Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
File: Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft (raw, json)
Hash identifier: kXa1Yf+tXBRzrbzZLcta1VFFhTGRfQb1B6f2fZ7Efys=
Subject key identifier: F8:73:EB:0F:42:CE:23:DB:06:94:FC:0A:70:D0:2B:9E:BF:DF:80:27
Authority key identifier: 63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
Certificate issuer: /CN=63497e324554dcd7da084832e158686135468a98
Certificate serial: 019FA0A8A71FC66F994B460AE3BB3703884E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
Manifest number: 33
Signing time: Sun 26 Jul 2026 23:00:35 +0000
Manifest this update: Sun 26 Jul 2026 23:00:35 +0000
Manifest next update: Mon 27 Jul 2026 23:00:35 +0000
Files and hashes: 1: JbP1DaYmfAXbAIIDLF2iKNau78U.roa (hash: TeCpeD604HqwpWXylmrKKY5o1QnXKpTZG7uy3rpUOas=)
2: Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl (hash: tSlZ2VZKXxoHg8kGtdW+CW42LaEHoeWftk4aMvnBSwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:a7:1f:c6:6f:99:4b:46:0a:e3:bb:37:03:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63497e324554dcd7da084832e158686135468a98
Validity
Not Before: Jul 26 23:00:35 2026 GMT
Not After : Jul 27 23:00:35 2026 GMT
Subject: CN=f873eb0f42ce23db0694fc0a70d02b9ebfdf8027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:e4:31:39:ab:48:27:b8:ae:cb:d1:ac:17:
79:c9:1f:e3:2a:35:6e:b3:0d:e5:0d:37:bb:4a:8d:
5a:a6:98:3d:cd:36:c4:f7:6b:c6:58:88:ec:3a:32:
ba:c8:55:9a:45:80:11:0f:c4:7d:b8:91:bb:54:21:
70:7f:94:4c:2d:58:94:db:76:4e:35:bd:98:29:04:
49:4e:45:1a:a1:f3:79:3d:59:36:3b:21:e1:30:3b:
de:99:4f:eb:b9:55:d2:e9:6f:b2:80:14:a5:2a:99:
fe:26:d1:35:8f:c1:d1:0d:63:83:7b:25:29:c5:ed:
83:85:7a:59:9c:f9:7d:f5:0e:bf:ef:f1:dc:00:f4:
29:12:43:f8:23:e5:9f:c4:8c:13:28:99:d9:3e:da:
51:a7:cb:70:c3:60:87:de:91:79:9c:02:e5:82:b6:
9d:ba:7d:02:25:ef:21:d6:56:f2:8e:84:13:4c:d1:
54:9c:53:ff:81:27:e5:01:51:a0:15:ab:fa:2e:9c:
a6:c6:27:fa:28:46:38:a9:e9:b3:cf:e2:66:43:ae:
32:4a:12:5d:aa:2c:ad:12:b2:e1:e4:ae:87:58:63:
0c:aa:ab:8f:3e:c4:44:6b:5d:0e:e2:7f:05:2d:5e:
4b:d0:98:40:8f:8b:6b:c2:96:b8:0e:84:8f:b9:ee:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:73:EB:0F:42:CE:23:DB:06:94:FC:0A:70:D0:2B:9E:BF:DF:80:27
X509v3 Authority Key Identifier:
keyid:63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3c:1b:0e:26:fb:b4:6d:64:cd:28:82:de:87:7d:40:cc:ef:
94:ad:5a:34:e2:56:57:7c:ca:69:0d:58:e6:a8:ce:7a:e5:4b:
89:bc:51:a6:cd:99:a0:6d:d3:af:80:d9:a4:9b:36:6b:5f:46:
75:e2:d5:dc:52:84:b3:73:e0:f3:37:cb:35:7a:31:75:fb:bb:
8c:97:8c:d8:9b:e4:36:f3:66:9b:c5:7b:40:71:ed:46:b5:9c:
21:e3:9d:aa:c2:2a:d6:49:ca:c1:b2:fa:8b:82:fb:f3:a9:9f:
60:d5:d4:c5:4f:31:d6:cc:b9:a0:e4:22:59:30:55:2f:3a:04:
9a:07:5e:db:6a:5a:f7:4f:54:0b:6d:09:1a:b4:a9:16:d8:64:
da:69:c0:52:8a:11:77:be:d7:ca:13:69:1b:3e:6e:4c:4c:a8:
3a:86:73:b2:9e:c0:70:d7:7a:74:69:12:0c:a7:5c:9b:71:0a:
b8:60:7b:95:a0:d6:35:5c:28:ed:c7:11:73:e8:15:ab:12:19:
77:c2:3c:eb:4e:92:f6:7b:df:32:98:28:b5:25:94:84:d7:3d:
05:85:d2:75:f1:66:45:0f:74:59:af:fd:18:d4:96:73:17:19:
5e:53:bc:4f:33:b4:2d:ad:74:41:23:41:18:82:a7:d8:a9:c3:
f7:1d:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:09 2026 by rpki-client