Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: MNk4+Ri0S9irAq+zEDP7W43UPOM/8EQVgSHwsfyGlmk=
Subject key identifier: 87:7E:49:7F:50:07:C8:70:D9:6A:DB:F3:31:79:C2:D9:6D:74:11:77
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 019FA229C61AB7E00190353A54F4F9DA13D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 171E
Signing time: Mon 27 Jul 2026 06:01:14 +0000
Manifest this update: Mon 27 Jul 2026 06:01:14 +0000
Manifest next update: Tue 28 Jul 2026 06:01:14 +0000
Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: HSBEarw6EWUEL2fKtTzGLhoF78WXH+C5yUn6n6+FZXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:c6:1a:b7:e0:01:90:35:3a:54:f4:f9:da:13:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jul 27 06:01:14 2026 GMT
Not After : Jul 28 06:01:14 2026 GMT
Subject: CN=877e497f5007c870d96adbf33179c2d96d741177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:ed:da:35:6f:66:e6:2b:28:29:d4:c8:df:
f9:17:1d:fa:f7:a3:ad:c3:24:e6:a0:04:c1:63:14:
eb:ff:55:38:53:fb:73:60:fa:7c:d6:a0:6a:48:d5:
68:e9:ef:e8:2e:59:16:06:dc:d5:45:ac:fc:bf:44:
ed:d6:38:58:90:a4:d3:2f:98:26:26:0b:de:ab:db:
dd:df:ea:d6:3d:28:2d:3a:7f:89:61:91:0a:12:1d:
6d:dc:9c:2a:56:9c:f9:65:0e:81:ee:8a:27:19:b5:
a5:cf:18:3e:20:a2:de:b6:be:9f:fa:52:be:b2:14:
e3:76:d9:75:f2:f6:0c:56:4a:43:93:ae:2d:cc:49:
81:41:ac:4e:7a:a4:20:fc:67:54:7d:f3:11:dd:a0:
f6:09:81:b6:15:20:c8:16:6d:f0:c2:b4:84:47:4e:
47:1e:29:ce:be:dc:dd:cc:2d:1c:9e:08:bd:f1:55:
79:bf:ba:b8:e1:d8:46:2f:04:a1:59:5d:27:5f:6b:
f6:47:9a:2d:cd:8a:e2:54:ec:2b:96:89:5c:d1:42:
ef:2e:ed:19:24:3d:a6:b4:fa:49:7d:6f:50:fd:ad:
2b:77:f1:d9:95:f8:78:00:59:9e:f2:bf:45:de:bf:
da:c1:01:1a:d6:e2:3d:1b:b7:68:a1:86:17:c6:ff:
15:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7E:49:7F:50:07:C8:70:D9:6A:DB:F3:31:79:C2:D9:6D:74:11:77
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:02:67:92:3c:d9:4a:bc:a5:c0:d6:81:41:ec:a4:80:cd:7a:
43:99:f4:94:e9:78:89:4e:3d:45:47:61:15:73:98:c9:e5:5a:
fa:3a:5a:de:ef:eb:aa:78:3a:89:1e:d0:88:c2:bd:86:c2:9e:
be:a9:ba:0c:9d:49:a6:fe:da:b3:51:24:1e:cd:ea:86:1e:68:
b1:a4:ee:72:8b:f7:90:3c:da:a4:2f:2d:b8:ae:6a:ca:49:58:
f7:d3:21:33:99:b9:98:9d:f3:86:e7:14:a3:b5:ce:70:c3:be:
8d:6a:df:3d:6c:31:44:39:bd:60:11:93:21:33:4c:8d:31:48:
b8:71:b8:c0:1d:5b:a1:68:dc:c2:81:37:f0:05:23:70:f3:c6:
0f:47:54:91:8c:c3:37:e9:94:0b:14:ee:88:9b:6f:b8:f6:b0:
5e:aa:ec:79:de:c8:27:7e:0c:41:9d:61:e7:16:e1:91:69:f6:
28:0f:0d:3a:a3:a6:f1:8e:42:6e:18:21:9f:55:92:a6:99:a4:
3b:1a:84:84:dd:16:2b:aa:4d:17:bb:2b:0d:8e:29:91:6e:c9:
a2:47:12:88:54:a9:96:38:50:31:39:72:d9:9f:e4:6d:7e:1b:
a4:5e:f4:d5:65:dc:5f:2a:03:84:40:c3:db:90:ec:26:a0:8a:
82:65:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:59:13 2026 by rpki-client