Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: j1fQuzwF2d30LZAObkx+ESq7Zz8YP7dex3qliLv6dlc=
Subject key identifier: E3:83:31:37:68:2D:42:F7:0A:D1:88:86:88:54:93:35:A4:1D:0F:AA
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019FA33C14D94359477E2EADDF4E938CD5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 11:00:51 +0000
Manifest this update: Mon 27 Jul 2026 11:00:51 +0000
Manifest next update: Tue 28 Jul 2026 11:00:51 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: JsB6TbOICkhHEebA+buwmD1PrDWNIu9LRwJY1zEBSeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:14:d9:43:59:47:7e:2e:ad:df:4e:93:8c:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jul 27 11:00:51 2026 GMT
Not After : Jul 28 11:00:51 2026 GMT
Subject: CN=e3833137682d42f70ad1888688549335a41d0faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:35:d4:34:4c:f6:e7:89:e9:cc:29:ad:4a:ee:
0b:92:e0:27:4a:c7:8f:e3:2e:7a:e7:af:e7:61:c0:
a8:53:2a:4b:8c:06:22:db:74:72:06:18:bf:8f:1f:
e0:d6:fd:78:fb:9a:83:aa:37:ec:77:79:03:49:b3:
0d:05:8e:cd:1c:54:8d:28:84:0e:58:61:24:cc:5e:
98:28:d1:d6:3e:e4:0f:37:5c:2a:2e:63:d1:7b:11:
f4:ef:64:6b:3f:8f:7f:bb:08:e1:53:4f:c4:13:bd:
94:a8:f0:a6:a0:ed:50:77:8d:b1:0c:60:f9:39:67:
7d:74:56:59:df:05:fd:f4:7f:4a:43:ee:2f:24:98:
65:7a:f1:af:2a:18:17:31:13:9e:15:fb:94:b3:da:
88:2e:58:68:6d:b2:30:e2:06:f0:52:c2:89:8c:51:
8b:5c:b7:55:7a:22:4a:15:b8:ef:03:22:38:26:71:
a6:20:f0:1e:d3:dd:f3:ae:17:03:2b:95:26:6c:dc:
81:bb:05:4a:e6:a4:27:3f:81:63:ff:68:eb:6f:63:
be:ce:19:b2:3a:6c:e9:b5:63:5b:0d:a3:16:78:97:
43:3f:72:9e:96:06:61:61:1e:42:8d:75:66:70:74:
f3:10:32:42:e6:d6:02:bd:61:79:57:a5:79:06:4a:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:83:31:37:68:2D:42:F7:0A:D1:88:86:88:54:93:35:A4:1D:0F:AA
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:38:dd:9a:2c:6f:66:34:b7:07:c5:1f:af:43:b4:eb:dd:d3:
05:63:1e:99:f6:84:ef:6a:43:24:79:d1:01:34:f9:79:e3:40:
88:3f:38:a8:6e:dc:40:10:93:84:3b:77:92:ad:54:72:6c:61:
ef:92:65:87:d9:6a:2c:b4:1e:c5:e1:94:45:49:4d:c0:93:54:
09:6e:75:ee:c0:85:2a:46:7b:3a:5b:1f:17:d2:cb:b1:ff:a9:
a1:dc:0d:06:6a:82:92:1d:17:52:07:f4:3c:cd:d4:f5:19:94:
c8:ea:12:3f:9a:7b:a9:80:7f:9f:f7:cf:33:81:4b:da:8f:69:
69:79:4d:37:f5:d7:12:6c:90:93:4e:c1:a5:93:25:b8:e8:35:
b1:a3:86:9d:54:22:24:af:a3:15:41:37:36:45:10:fc:68:f1:
7b:f4:92:04:2e:4a:35:9b:38:b0:5d:91:5e:9b:19:c5:77:20:
20:b5:3b:70:90:1c:53:0b:d0:a3:50:f4:d9:91:b1:8a:e2:68:
5a:09:74:0c:4d:0d:3c:03:4e:ee:5b:23:85:26:ee:b6:ce:b4:
d1:f8:8f:7d:9b:f2:21:5a:08:f5:79:5b:f3:9f:ba:8b:d5:e1:
0d:f3:3d:4f:62:7f:ea:21:3a:59:f1:49:42:10:9e:58:57:70:
30:94:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:13:35 2026 by rpki-client