Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
File: y0QccfqMdkotwsDswYPlLSOnrh8.mft (raw, json)
Hash identifier: Jtk6z6s3wNnb6PviBt7nDx+PU/L+Mcg8Hz+g9lvvfOU=
Subject key identifier: 6D:9B:68:36:79:F3:E2:4D:29:54:B7:D2:26:CA:CF:93:D2:C2:E1:57
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019F57B4E9E7D3BC9FD6DF8560D06905496D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
Manifest number: 91
Signing time: Sun 12 Jul 2026 19:01:41 +0000
Manifest this update: Sun 12 Jul 2026 19:01:41 +0000
Manifest next update: Mon 13 Jul 2026 19:01:41 +0000
Files and hashes: 1: G83V1nWk1M0pYAHDfAvxnUMwSMA.roa (hash: j4wXmxdv/0enwpuVvGc3vBJ4lXdgd81VwD2IbAUVpeo=)
2: a_xgCSeQn5Ssbn8baCisaVeCEIo.roa (hash: mm9SsTEQyCJpAwPRjfFIv0OGNftc+iPyUjxpgaN7qkA=)
3: y0QccfqMdkotwsDswYPlLSOnrh8.crl (hash: p3aPsOvpi1lum24UqNMWUKaZ19J7ln61cY6ncyoJOVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:57:b4:e9:e7:d3:bc:9f:d6:df:85:60:d0:69:05:49:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Jul 12 19:01:41 2026 GMT
Not After : Jul 13 19:01:41 2026 GMT
Subject: CN=6d9b683679f3e24d2954b7d226cacf93d2c2e157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:16:66:9e:c5:0f:df:06:51:0b:f3:8d:99:18:
46:1b:42:d4:e1:00:ae:64:41:17:1a:3f:f1:10:a0:
d9:af:bd:4b:68:d7:2b:27:aa:d1:e2:e1:8d:c5:c3:
1d:0a:b4:d7:3c:02:c9:13:39:6c:08:20:8c:3b:0d:
2e:7d:3c:53:19:59:09:a0:35:30:73:e5:e0:89:b3:
8a:0a:dd:34:93:5f:4a:37:26:48:90:bd:c2:ae:fa:
22:28:10:41:6e:13:c8:8b:3a:62:2c:98:38:f6:60:
16:54:7b:d1:89:70:7f:bd:8f:dd:19:f5:59:fe:e6:
eb:26:59:a1:8c:16:10:12:70:07:45:57:0e:2c:57:
b4:dc:e0:10:38:01:3b:70:31:3b:e0:0e:fc:5c:5d:
fc:1f:75:50:00:68:e7:18:a9:99:64:e9:ff:70:43:
47:b5:c3:95:3c:9c:31:76:b7:3c:ea:86:65:02:de:
2f:e2:60:08:6e:60:39:f9:9c:f6:e0:a3:3a:ff:bf:
6d:c4:5f:84:a7:fd:e9:23:4c:01:f1:cc:eb:78:1e:
33:48:b9:b0:fb:3c:31:19:93:40:b2:7f:f8:99:f6:
75:fa:7e:0b:a9:52:15:51:68:b5:91:54:c6:fb:66:
90:dd:98:c6:e6:37:5a:71:05:c2:36:31:5b:dd:a8:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9B:68:36:79:F3:E2:4D:29:54:B7:D2:26:CA:CF:93:D2:C2:E1:57
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6f:3c:f3:97:42:6c:58:6f:d2:ed:60:5c:9b:36:a3:d0:84:
2d:84:db:0b:d5:76:e9:4c:12:c2:33:64:23:4e:5a:ca:23:6d:
dd:0e:6a:cd:bd:e8:36:fb:40:b1:01:33:58:b7:11:c1:70:85:
ed:78:78:39:43:d4:de:83:19:3c:f4:13:5a:10:4f:f2:32:93:
07:5a:ba:8e:d1:ac:f3:a2:ab:e5:1c:a6:e2:f1:c9:76:f6:25:
d7:e1:40:10:98:1b:97:a1:c6:12:d8:4c:19:86:7e:30:4d:43:
2a:66:27:a7:d2:90:eb:97:87:fd:1b:e4:c4:b5:a7:19:5e:6f:
21:c1:5a:c8:fc:a8:77:89:a3:8a:7a:57:48:98:2f:5a:b3:be:
c9:b6:40:1d:03:28:cd:13:a6:1e:6f:6e:e5:1c:31:0f:62:d2:
b7:bf:b0:a9:d7:fa:b3:31:44:2a:17:fb:d9:78:33:19:d4:bc:
a8:7b:e9:d4:23:e1:20:4c:b8:43:42:73:fc:95:dc:10:3c:a2:
63:a7:b3:2d:83:c0:21:47:38:5e:ea:e2:46:f2:8e:a0:84:6f:
02:1b:db:d9:ef:b8:42:ce:94:93:54:eb:26:70:16:69:74:71:
23:a1:9a:99:bc:a3:fa:7b:54:3b:8e:06:c0:82:df:71:88:f9:
cf:9a:ac:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:14:54 2026 by rpki-client