Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: c9lRsDqALXm2KF9G+VUeiCO0FCoNTSQkRXduUQpUXOI=
Subject key identifier: 95:3F:74:05:9F:89:81:50:C9:D0:7C:A1:49:0B:1B:4A:6E:E0:29:EB
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019FA14DB188135E0B1872E7C44E56D046CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 19D9
Signing time: Mon 27 Jul 2026 02:00:51 +0000
Manifest this update: Mon 27 Jul 2026 02:00:51 +0000
Manifest next update: Tue 28 Jul 2026 02:00:51 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: jfPlDsBvjsRVMSmxXa4D55HUX+r71SnMl3D6FeAUCLo=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:b1:88:13:5e:0b:18:72:e7:c4:4e:56:d0:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jul 27 02:00:51 2026 GMT
Not After : Jul 28 02:00:51 2026 GMT
Subject: CN=953f74059f898150c9d07ca1490b1b4a6ee029eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:71:f9:36:a5:9a:e5:e6:04:37:5a:36:f7:
47:9f:1a:6d:91:f6:f7:29:78:28:5a:1e:91:d1:3c:
d7:22:d3:42:0c:f5:74:11:66:53:c7:d9:dc:d1:91:
17:50:43:8d:5f:e2:ad:ee:e2:4f:6e:9e:26:c4:35:
86:4a:b4:00:a6:f9:7c:30:66:21:32:58:1d:d3:6b:
11:0a:5c:80:44:43:59:23:89:9c:72:0a:98:ee:30:
54:f2:c5:f4:e4:51:4e:77:21:1e:a5:f9:b9:83:56:
cd:91:6a:cd:c3:11:94:18:36:09:7b:b1:89:b0:eb:
5f:c5:d8:50:1d:34:7b:21:13:33:fd:3e:35:1a:d9:
90:eb:fb:3d:33:a5:e9:20:25:09:10:37:7a:03:41:
ec:d8:50:79:f6:d1:32:e0:e0:35:da:d7:24:b2:d8:
f4:b5:83:93:23:9a:97:a7:4b:ef:85:18:0b:91:17:
b8:af:70:01:26:4f:38:95:e2:83:fa:47:d5:d4:58:
88:92:05:7a:b4:ea:d4:7e:4f:6f:16:e4:34:22:f3:
05:42:69:cc:c2:92:35:e3:42:09:b1:e8:4c:7d:c8:
f8:fe:d9:57:10:e3:c8:26:4d:47:54:6b:6b:a1:ad:
0c:a7:b4:bc:20:71:17:fc:9a:8a:20:79:59:d9:40:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3F:74:05:9F:89:81:50:C9:D0:7C:A1:49:0B:1B:4A:6E:E0:29:EB
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:92:99:4f:46:96:92:e7:ea:a9:51:94:d9:3d:85:f2:19:ed:
46:ac:08:77:60:89:07:be:bb:84:2e:a1:1f:7c:44:37:15:b5:
c0:49:cb:a3:ae:58:d9:a7:8a:77:c1:9a:ef:08:96:00:54:43:
6a:44:ef:60:06:ea:d8:03:b1:73:34:8b:4b:68:8e:50:83:01:
ce:88:a7:e6:9a:b0:1b:e4:c9:e6:a9:fc:90:44:b6:b2:32:02:
9c:58:50:96:ad:c5:9f:7e:5c:f6:6e:48:fc:d6:5e:3d:81:93:
60:29:d5:93:9e:3c:88:98:2d:e2:9d:26:67:b1:d5:cb:d4:8f:
f0:7f:ca:c7:7d:7d:c3:24:20:4a:9f:be:3f:fb:b1:e4:ee:ca:
41:bb:e9:27:23:13:85:6a:63:ab:59:f8:c8:cf:ec:f0:5e:8a:
1e:00:cd:ec:86:f2:28:f7:d0:f2:66:53:e0:90:f3:9b:6a:b0:
59:ea:ca:d7:e1:ec:9c:14:44:c0:3f:c9:1c:a4:1c:70:f3:77:
7a:98:40:04:89:2e:b1:4b:77:be:f6:bd:9a:40:b4:17:7f:6d:
25:8d:0d:91:21:b4:84:a5:3e:9e:b3:6c:8d:e3:0f:43:d8:c4:
b0:6d:bb:31:0c:d0:0d:54:93:15:3c:a7:eb:1f:61:b8:01:0a:
62:f3:e3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:16 2026 by rpki-client