Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: NjnzKN4FGl/I92751P/gHSK5MLaGcqUmeqTZ/ZGcyFc=
Subject key identifier: 37:F8:13:EA:CE:D5:C3:E8:AC:0C:80:3C:A8:5A:CF:29:E9:76:82:61
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019FA184B460C137557C078872D973377493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 12BC
Signing time: Mon 27 Jul 2026 03:00:56 +0000
Manifest this update: Mon 27 Jul 2026 03:00:56 +0000
Manifest next update: Tue 28 Jul 2026 03:00:56 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: nhaBk+N9NJ+Zyn8SOZh0K9MOl/pNcgv1o2req8Gy2Uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:b4:60:c1:37:55:7c:07:88:72:d9:73:37:74:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jul 27 03:00:56 2026 GMT
Not After : Jul 28 03:00:56 2026 GMT
Subject: CN=37f813eaced5c3e8ac0c803ca85acf29e9768261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:6a:33:31:34:e5:0b:73:ee:75:10:ca:9f:
a5:4e:e1:48:d1:d4:4c:29:81:ab:e0:5f:0f:f5:3c:
1c:aa:30:09:fe:60:5f:a0:42:54:22:14:98:90:4b:
c2:63:36:9a:cf:fd:b6:87:5e:96:38:94:82:c0:bc:
0b:e4:16:9f:8e:9d:6c:c6:19:36:18:55:3e:85:bd:
60:bb:0f:5e:d2:6e:69:89:83:d1:eb:55:a0:23:ea:
d7:24:8a:48:ec:e9:a4:40:80:e5:c4:fa:dd:71:f1:
a1:ce:97:07:7f:be:ac:b9:02:91:74:28:93:27:98:
e5:60:e9:82:04:cb:c3:96:19:50:e8:27:58:1e:1d:
7c:1d:eb:51:c7:56:b8:9e:b7:bd:55:ae:30:a9:47:
9c:16:77:31:33:38:45:50:4a:14:ca:9b:3d:59:3a:
3e:63:36:a9:95:c8:17:05:8b:90:b8:c4:ae:73:42:
e8:e0:a2:a9:07:bf:f2:92:40:3b:81:3d:fc:8a:37:
ba:81:97:97:b1:d2:77:2e:e0:82:6c:66:12:fa:62:
c8:11:d4:a8:93:3d:49:6a:bc:60:b0:99:f4:79:e8:
c7:40:cd:c8:32:20:79:ef:39:5b:e4:b1:04:f9:3e:
25:d2:eb:0c:ac:6a:5e:0f:e9:11:bc:f8:49:be:77:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F8:13:EA:CE:D5:C3:E8:AC:0C:80:3C:A8:5A:CF:29:E9:76:82:61
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e4:0b:70:b9:c7:a2:af:ed:56:ed:fa:ff:72:40:f3:67:ae:
cb:e9:50:9c:50:8d:af:6d:f8:3f:99:39:a7:cd:09:b7:89:75:
50:f8:33:1c:e7:7d:53:3a:e2:fd:d2:10:3e:15:21:fa:05:72:
46:3f:e1:c8:d3:56:cb:d8:b4:f9:a2:93:6d:7e:4e:34:bb:08:
12:8e:6c:cc:c6:f0:d0:69:62:43:67:7b:c9:20:de:17:13:9f:
ae:3c:3a:87:82:7d:1c:09:70:73:05:43:e0:27:f8:59:06:cc:
c6:8c:ed:ed:ab:bb:f7:83:fc:84:53:fb:f5:38:9d:de:a7:5f:
e1:c7:74:3b:df:80:c8:90:77:76:97:3c:25:f6:28:85:68:2e:
62:0b:6d:4e:75:a6:74:6d:ef:f2:af:0c:d1:fd:0d:d5:4e:4a:
41:ca:c1:45:95:58:ba:87:32:eb:fd:99:48:45:f6:09:b2:29:
ef:44:62:20:ef:7c:80:b8:61:43:d7:9c:cb:4c:dd:be:2d:b2:
61:63:6e:b0:e0:40:c5:bc:1a:16:c8:32:15:14:b3:c9:f3:a0:
27:3b:ab:c1:a5:80:a0:09:b9:a5:8f:99:0e:eb:ff:b0:24:55:
d3:a3:4a:8c:60:19:52:10:7e:3c:d3:4c:67:89:e0:cb:78:e5:
11:83:a6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:58 2026 by rpki-client