Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
File: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft (raw, json)
Hash identifier: Ky/6AjZ1O+n6zEgqKw6KNnj5Nc3hLLXRuy9V+ShQicY=
Subject key identifier: 89:5F:A0:BD:52:65:FE:DE:B2:0F:7A:F0:A8:DE:39:2B:F7:65:0E:0E
Authority key identifier: 63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
Certificate issuer: /CN=63e30980305345fd5365b3515e3568f9cee58541
Certificate serial: 019FA071F5624E6DCD835125F626B42BB420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
Manifest number: 19CF
Signing time: Sun 26 Jul 2026 22:00:50 +0000
Manifest this update: Sun 26 Jul 2026 22:00:50 +0000
Manifest next update: Mon 27 Jul 2026 22:00:50 +0000
Files and hashes: 1: Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl (hash: RCOQhNUqJimjJZO4bXtaGhF96cyySkTc1//KkY0DX7E=)
2: s-442GvPfebUGbpFw38BzwA9S00.roa (hash: kIHquz+BFUO9MvkaDuyA2nEs9BLGKEJWTiDy2rOI/Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:f5:62:4e:6d:cd:83:51:25:f6:26:b4:2b:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e30980305345fd5365b3515e3568f9cee58541
Validity
Not Before: Jul 26 22:00:50 2026 GMT
Not After : Jul 27 22:00:50 2026 GMT
Subject: CN=895fa0bd5265fedeb20f7af0a8de392bf7650e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:d3:29:69:de:88:43:98:8d:60:4e:f5:3f:
2a:90:06:a7:b5:a6:35:d7:55:5b:ac:e5:49:ef:a6:
8a:d0:2f:78:6b:36:44:ef:5f:21:11:66:a5:2b:69:
fe:af:ea:61:12:88:2e:18:54:0e:7c:54:4e:57:d2:
5e:bc:60:4b:f0:ca:82:ab:1f:2b:be:42:8f:63:2a:
3b:1d:f7:d3:58:51:fe:b9:a9:b9:1f:e1:13:d1:66:
9f:93:04:c8:d1:8d:24:e5:11:d4:de:3d:e1:f4:b6:
3d:46:d6:58:b8:3c:df:12:f0:e4:1b:36:5d:df:fa:
a7:a8:40:b7:de:54:fe:fd:99:b5:72:89:92:9f:db:
eb:fb:84:93:95:d2:0e:87:d3:8c:21:73:81:64:fd:
6c:78:94:54:12:a1:d5:d3:2e:4e:15:41:11:46:54:
e8:29:9c:12:0b:c1:ef:4f:ba:4f:e6:15:d2:dd:e8:
c6:a1:6d:ae:22:56:85:ac:e3:eb:a8:e8:4b:e5:f4:
e6:80:b3:d3:08:2b:c9:47:24:71:65:4d:e2:3d:e3:
23:5c:d3:b1:d3:9f:01:67:d3:00:df:9e:ed:2c:28:
b0:f2:b7:42:f2:83:bb:3a:c0:8e:15:de:a1:2c:ba:
7b:47:0e:71:37:1e:dd:07:ee:23:7c:01:ca:82:85:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:A0:BD:52:65:FE:DE:B2:0F:7A:F0:A8:DE:39:2B:F7:65:0E:0E
X509v3 Authority Key Identifier:
keyid:63:E3:09:80:30:53:45:FD:53:65:B3:51:5E:35:68:F9:CE:E5:85:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db5787-c2c8-429b-8137-cbf6c1849c44/1/Y-MJgDBTRf1TZbNRXjVo-c7lhUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:c2:57:62:55:4e:b2:db:51:18:ae:e7:10:29:d1:b6:00:
b5:aa:57:3e:35:89:51:5b:2b:35:0a:63:c8:2f:78:8a:9c:44:
33:06:83:61:e9:42:ef:88:90:00:31:a8:7c:0c:b4:c6:34:f5:
45:98:1b:58:77:16:09:7b:6f:fa:d0:5d:e8:91:6d:bb:f3:bd:
e5:a1:6b:18:32:7a:d6:57:47:71:1b:53:f1:2d:f9:a7:7d:50:
74:46:2e:81:a4:ed:9f:21:10:f1:26:84:bc:c4:e0:25:ec:7f:
71:b1:02:bd:eb:bd:f2:df:c4:38:01:36:f8:a5:b1:cc:bd:7d:
e3:84:3e:88:37:8c:89:72:e6:70:ff:18:73:2a:0e:3f:e0:95:
36:72:b2:81:c7:b0:0e:af:cd:95:03:dc:62:2e:b0:4d:81:e1:
86:7e:04:1e:06:06:f0:a0:30:81:71:b2:f1:2e:04:57:6b:f1:
32:8d:19:4f:d2:3c:f5:d7:f0:d3:77:93:30:18:57:24:1a:2a:
b4:61:ea:1b:80:a2:0b:2c:10:fd:a0:f9:45:c7:3c:3e:fa:0c:
c2:f4:82:e8:b1:59:c7:7d:2a:c9:92:3e:19:26:85:b6:a7:5b:
df:58:ac:10:c6:80:57:a5:27:c8:f4:1a:05:f9:9e:72:e8:b4:
72:38:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:16 2026 by rpki-client