Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: wSIePUGsSw+WVcsGcO5sjO0dGgf7BmQKGT/UI6Dn1wY=
Subject key identifier: 14:9D:EA:64:43:F5:5F:28:4E:7A:EC:16:85:87:2A:6D:9C:20:8B:2C
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019FA2CE3D5C100717FA5166CA8949BB3ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 09:00:52 +0000
Manifest this update: Mon 27 Jul 2026 09:00:52 +0000
Manifest next update: Tue 28 Jul 2026 09:00:52 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: rrkclMs8J+5eAtGqTMIVTIcVBVw8CWBQB89O4zfYyPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:3d:5c:10:07:17:fa:51:66:ca:89:49:bb:3a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jul 27 09:00:52 2026 GMT
Not After : Jul 28 09:00:52 2026 GMT
Subject: CN=149dea6443f55f284e7aec1685872a6d9c208b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:e4:06:0f:f1:2b:36:e3:71:83:28:da:32:
4d:8e:ab:da:36:e3:b6:07:2a:71:2e:9e:9e:3c:ef:
3b:44:3d:b7:ac:b5:1f:32:1a:d1:1c:df:03:7b:72:
0e:00:f4:d4:30:ae:b9:4b:4c:25:1f:6d:e7:dd:f5:
94:1d:7f:0f:f4:fa:b3:54:9e:33:02:9e:94:79:43:
39:0a:b5:84:de:d2:68:1e:ae:58:1e:c0:1d:78:e4:
2d:c7:bf:c0:4d:83:7a:62:ea:d4:35:9f:8a:41:66:
28:b5:3b:ac:8a:16:58:f6:4e:c6:3b:74:0d:4e:10:
07:76:03:e8:12:c5:10:5b:90:34:f3:af:c7:29:ac:
88:66:59:81:b6:7b:fa:3f:5b:10:92:01:79:04:89:
dc:11:1b:b2:a3:29:df:08:cc:65:8c:57:7e:bf:bb:
bf:95:29:cb:3b:4e:3a:64:3b:ac:47:4c:b2:56:78:
83:6c:c3:3e:99:b2:5c:c1:89:ec:73:d9:31:ff:be:
1b:ff:7e:47:19:26:3f:9d:20:b3:9a:e5:f2:c9:ad:
16:09:7b:b9:d9:c3:c5:d2:85:67:1c:22:78:f9:e6:
c7:de:ae:02:ff:1b:ae:33:fb:9b:40:b3:9c:d0:ad:
35:fc:4e:54:be:af:20:61:01:bf:75:ed:b2:e9:97:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9D:EA:64:43:F5:5F:28:4E:7A:EC:16:85:87:2A:6D:9C:20:8B:2C
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5c:6b:48:4e:96:3f:5e:f2:cb:44:16:df:d6:67:0c:84:a5:
4e:7c:33:26:70:d2:7f:15:dc:4d:74:a6:7f:7c:1f:77:87:40:
73:7f:12:e0:ab:a3:fb:72:2d:28:69:0f:b3:83:48:6c:bd:c4:
e7:03:61:5b:43:24:12:58:2f:a7:bb:6b:28:1e:b9:60:61:cf:
7d:f8:a8:41:79:83:c7:6f:a0:d1:03:80:e4:1c:85:38:b7:d0:
ee:43:b5:3b:ec:b2:0e:7a:60:32:db:53:e6:1a:65:df:54:ba:
3a:5b:0f:da:4e:22:08:37:5f:37:60:ac:f1:5b:8c:56:85:d8:
46:ad:d2:4c:39:08:4c:68:cb:e5:81:49:1c:21:57:2d:ff:75:
17:fc:c4:96:a6:75:c6:ee:d8:95:5c:dd:6e:57:8c:07:ce:be:
8b:ac:a0:ea:39:fa:08:eb:c0:eb:b5:b7:20:46:e0:9b:ba:3c:
d3:9c:02:1c:99:15:0a:a8:90:ca:88:86:5c:1d:c9:83:d1:40:
a5:e5:e8:00:78:e6:ac:43:a7:26:6a:f5:15:c7:f5:83:e5:df:
ae:e0:d1:e1:44:de:d8:7a:c4:8a:ca:86:d9:c2:d6:06:dc:92:
78:99:d1:51:79:14:a4:94:e7:96:05:af:ac:4f:93:1a:51:08:
8d:cd:51:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:48:03 2026 by rpki-client