Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
File: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft (raw, json)
Hash identifier: gPJXdgXp+94vzvNXoCRfUl2m8+P0v0riNZ0lV/7vvrQ=
Subject key identifier: 84:16:07:DD:E3:AA:93:A2:55:F9:AF:6C:CA:DF:A1:3B:0A:E6:50:35
Authority key identifier: 63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
Certificate issuer: /CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Certificate serial: 019FA228FEB03D0C9F64EF2B345E562FEA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
Manifest number: 0FB2
Signing time: Mon 27 Jul 2026 06:00:23 +0000
Manifest this update: Mon 27 Jul 2026 06:00:23 +0000
Manifest next update: Tue 28 Jul 2026 06:00:23 +0000
Files and hashes: 1: Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl (hash: Grs/mZmiPyLAzsE9f4VcJg0bbi+Aw+8ShLte27gownA=)
2: aRuatR-K8nQ9ZXL9FpjwSLceO4A.roa (hash: Vt5YWGyW9wbAPKP7kNgM97gFfWqXrRoxA2e6gMj6LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:fe:b0:3d:0c:9f:64:ef:2b:34:5e:56:2f:ea:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c83f9a3a3d2160a0178ca19ccb43a0d2f1890
Validity
Not Before: Jul 27 06:00:23 2026 GMT
Not After : Jul 28 06:00:23 2026 GMT
Subject: CN=841607dde3aa93a255f9af6ccadfa13b0ae65035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:d8:04:60:4b:d7:4b:c1:9b:17:64:fc:6a:
d5:27:d8:0e:4b:ad:8e:3c:67:8f:f6:5f:b5:3b:97:
6f:e0:32:3c:cf:a0:1a:e7:e7:ac:c0:99:f4:a8:f5:
8c:94:b9:ab:f0:de:73:50:44:2c:57:53:54:57:03:
d6:9c:c1:be:a1:e4:98:56:ff:56:8d:97:1c:2a:a1:
4b:0d:b9:e5:4d:7b:8e:ec:46:18:68:65:bf:eb:ab:
98:72:d6:0a:22:f3:00:60:06:41:1d:11:7f:ec:29:
8b:44:16:ff:c7:81:83:1d:69:b5:93:56:ae:0e:c3:
dd:d3:b1:d9:15:d4:e7:41:70:29:2c:52:d4:98:aa:
e9:19:43:1a:9f:27:94:c1:60:fc:d3:ff:c5:1f:f7:
57:e6:5a:85:64:a6:41:d0:f9:cd:fb:68:d6:17:6f:
e2:c4:5f:01:7b:ea:af:a1:91:d4:bd:a6:bd:ab:3d:
89:3a:9d:65:f4:28:33:b0:ed:b3:42:99:70:14:1b:
f8:4f:47:ba:fd:2b:02:c2:81:a6:57:90:0b:96:0d:
fa:6f:ca:7d:07:08:6e:9c:a5:25:9f:09:b6:c8:f2:
d5:5f:82:bd:9a:32:9d:4c:89:2d:b8:2a:d2:36:fb:
08:c3:ef:d9:47:82:64:b3:8c:76:1f:06:55:18:b7:
f0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:07:DD:E3:AA:93:A2:55:F9:AF:6C:CA:DF:A1:3B:0A:E6:50:35
X509v3 Authority Key Identifier:
keyid:63:8C:83:F9:A3:A3:D2:16:0A:01:78:CA:19:CC:B4:3A:0D:2F:18:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/cc3c28-7b13-4343-af37-25550ba29127/1/Y4yD-aOj0hYKAXjKGcy0Og0vGJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:83:40:16:22:e8:91:92:9a:31:f3:7f:0c:13:1f:da:b7:38:
f7:f3:f8:3c:60:c7:9c:8f:f8:52:6b:43:fc:9f:2e:d7:7c:9b:
a1:84:0b:79:c4:45:6a:fc:a5:72:9a:2f:4f:78:05:91:e6:8e:
85:5a:39:f8:e1:d7:0d:c3:e3:95:96:2b:a6:9a:9f:d6:53:92:
d5:ab:19:26:39:09:32:ff:53:bb:b9:39:c6:a8:d1:03:9f:31:
f6:11:38:0a:d4:de:56:79:cb:92:d9:b7:10:e9:2b:83:5e:9b:
28:13:a1:cc:cc:5f:72:40:15:93:31:95:fa:79:6f:4b:4d:e3:
1b:58:7d:de:f3:15:52:b5:f7:b1:cf:55:07:4f:e8:1a:41:92:
06:db:f1:7b:fe:5d:c7:3c:57:33:2c:0e:d9:ba:dc:d6:37:86:
bc:a3:b0:a8:ef:ec:8c:3f:2c:11:15:74:3a:4e:e5:ad:d6:12:
76:37:b0:f0:19:51:bb:8c:cf:7b:d7:aa:a9:e0:a8:82:22:bb:
af:90:85:92:3e:14:e5:a9:7d:b4:5b:9f:91:cb:4a:14:b8:2b:
0c:49:36:63:9c:28:3c:fd:e3:47:f8:82:98:88:5d:e9:56:b7:
a9:21:78:40:4d:ac:a0:fd:89:dc:a0:3f:8c:ef:fc:15:64:1e:
0c:c9:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:30:44 2026 by rpki-client