Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: ZdFte2a7W3uM/bahcAV9RiuRsOf8pKOBweckPeGf7eY=
Subject key identifier: 75:6B:54:76:0D:66:70:B0:1A:C9:C8:82:BB:64:3F:BC:4F:99:59:2E
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019FA184B5DD7197E6D6336E47D6FB89E38F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 04B9
Signing time: Mon 27 Jul 2026 03:00:56 +0000
Manifest this update: Mon 27 Jul 2026 03:00:56 +0000
Manifest next update: Tue 28 Jul 2026 03:00:56 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: dxEJ6Qu4QW19L+8jVLFzqwj9GEC4LTNwp1QjLSdcVHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:b5:dd:71:97:e6:d6:33:6e:47:d6:fb:89:e3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Jul 27 03:00:56 2026 GMT
Not After : Jul 28 03:00:56 2026 GMT
Subject: CN=756b54760d6670b01ac9c882bb643fbc4f99592e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:3f:be:e0:91:93:44:36:c0:23:9d:c7:89:
df:96:9b:01:35:35:7f:ce:78:81:44:42:02:bb:7e:
7a:53:47:d9:29:33:d5:68:41:31:b2:ed:45:fe:f1:
7d:ad:34:31:ad:b2:76:9b:41:d5:30:b6:7c:43:13:
df:15:ff:f7:f7:9b:78:2e:66:a0:a8:d0:f9:19:8a:
72:67:8b:0d:0d:0e:ff:3a:a0:0e:fe:be:fe:d5:28:
ce:eb:bd:58:2f:cf:6c:01:c5:46:97:92:2a:ce:04:
6b:33:fe:13:a9:97:2a:89:56:28:a9:23:5c:5c:ea:
05:bb:d4:a1:43:a2:d2:47:c0:e4:f4:15:6e:d8:ff:
19:c2:36:4b:88:97:7a:e8:7d:38:47:76:6e:b8:9b:
f6:88:40:34:04:89:53:46:6d:04:3e:b7:d4:8f:ba:
c5:6e:db:12:63:1d:e9:cf:a6:00:a3:02:6c:93:7f:
d7:ff:85:de:9d:d3:8a:27:3c:52:5b:19:0a:4c:b8:
27:ab:f2:ba:6c:fe:5e:8e:6c:9f:bd:b0:da:84:bc:
d7:bf:f3:31:30:e9:26:e9:2b:1a:54:c2:94:66:4d:
9a:16:b9:d0:15:fa:4f:41:c0:e4:bf:2a:36:2a:4c:
d1:91:53:d6:39:38:95:7f:f2:ce:0e:cd:30:e6:b8:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6B:54:76:0D:66:70:B0:1A:C9:C8:82:BB:64:3F:BC:4F:99:59:2E
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:33:df:74:76:21:b0:e6:8c:ff:40:c6:9b:4a:5b:70:c3:04:
0d:0f:25:4b:b9:3e:c3:74:9c:a5:a4:ce:4a:23:c0:8c:2d:bb:
94:ba:6a:b4:1c:3d:de:ed:3a:62:cc:a9:8b:0e:79:d8:31:82:
53:29:ea:37:bf:85:f3:9f:1b:f5:1a:e3:d6:8c:7d:8b:31:01:
44:eb:1c:97:31:3d:39:64:3e:fb:8f:6b:6b:26:23:0b:26:b5:
7d:fa:84:68:57:3d:85:b2:b6:7d:9e:6a:d2:42:56:56:78:25:
d9:6c:ed:de:61:c1:d0:b8:2b:a9:76:07:36:e3:72:f7:b4:96:
71:92:c9:81:b7:28:f1:36:53:bc:75:56:30:37:6b:18:d0:ee:
76:55:ac:23:8f:52:81:cb:5f:80:2e:e8:5c:f9:65:87:df:3c:
0c:b7:00:e5:5a:1a:82:c6:37:42:a6:4f:1e:cb:d8:7b:14:47:
8c:ad:68:eb:64:ff:73:83:c1:d6:85:db:7c:d6:7f:b0:19:2a:
47:6e:d2:dc:22:92:79:78:31:1d:55:1a:ad:6b:a8:15:5b:5f:
81:e6:de:65:5f:29:09:3f:85:22:b7:8b:3d:d2:6f:72:12:c3:
59:b7:91:9b:98:e3:91:a9:46:e7:43:f0:ec:8c:9a:da:b1:07:
af:37:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:41:35 2026 by rpki-client