Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: F3xdZYgteZ+Z73v+i4U2m8CKfCMmnYVq+YLWjxW37JM=
Subject key identifier: 1B:C5:7F:65:7A:CD:2C:4A:A6:B7:C5:BE:74:27:23:9D:00:BF:59:FE
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019FA1F2A8E0373ABCAC9644884E363E8E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 039C
Signing time: Mon 27 Jul 2026 05:01:02 +0000
Manifest this update: Mon 27 Jul 2026 05:01:02 +0000
Manifest next update: Tue 28 Jul 2026 05:01:02 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: nt+ZL7A3OWE+gCyMwV8pfZ19O40PQQH/m0/X027DsEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:a8:e0:37:3a:bc:ac:96:44:88:4e:36:3e:8e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Jul 27 05:01:02 2026 GMT
Not After : Jul 28 05:01:02 2026 GMT
Subject: CN=1bc57f657acd2c4aa6b7c5be7427239d00bf59fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:79:50:23:31:d4:94:01:7b:77:1a:1c:cf:
3f:bb:74:a8:49:c8:1c:4a:99:7c:ba:9e:a5:b6:4a:
04:dc:7f:60:b1:18:6b:a2:fb:cd:35:f6:94:d9:58:
2a:1e:26:c6:cb:ab:62:ea:fe:f2:a0:b6:c4:8a:60:
78:d1:44:1a:62:75:6e:8d:98:cf:11:4f:95:a1:3b:
75:7d:91:fb:1d:17:0e:dc:7d:0c:0f:b2:d6:b8:29:
c3:eb:72:df:79:ac:53:4e:72:b0:bf:42:34:63:7d:
ce:fd:da:69:c3:ae:99:46:c8:59:39:77:6f:38:34:
f2:90:6b:78:d7:90:e0:71:6a:b7:f2:61:c8:aa:a1:
87:09:3d:45:81:57:25:2c:90:48:f9:71:1f:b3:87:
84:ee:6c:00:37:ce:fe:8a:71:ce:84:86:16:1a:2a:
59:c1:b5:f7:8e:13:37:62:27:fb:5f:fa:6b:4e:5a:
a8:4c:84:ef:5f:8f:58:9f:f2:41:48:b0:44:b2:ea:
50:df:6f:b8:2b:12:46:d5:9d:2d:65:19:d4:54:51:
c2:a4:bb:57:41:41:91:82:47:79:8b:d7:1b:fd:3e:
3b:86:dc:a1:17:02:47:1c:08:13:64:1e:d6:ed:46:
31:70:1b:c0:50:cd:89:a3:b0:cc:26:b4:1a:1e:e1:
74:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C5:7F:65:7A:CD:2C:4A:A6:B7:C5:BE:74:27:23:9D:00:BF:59:FE
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0f:ed:d7:bd:ba:ad:9c:a7:5e:b4:72:ce:a0:a9:bc:90:37:
98:32:94:b6:0a:c7:a4:b5:ea:12:26:f7:2d:c1:d1:91:37:41:
38:83:90:70:6b:af:eb:68:d6:56:dd:9d:12:82:45:5d:40:ee:
70:fe:7d:24:db:9f:17:6a:a6:64:be:fb:2d:a9:0b:21:b2:f2:
59:b0:62:ce:d3:78:b7:56:bf:f5:b5:9d:ea:b4:ca:3b:17:99:
37:62:a1:0a:ab:51:b3:6a:0f:0a:2c:74:aa:e4:a0:ca:3a:e7:
46:28:23:eb:b0:42:0c:26:55:a7:05:3e:57:2d:58:41:4d:0d:
b4:f6:98:7d:64:67:c4:af:d1:74:08:e8:ca:a1:02:80:1a:69:
9c:fd:4e:fb:e9:7e:59:c0:72:ad:99:ba:e0:2f:10:69:5a:a0:
0a:c1:d0:5e:02:d3:82:17:19:f1:a3:75:b3:b8:ac:0f:f6:3f:
9c:4c:86:90:ae:ae:22:09:08:38:29:dc:f9:b9:d3:40:4e:3c:
fc:d0:a0:03:07:2c:56:8b:cd:cb:75:3c:12:23:35:fa:0a:fb:
a5:dc:57:1b:dd:7c:0e:a5:47:14:00:3d:8a:ea:1b:09:1c:be:
2c:af:14:37:55:5d:80:8b:9d:66:b2:b9:d5:8c:d1:55:92:a4:
81:85:9f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:52:58 2026 by rpki-client