2MjAwMDQ1WhcNMjYwNzI3MjAwMDQ1WjAzMTEwLwYDVQQD
EygwOTUwOTE5NTQ5MDJmMjQ1NzE2MzkwZTI3ZWYwZDFmZGI2Y2FmNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ta8sgJPkKjMTlit2zsQKyVYSxn6
vFyEkkPTKkgy8PZ5tqim4ulriQ99Fc99N7UxRI9r6iVzsCDOCNW/pSw7z/Mpu1vU
6WnuQkrSUNNwEqPMO8An/XleBeVN8EEgAZqMOAxIlxtUEeb1pbOBPf7+nO7x1Eb9
zVFNoe1BgNV3N6ejNlYDAVOE0YQgaMQAaX/3JzPZrkHiIRSNia2bNzplzPZvscg8
pWfgFAarr9+bOdIq1HVm2OaX7gIhblzsrqy1eslC0/2WqinjGYN4M0GjLhlkC0sz
NDCFTTjQq8+c99mCUekKpkcXcRt1ZNcLfuuT54jwtc5w0bE4L1VHwPpmDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlQkZVJAvJFcWOQ4n7w0f22yvZFMB8GA1UdIwQY
MBaAFGPubR0ezK+XmbvV8rbazkbYbfSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYt
ZDFjNWYxYjUxZTE3LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81ZGMxZDktZWJhNC00MmM4LWIzZDYtZDFjNWYxYjUxZTE3
LzEvWS01dEhSN01yNWVadTlYeXR0ck9SdGh0OUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVH5t4cEL
ZsT4Ud4k2WbRII+uqTXAmcinOA1nAcNvO6uLZ7D1jezfDFu8VLaghTeEynqC4TmP
J9KRqtz73LLQumQegifGutSeuoZjaKCrufPRD/vfz2m+ctQwDyvRk0dtg3N3PQgH
jv27Jbm82mqFgh1ArxPjHlWuF8WNZrmOU7DjEwUi0w7kkn3vquT510nzTMyw1o7o
TXOGr1wqKH5vmo9bZR2jaPTJW4oo6FnwP1gOIN7WYmWWNjccgwXQrnoyEi4g6g5v
XsDrheU80BiZXNwITnpftZdMO3yalGEh2wAqCjgaGbkhqgIUcKumUO1B2eOrDSt5
v+i8q0eIWEK/3w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 01:03:19 2026 by rpki-client