Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: nmeBnQopfaFltsTnKP3+e8HWHY3lnasz6v31x9Fb4X8=
Subject key identifier: 0B:64:B1:71:BE:A9:6F:05:5D:A1:33:88:D0:90:6C:D7:83:CB:5E:7C
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019F848CCAAAE18389340550A7BDC46CA5E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0A98
Signing time: Tue 21 Jul 2026 12:00:47 +0000
Manifest this update: Tue 21 Jul 2026 12:00:47 +0000
Manifest next update: Wed 22 Jul 2026 12:00:47 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: vjOB49tv7bFGbmOdz0haOT2kcLPg1MItQ9sYLYKXvqQ=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8c:ca:aa:e1:83:89:34:05:50:a7:bd:c4:6c:a5:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Jul 21 12:00:47 2026 GMT
Not After : Jul 22 12:00:47 2026 GMT
Subject: CN=0b64b171bea96f055da13388d0906cd783cb5e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:27:82:df:42:6d:a1:f6:be:30:a6:26:b3:
30:3a:68:9a:ee:5d:88:80:0b:0a:bc:45:6c:e7:2e:
b4:42:a1:be:09:d6:17:4d:8c:dc:53:cc:57:08:2b:
0f:d7:48:2e:05:2b:55:35:31:ba:d4:68:c3:90:dd:
90:38:42:83:b1:78:dc:45:37:3a:59:19:b1:83:75:
4c:ff:05:e6:51:42:8f:66:f1:7d:27:f6:68:e0:ec:
6f:bc:bb:35:d5:56:72:04:04:0a:2c:be:39:d7:fb:
a0:ad:ed:e3:4a:1f:c5:bb:16:7f:28:60:cb:6e:97:
7e:e0:25:bd:7e:c5:bf:2c:93:e9:9d:c8:6e:e9:c5:
a3:14:d8:eb:36:c3:11:35:fe:a4:35:84:87:2c:34:
aa:b8:a6:7e:d6:2d:07:b1:df:b7:01:3a:a2:10:78:
f4:d3:08:e9:e9:83:95:a4:71:1b:57:8e:0d:14:8e:
40:be:af:16:c5:71:7c:f8:17:b4:7f:e2:98:c8:f3:
c9:58:ab:ff:70:14:fd:41:3f:e7:05:5d:33:61:c3:
00:6d:74:fd:d9:94:44:39:b0:b9:1e:dc:a2:66:d1:
9f:20:d6:68:c1:8e:0b:b7:6e:47:20:2f:84:38:e8:
ed:cc:6a:0f:1c:81:1c:ca:f4:b9:34:77:f1:11:86:
54:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:B1:71:BE:A9:6F:05:5D:A1:33:88:D0:90:6C:D7:83:CB:5E:7C
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:57:90:54:91:0c:99:b4:53:8d:43:b1:ea:37:ce:f0:d7:44:
2d:dd:3c:c3:1e:35:ae:99:c9:96:34:40:32:08:1e:ed:88:7e:
f2:d2:5a:8c:28:fb:a8:68:18:57:18:a6:4a:70:bd:6c:9c:9f:
85:b0:dd:45:78:d3:5b:19:b8:46:7a:76:30:c7:fe:16:4e:54:
77:3b:50:01:ad:4b:ed:49:97:7d:8b:f4:3b:0e:98:8c:c1:16:
7c:db:39:90:cb:c4:64:21:29:fc:43:03:9e:c8:02:b3:cc:95:
95:b8:c9:40:4f:ed:ec:23:04:9d:c9:0d:ca:bf:29:13:79:bb:
e1:66:37:c2:1e:2e:5e:4a:e7:25:46:39:9b:82:95:07:22:37:
3d:6d:d5:df:a7:15:92:81:4b:13:db:eb:4c:ed:fb:54:f3:78:
bc:23:01:e5:4f:07:3d:01:df:69:11:10:4f:b7:9a:de:70:91:
33:f9:31:0c:47:db:a8:3c:58:da:4c:5d:ed:8e:25:20:a0:6a:
dc:06:b4:75:69:ab:ef:be:e0:1c:71:03:10:8f:21:15:a1:81:
d2:ce:0e:c9:87:98:8e:0c:35:20:50:dd:15:80:d9:93:9f:ce:
34:97:b8:00:13:5e:fe:25:d8:cc:0f:70:b4:b6:fc:f7:9a:ac:
f2:d2:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:20:07 2026 by rpki-client