Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: SM83+DLgtvwLL1xLwWWpw1T+yDCAwTSrObh+5yVJlhM=
Subject key identifier: 11:03:E0:92:55:1A:71:6E:85:36:3F:0E:04:73:3C:91:8E:15:5D:DB
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 019FDA62B70D7B13AFF2581965EDB2A89572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 11FA
Signing time: Fri 07 Aug 2026 04:02:10 +0000
Manifest this update: Fri 07 Aug 2026 04:02:10 +0000
Manifest next update: Sat 08 Aug 2026 04:02:10 +0000
Files and hashes: 1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: bjiJdm8k7rC7ZruVlRjgEpi1xrTMCSkSNbifkklL5bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:62:b7:0d:7b:13:af:f2:58:19:65:ed:b2:a8:95:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Aug 7 04:02:10 2026 GMT
Not After : Aug 8 04:02:10 2026 GMT
Subject: CN=1103e092551a716e85363f0e04733c918e155ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:bb:26:f8:8e:d6:ba:d6:9a:4b:64:fd:12:
e0:e7:10:b9:6d:b9:22:9a:c2:18:9e:b9:3c:e9:47:
88:9c:42:92:d9:d4:d8:7f:2e:fc:34:67:fd:57:39:
44:7a:25:43:13:3e:16:8f:47:ac:e4:67:6d:39:44:
20:ab:08:2d:f6:d0:18:fa:e3:22:51:e9:f7:39:2e:
e1:8d:07:49:eb:f1:b7:f0:03:e2:2b:a2:38:c2:0c:
20:39:62:49:b2:6d:72:b6:07:73:52:bc:fd:f7:88:
e2:83:b8:c3:43:da:aa:ed:74:1e:45:2a:e7:dd:22:
aa:26:e6:11:b1:44:30:2f:a4:71:94:a1:4f:41:0e:
75:e5:b6:b4:15:6b:60:09:e7:c5:68:b8:bd:bd:71:
99:1e:62:f7:53:20:51:b3:75:36:ab:14:3a:98:0c:
12:4d:2c:b7:0d:3d:28:37:fa:4d:8c:bf:dc:ff:c3:
b2:88:8a:da:70:f8:5f:99:64:43:64:f3:10:94:02:
30:78:00:de:79:aa:c9:47:55:5f:e3:c7:76:76:e1:
96:40:a8:bd:73:86:81:49:2f:be:10:dd:da:4a:14:
4c:3e:91:13:c7:b5:2b:02:9c:5b:ec:01:1d:09:ce:
ed:2a:70:e5:4b:36:74:b6:f4:b0:fd:15:ff:ba:53:
da:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:03:E0:92:55:1A:71:6E:85:36:3F:0E:04:73:3C:91:8E:15:5D:DB
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:99:3a:59:9a:c8:5b:36:b8:02:59:65:26:11:86:f2:ff:fc:
5d:36:5e:43:b4:f1:03:73:24:72:17:7f:33:11:f3:a8:77:b1:
63:19:cc:69:f7:38:d6:01:3a:51:41:75:c2:7b:66:7b:a1:a9:
48:4e:78:f3:46:8c:e4:e0:a4:77:68:d2:86:6c:6f:55:75:32:
11:e5:e9:d2:1d:15:5e:2e:3a:99:80:e3:f8:c1:44:26:80:b2:
78:cc:a7:87:d0:d0:c4:9c:4c:78:8e:7f:3b:bd:29:8d:2a:ac:
dc:7e:04:74:0f:20:1f:71:e1:e0:0b:28:a9:9d:6f:37:a3:48:
7e:27:b4:a6:06:b8:5e:97:dd:b0:e9:14:5d:eb:db:7d:ca:ee:
5a:7f:5a:50:c0:13:a4:69:9d:89:87:c1:80:a2:24:1a:67:0d:
e6:a8:a3:10:ba:36:51:a9:5f:fd:85:ca:89:c1:77:da:20:d7:
b8:4e:af:ba:00:c1:33:d4:d9:61:68:d1:32:63:dc:7f:9c:3f:
a5:8a:6f:e7:57:9f:5b:f2:56:7c:5e:c3:0c:76:3a:15:b7:1c:
40:f2:82:3b:ec:0a:13:a1:d1:9b:5a:cf:3a:36:2b:f7:6e:b5:
5f:df:3a:f7:3f:e0:a8:a5:6d:be:3b:ab:90:12:d9:5b:25:21:
aa:fc:ec:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 09:41:33 2026 by rpki-client