Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: rl1NT+deIWDxMWZxkFncnuzLDkkDUNDO2jA7/ysmw4k=
Subject key identifier: E7:85:27:D4:BE:D5:82:C8:D8:F1:78:A7:90:C9:52:86:DE:01:2E:A6
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019F9E4C76528E304901AB79FEC9FE3E4CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0D3D
Signing time: Sun 26 Jul 2026 12:00:38 +0000
Manifest this update: Sun 26 Jul 2026 12:00:38 +0000
Manifest next update: Mon 27 Jul 2026 12:00:38 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: vwJCgsUl7eWwn5gK74rJk3Xup5GtjLghSzXBrVJrJUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:4c:76:52:8e:30:49:01:ab:79:fe:c9:fe:3e:4c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jul 26 12:00:38 2026 GMT
Not After : Jul 27 12:00:38 2026 GMT
Subject: CN=e78527d4bed582c8d8f178a790c95286de012ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:19:c8:47:45:e5:65:c9:87:fa:34:5b:b7:29:
94:6a:3f:a7:59:cf:ad:dd:20:27:b0:a7:ff:33:f9:
4e:b2:2d:a2:5f:d8:53:bc:46:2c:48:d6:7a:88:82:
44:a3:99:2c:85:1e:bf:c9:57:0e:0b:d6:08:7e:87:
1f:90:22:c0:5f:8b:69:21:5b:91:a1:09:56:89:52:
2e:38:a4:c0:58:10:de:cb:e7:91:8e:ba:8e:65:be:
2f:d2:72:68:55:ea:90:0e:5f:83:20:de:f1:92:c0:
9e:66:fb:e3:79:c3:e2:43:86:a2:8b:ca:a6:04:e2:
13:8b:09:6b:5d:75:27:a0:c1:5b:ce:e3:ef:9f:76:
1f:f7:aa:ab:f8:28:82:c2:85:c6:28:46:c4:1e:b1:
22:81:04:ef:ab:08:16:9b:20:28:05:2f:a1:0b:c0:
43:59:f1:63:81:8f:91:6c:fc:17:e1:08:83:e7:3e:
0d:5a:e6:80:68:ef:91:fa:d2:70:eb:49:4e:2e:a1:
d1:ae:97:cd:9d:11:eb:99:61:d5:8f:cf:b9:17:d3:
31:dc:9a:96:dc:1b:00:cf:c0:00:d0:a5:77:d2:fb:
9b:6b:bb:a2:1f:5a:dc:34:b0:1c:07:cb:8d:e5:64:
14:b7:2e:63:57:e4:da:87:8c:c0:32:41:e4:b6:78:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:27:D4:BE:D5:82:C8:D8:F1:78:A7:90:C9:52:86:DE:01:2E:A6
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3c:1d:c5:34:4b:ed:4c:6f:e5:73:9e:17:c1:92:d6:27:60:
98:d7:26:2c:f5:2a:0a:75:c0:de:e6:c4:73:62:c9:1d:8d:bc:
e1:c0:27:3b:ef:1e:b3:82:95:f7:8d:eb:b9:e6:44:6d:a9:a6:
a4:72:40:0d:d0:6a:0d:bf:f6:9b:8a:65:10:39:bb:1d:2f:02:
4f:ce:cc:f7:1f:21:cb:3b:15:05:53:a2:b3:6e:10:09:3c:1c:
f0:bd:f5:07:b1:36:db:b5:72:06:d8:00:91:c3:d1:7a:9f:7a:
1c:43:16:9e:69:9f:8e:0f:e4:ea:84:96:8a:b7:b7:33:57:2f:
01:51:b0:a8:d8:5e:9c:41:78:d6:7c:89:8b:92:97:59:3a:0f:
6f:24:69:9c:4f:91:b9:62:93:e6:ed:a0:8c:8c:58:c1:17:99:
f8:c5:95:db:0a:4e:25:36:3d:12:f6:13:c8:79:44:16:e8:5b:
4e:c9:79:68:5a:a9:7f:16:83:0f:3e:d4:67:9d:4a:a4:95:cc:
f4:ac:4b:86:d6:4e:25:23:4c:0c:b5:6e:53:01:06:56:16:de:
ff:49:f2:83:03:28:0f:5b:78:da:4a:8a:1c:09:aa:8d:2a:45:
6e:bd:89:01:0b:e9:61:7b:73:cd:d9:5d:c4:ae:9d:28:ad:1c:
e7:d4:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:32:12 2026 by rpki-client