Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: JQ19xJMJdzbxY9jrhyBtGseM9lQRbmeDjROxJmOAeKA=
Subject key identifier: 05:D5:83:A5:36:E0:FE:AE:35:95:5F:97:80:E6:97:00:1A:F6:32:E5
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019FA1BB7255A7E707E9567A7E366A50E879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0FD0
Signing time: Mon 27 Jul 2026 04:00:43 +0000
Manifest this update: Mon 27 Jul 2026 04:00:43 +0000
Manifest next update: Tue 28 Jul 2026 04:00:43 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: v3nyB/Flk0d2DdJEmdxvm4dIqHVckqYNIW35yPcVt18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:72:55:a7:e7:07:e9:56:7a:7e:36:6a:50:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Jul 27 04:00:43 2026 GMT
Not After : Jul 28 04:00:43 2026 GMT
Subject: CN=05d583a536e0feae35955f9780e697001af632e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:d3:f3:27:76:a6:8f:66:54:a7:d4:1e:63:
70:7a:93:99:f3:0b:52:c0:97:83:0a:58:3c:fd:ab:
e6:45:f4:b6:e5:71:bd:d0:ca:dc:1c:d5:e5:25:6f:
ca:02:0d:66:0a:7a:92:80:2a:4d:09:e7:84:62:04:
e9:1d:f2:46:88:49:57:e1:e6:ad:f9:dc:d2:e2:94:
49:0d:59:06:d5:50:74:f2:3e:cc:27:c9:b5:29:98:
b3:58:b7:ee:7e:e5:f0:20:28:e4:1f:34:04:31:a2:
59:ca:f3:2e:78:8e:50:49:4f:74:f7:7c:98:03:03:
50:a1:3f:99:bc:f7:c9:f2:ca:0d:cf:df:a4:b4:7c:
05:e0:30:60:3f:a9:8c:ec:f0:4a:c2:ba:01:5e:c9:
e5:e3:03:ca:ba:c5:5a:28:31:c0:ff:33:73:af:d5:
95:6d:18:1f:54:b8:94:f0:b1:55:aa:cd:61:ae:01:
25:2b:9c:3f:04:0b:f6:15:ec:5e:76:c2:f4:8f:ce:
45:29:06:6f:14:91:e5:91:d2:22:d1:9e:ce:e1:25:
c6:d1:3b:7b:be:6f:cd:c8:c1:72:59:0f:9e:76:e1:
ad:0c:69:1e:62:ba:c4:53:c5:d1:ea:cc:93:fe:7d:
89:b5:94:04:ac:d6:ab:33:1b:9a:8b:8a:16:9e:c3:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:83:A5:36:E0:FE:AE:35:95:5F:97:80:E6:97:00:1A:F6:32:E5
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:85:0c:3a:4b:3c:10:72:e2:1c:7a:96:82:ef:a3:ce:9d:
c0:cd:fb:9f:ad:66:42:3f:e9:6e:ed:9d:0e:7e:bf:b8:12:93:
9f:a8:bd:5c:7e:a4:3b:e4:2c:cb:94:1b:f6:19:a4:52:10:b9:
7e:7b:78:7d:a5:2b:d0:23:24:cb:65:46:3b:ee:2c:83:7b:09:
7c:5f:ca:ce:24:e2:34:c6:02:76:ca:ba:e7:e1:c8:fe:33:29:
21:dc:d6:48:3d:c8:30:c5:0d:64:d3:14:c3:85:68:8d:61:2b:
7f:37:16:76:4b:e3:97:62:6a:a7:2e:c0:13:fb:08:56:54:1e:
bf:27:10:85:33:22:b3:f6:4c:6b:62:9c:54:07:e7:59:68:46:
2c:14:38:2c:6f:06:58:29:ad:e9:94:31:d1:9e:e8:49:95:f8:
1d:c3:77:bd:50:44:9b:f7:b8:36:61:f7:2b:c3:35:41:48:0d:
b2:76:e7:b1:e2:b9:18:3c:31:87:9e:fb:57:37:df:c0:83:77:
5e:ae:07:06:91:60:85:c6:da:83:66:8b:b2:19:74:1f:d5:3e:
22:50:e1:68:a0:f8:bf:df:4b:33:92:6a:27:1b:a8:4c:e9:f8:
6b:51:c5:27:fc:ab:84:43:03:95:a7:b8:0c:1a:c0:af:67:18:
7c:ef:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:32:44 2026 by rpki-client