
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: ZxE8uyvpKWuuY8E+QvvYIRxpED/YcLr6UZCHYMSxhtQ=
Subject key identifier: E0:49:F8:5A:B2:B6:32:23:AE:62:A3:2A:6F:55:39:D8:00:27:F0:7C
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019F190D3CBF26D0E289C5943ADCD7E2A577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 0723
Signing time: Tue 30 Jun 2026 15:02:05 +0000
Manifest this update: Tue 30 Jun 2026 15:02:05 +0000
Manifest next update: Wed 01 Jul 2026 15:02:05 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: 8TAGsVHbx0E40dFGxH97xOSvALwPA4h8cREqO2oULes=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:3c:bf:26:d0:e2:89:c5:94:3a:dc:d7:e2:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Jun 30 15:02:05 2026 GMT
Not After : Jul 1 15:02:05 2026 GMT
Subject: CN=e049f85ab2b63223ae62a32a6f5539d80027f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:cb:e1:e9:7c:64:ff:2f:b3:d7:b7:72:0c:
da:0e:58:3e:54:2a:1d:c8:9c:59:c1:ae:91:9e:c9:
68:44:98:94:5c:4f:67:bf:22:c4:81:f5:20:87:0d:
56:54:c6:76:da:77:5a:06:d4:4c:5d:99:b0:58:01:
e6:c5:26:c2:6a:8c:3c:ca:ad:ac:b4:6c:02:f2:b5:
39:3e:3e:18:c4:74:9a:8d:16:a5:64:1b:3d:e4:9e:
9c:4b:a2:6f:e3:13:92:8c:b8:6f:69:eb:2d:8e:04:
e1:ca:b3:9f:7b:7f:cc:29:63:ab:2e:a9:15:e2:93:
df:a0:30:fa:09:60:b3:1b:48:2b:dd:88:7d:83:fe:
4e:41:b3:d6:81:07:c4:7f:7f:62:fa:c5:52:fe:11:
13:7f:ef:74:34:9c:ed:73:e1:dc:75:a5:ff:77:64:
3e:48:69:f9:41:52:ea:e0:c7:1d:47:e1:d0:4f:3e:
42:2a:7d:08:62:5e:c3:e6:6e:60:9a:2d:35:4b:e3:
3c:94:34:64:df:22:ec:b7:91:94:b8:da:bf:1d:1b:
1b:3e:9e:18:46:a2:26:7d:5f:5a:2a:03:f0:ea:2a:
20:d3:4d:ec:8d:4d:de:f6:67:66:a3:c2:b3:48:2d:
71:cc:9a:1f:54:8f:01:3f:47:35:e3:56:c2:d1:65:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:49:F8:5A:B2:B6:32:23:AE:62:A3:2A:6F:55:39:D8:00:27:F0:7C
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:42:e1:39:fc:59:d0:95:68:f5:b2:e9:f3:74:5b:13:f3:
a9:76:f5:9f:3b:7d:25:35:2f:75:58:b9:22:d3:a4:e6:db:96:
50:2d:e5:88:4c:7b:a7:0f:8d:7b:f7:81:a0:6c:76:8a:15:91:
a6:5e:58:cd:be:7e:29:bc:03:7d:99:9f:78:da:bd:e1:61:32:
f5:b1:55:e1:6d:f9:73:40:e2:93:13:1f:42:a2:24:49:47:da:
cd:0b:ef:72:e2:8f:84:9b:eb:b0:f1:f6:60:fe:d2:1f:5b:75:
8e:73:41:7a:6a:56:d1:06:63:a5:73:57:3f:6a:8d:c8:df:92:
7f:e1:9d:d5:2c:96:28:d1:34:a4:7c:19:28:89:f0:bf:45:c1:
be:b8:6c:73:7b:42:5d:90:2f:37:34:a0:cc:8f:93:15:7b:b0:
d3:be:06:db:c0:9e:86:3d:7e:8e:fe:fd:1d:23:a7:4e:d5:f3:
ee:81:02:8d:5f:4e:e1:7b:95:c1:48:85:53:28:05:66:94:b3:
6b:78:0f:b3:0a:9f:7a:71:0f:b9:29:69:1e:c1:e0:87:41:af:
18:8b:5a:58:da:c5:c0:bb:1b:84:a1:b9:0e:33:61:5b:16:13:
cb:f2:e1:c3:a1:f9:b6:1c:34:52:d1:44:0b:a6:2a:5a:57:fe:
2d:2c:37:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:16:48 2026 by rpki-client