Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: YcT+1hIwNkgALKdn/RcSM3006iu3Y/8wXxpMWxRAhT8=
Subject key identifier: C9:36:A8:A6:AA:8B:C3:1C:C9:8A:9D:86:8B:6D:89:22:C3:92:92:E2
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 019FA2970DE545737DDD4B7B36C829C19708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0A1E
Signing time: Mon 27 Jul 2026 08:00:36 +0000
Manifest this update: Mon 27 Jul 2026 08:00:36 +0000
Manifest next update: Tue 28 Jul 2026 08:00:36 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: SRCYjm7TSZalwaNGjGFLvmm8fgX9bTOeEUrT0zeE9vQ=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:0d:e5:45:73:7d:dd:4b:7b:36:c8:29:c1:97:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Jul 27 08:00:36 2026 GMT
Not After : Jul 28 08:00:36 2026 GMT
Subject: CN=c936a8a6aa8bc31cc98a9d868b6d8922c39292e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2a:83:e5:97:d3:e4:fe:11:7f:17:8e:ad:29:
2e:2e:f4:79:61:7b:05:1b:61:29:1f:5c:90:df:d7:
f5:3c:ee:de:70:0a:b8:48:73:9c:9f:b1:11:5a:57:
9d:40:50:93:ac:bf:01:7b:82:a3:cf:60:6e:ac:3b:
ae:d4:cf:61:1d:60:7c:2a:74:db:06:a7:b6:f9:0c:
b8:3c:19:78:24:20:3c:2e:34:6a:74:43:fa:76:1c:
7f:d8:0f:23:ab:91:6c:44:b1:45:20:1c:e1:aa:d2:
c8:8a:3f:5e:0b:51:7a:7f:18:9f:22:c2:b5:57:85:
a4:27:b4:6d:3a:a9:1b:77:04:58:18:70:b7:e5:48:
df:51:7f:4c:3a:90:8e:70:3b:86:87:0a:28:34:2f:
f1:2d:77:ae:79:38:a1:ca:4b:e8:c1:e4:bc:8b:d2:
4e:99:39:c1:f8:4a:e8:21:0a:f9:22:24:9f:16:69:
ab:ac:6f:25:20:6e:3a:79:50:ae:9d:e0:06:16:52:
f6:24:90:58:93:e5:3c:01:2b:3b:da:94:a1:ed:d5:
2c:5f:d2:05:22:4d:6f:51:f1:5f:3c:ca:0b:2d:2e:
94:f7:5b:bd:b2:78:eb:a1:6f:03:63:a8:37:b7:fc:
96:ae:3e:4a:ec:e6:5d:e0:08:9f:e3:9e:58:3a:4f:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:36:A8:A6:AA:8B:C3:1C:C9:8A:9D:86:8B:6D:89:22:C3:92:92:E2
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:05:5c:88:6c:a1:ba:b6:5d:21:c1:78:1d:82:a7:86:ad:
b2:10:17:94:13:00:e6:0a:1f:5b:65:97:28:0c:2a:92:9c:96:
f5:bd:ef:ac:3b:97:ee:7c:70:57:d3:23:0e:08:7b:0d:5c:57:
35:73:0d:f2:67:bd:72:5a:f1:23:b2:94:ef:3e:e0:95:12:02:
aa:92:8b:50:35:32:00:66:b0:24:ff:d7:98:c2:b0:48:d6:55:
49:3d:ea:e2:70:ce:9f:fd:a0:9d:7a:46:bc:16:23:2f:2e:92:
2c:c7:31:65:84:05:aa:b5:8d:0e:1b:ca:0b:bb:cb:9e:01:ea:
80:97:d6:61:e4:f3:33:d5:cd:af:ec:87:b5:6a:fa:9b:47:62:
32:64:f3:16:d0:4a:8a:9b:ff:3f:79:16:c6:25:e0:a8:2d:1d:
5f:91:7c:2c:5b:26:35:6e:7b:ce:7e:39:84:d2:27:d6:8f:25:
13:fc:1b:5c:3f:af:e9:7c:79:b2:44:38:68:01:3f:f5:00:63:
34:f6:3e:72:d0:22:9b:8b:b4:80:7d:50:0e:04:f5:6f:4b:4a:
e2:38:46:ab:48:6f:69:50:c1:a4:75:49:21:21:3f:15:b6:2d:
eb:86:c3:40:6e:88:7f:dd:c8:77:d9:f9:51:44:32:8b:f3:bd:
f6:49:b8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:33 2026 by rpki-client