Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: FwF3sEOccxozWia3NEJQJGKJavn6E+Q2K+p1ENDie+Q=
Subject key identifier: 7E:DD:55:92:AA:6B:CB:B7:BC:09:AB:8B:3E:72:6B:98:E8:AE:00:1F
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 019F129C2E9D222687D36D78BB7300C80CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 198C
Signing time: Mon 29 Jun 2026 09:00:53 +0000
Manifest this update: Mon 29 Jun 2026 09:00:53 +0000
Manifest next update: Tue 30 Jun 2026 09:00:53 +0000
Files and hashes: 1: 35RBbJH7O74ElGBsXDtzWelJCE8.asa (hash: VGTXJkpFVsNFQM4P5dimy32ItUqxw4xThmopk2UmxJs=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: HfM2nJawlk7DA5U64gZGmmUJpp/Df9kDpbL1s8MvTN0=)
3: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:2e:9d:22:26:87:d3:6d:78:bb:73:00:c8:0c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Jun 29 09:00:53 2026 GMT
Not After : Jun 30 09:00:53 2026 GMT
Subject: CN=7edd5592aa6bcbb7bc09ab8b3e726b98e8ae001f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:21:72:8b:5e:73:1f:62:87:e1:f3:6e:5b:a1:
21:ee:db:8a:3f:ce:ac:45:e4:2b:19:45:2a:cb:cc:
15:2e:ca:8f:d3:1a:c5:c6:0a:4e:f6:65:74:10:48:
c8:20:9f:e3:93:4b:3c:fd:22:39:d9:62:fd:0f:e0:
10:5b:b7:0e:21:b0:08:e2:44:44:e5:98:86:1b:95:
99:31:c1:6d:de:10:a9:7f:36:3e:c4:1b:da:28:e8:
d1:d9:8f:24:01:dc:3f:65:f2:c2:97:cd:04:4c:49:
2e:8e:b6:54:be:d4:91:f0:73:c6:6b:0a:0b:58:77:
5c:65:e5:96:04:46:4a:03:19:e8:e8:57:47:b7:24:
f2:fb:cb:8b:1b:ca:43:04:94:f6:4b:20:af:e3:22:
bb:f1:aa:b6:4a:70:09:98:53:55:0b:9e:bd:f6:77:
eb:d5:cf:86:8e:3c:22:dc:71:d5:a2:b3:c5:a2:ac:
66:e9:83:d1:d2:3e:ae:7c:6f:bb:c6:8e:88:0a:a4:
6c:74:c9:90:b1:a8:bb:61:c5:cc:1f:d5:23:c5:dc:
9c:f5:cf:cc:19:86:60:18:fc:c2:36:41:6b:a2:e8:
b3:20:f3:64:de:2c:de:49:88:d5:2b:d3:09:38:ec:
de:d3:76:e6:22:df:b5:d3:e8:d5:89:27:75:26:7a:
d5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:55:92:AA:6B:CB:B7:BC:09:AB:8B:3E:72:6B:98:E8:AE:00:1F
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ba:6e:95:43:e4:22:30:ea:ff:75:46:52:29:1a:3c:68:f7:
18:17:c6:a1:78:0f:81:f9:4c:cf:13:ef:21:26:01:2a:fd:d3:
97:08:97:e7:b2:fb:b1:5a:a5:72:5e:b6:19:a7:c7:8e:c0:83:
b9:86:1b:5b:ba:e9:50:94:c4:a7:1a:3a:47:43:a4:55:86:98:
13:2d:96:96:fa:d5:0b:90:21:d1:22:c5:e8:b0:42:71:fa:a4:
d1:77:fa:e3:8d:38:f0:61:70:35:f7:f7:85:03:00:c6:a0:98:
30:55:9c:2e:d4:bc:75:8d:33:1f:18:4e:eb:3e:10:ec:56:57:
19:e0:af:44:25:f4:a0:9f:ed:b4:8c:8b:bc:bb:f1:6d:e8:e9:
15:8d:01:6c:31:aa:22:f0:fe:87:1a:a1:bb:d7:17:83:31:65:
e8:89:4c:04:52:80:8a:e1:d6:04:75:39:4e:e7:64:53:cd:39:
e7:8c:79:bb:d6:12:1c:a3:fb:92:bb:83:62:2c:25:84:c0:f3:
75:8b:42:52:95:3e:5b:17:69:5f:03:00:47:2c:29:9b:2b:94:
be:2c:ad:3a:84:77:2d:cd:64:ef:2a:fc:ea:b1:88:95:8f:48:
b4:f7:b0:69:bc:2d:d5:0d:d6:21:4a:4b:d2:29:50:7b:78:64:
6a:ca:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:40:11 2026 by rpki-client