Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: iyTWWgpsWmRZNU4BuFaaZTgHPXoB1ja59XwYwMAQDdA=
Subject key identifier: 76:6E:C0:84:07:F7:54:85:18:6D:BB:54:19:20:6B:C7:42:C1:8C:49
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019FFB36E7257B284BDA7C743AF74DA264CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 19FD
Signing time: Thu 13 Aug 2026 13:01:46 +0000
Manifest this update: Thu 13 Aug 2026 13:01:46 +0000
Manifest next update: Fri 14 Aug 2026 13:01:46 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: cvNSlLagAhDAmE//RjLLGeHcI/LBR6vKa4ozhpMjLKU=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:36:e7:25:7b:28:4b:da:7c:74:3a:f7:4d:a2:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Aug 13 13:01:46 2026 GMT
Not After : Aug 14 13:01:46 2026 GMT
Subject: CN=766ec08407f75485186dbb5419206bc742c18c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:20:a7:aa:69:c3:eb:26:05:b3:ab:30:a8:
6a:1f:93:f5:91:c3:52:97:5a:96:a5:2e:9b:13:95:
00:48:e7:4f:3f:40:fd:84:06:52:fe:df:39:2d:6e:
57:11:e0:b9:6f:98:95:26:a4:da:7a:8e:0c:23:d3:
dd:0e:0c:4e:54:39:82:1a:5e:e5:2c:f5:b1:1e:a4:
7c:24:b9:0d:28:bb:7e:c9:97:ca:43:35:cc:3a:c7:
ba:81:6d:8d:6e:a8:ff:c4:dd:76:ad:4a:54:df:c9:
9e:bf:8f:8b:92:3f:75:4a:6d:3f:df:23:c3:88:d5:
d8:0e:63:42:99:dc:e2:48:ad:f8:ca:dd:40:22:91:
0e:b6:f1:c8:cc:c0:2e:b7:1d:71:05:08:8c:8b:97:
2a:7d:c2:03:ea:8b:77:94:3e:a2:4c:70:8f:ed:a0:
c0:81:32:17:7f:5a:6c:96:04:83:14:83:bc:f5:9a:
b6:ac:08:fd:16:7a:ee:b7:c6:17:c1:9c:60:a0:e4:
97:46:4c:3f:3c:bf:3f:65:d2:1d:68:9e:f8:2f:fe:
26:4f:1d:6e:43:92:ca:dd:66:f0:b4:6a:dd:be:f3:
33:71:4d:4c:46:82:d8:e6:00:79:72:75:10:3a:60:
de:26:e1:33:87:e4:ce:79:50:1f:81:2d:73:32:a5:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6E:C0:84:07:F7:54:85:18:6D:BB:54:19:20:6B:C7:42:C1:8C:49
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:00:b6:2b:03:e8:a6:50:84:ab:b3:55:76:7d:ef:09:32:
17:af:36:36:8b:f0:3e:c3:da:26:d9:dd:f7:f6:72:82:0a:83:
74:0f:33:0c:da:2c:90:2d:c6:2c:ee:e3:e7:2a:ac:c4:47:36:
13:42:5b:5d:95:31:2f:a6:ad:3b:ae:32:2a:24:6e:59:cd:85:
6c:2f:d2:55:8c:78:f9:3e:8f:13:e5:0d:f0:04:08:ae:24:3b:
bb:0e:44:1e:82:ed:7b:6c:53:9a:40:ae:55:7f:98:ed:4b:84:
86:87:91:87:31:ae:c5:a3:25:d7:fd:42:29:1c:21:5b:85:16:
b4:9e:d1:be:e8:77:8d:f7:ab:7b:ea:b0:b4:41:e6:17:2a:f5:
ed:36:dc:d2:9e:3c:e9:f9:f3:55:59:2d:f9:0f:a7:d4:6c:7e:
29:6c:2a:2a:05:8c:1a:e0:1e:b3:5b:23:ee:00:df:13:dd:34:
fe:49:18:11:f0:86:fb:a7:a4:a6:c6:90:98:98:e2:17:c7:8f:
9e:dc:c0:13:c8:5d:03:8f:b2:ef:5e:0c:aa:0a:be:d1:a5:74:
61:af:0e:b1:98:7e:98:7a:16:e1:8e:40:13:68:91:b6:41:b5:
13:1c:d9:0f:a2:11:3f:fb:c8:09:a9:f0:93:cf:0b:55:ee:8d:
33:91:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:49:22 2026 by rpki-client