Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: HUoHJ+dfWbcA5zvcxQLSDTgoDn3ZoOWfNT07McLrVd0=
Subject key identifier: 28:1A:1F:F2:C7:AB:56:7C:06:EE:49:ED:F8:42:A6:02:EC:02:C4:F9
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019F826714BEBFA53718CFF846FDEE15A32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 0A36
Signing time: Tue 21 Jul 2026 02:00:21 +0000
Manifest this update: Tue 21 Jul 2026 02:00:21 +0000
Manifest next update: Wed 22 Jul 2026 02:00:21 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: QPVyGX8XXVq6kfKSnivb/0wLcxDBTdb2L0k1k1zkzvU=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:14:be:bf:a5:37:18:cf:f8:46:fd:ee:15:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jul 21 02:00:21 2026 GMT
Not After : Jul 22 02:00:21 2026 GMT
Subject: CN=281a1ff2c7ab567c06ee49edf842a602ec02c4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:9c:93:38:46:af:ae:93:d1:d4:1c:3b:b9:
d4:65:fb:25:04:de:ed:4b:37:54:e3:f5:48:26:1a:
2d:51:8e:56:ad:ea:e1:70:46:27:c5:49:72:63:cb:
9c:24:73:a4:d8:60:71:19:15:be:0b:73:00:15:58:
08:18:c9:06:12:fe:0d:a4:6d:3f:9a:e6:a8:05:38:
3c:1e:03:29:f3:2a:80:70:ae:0b:18:e7:d5:70:15:
b2:2b:3e:ab:d2:0e:da:19:09:52:10:be:ef:99:13:
18:fd:46:16:32:c4:22:95:9a:35:2a:ed:fa:57:62:
eb:e9:67:3b:65:e3:48:e5:da:2a:50:a8:03:42:a8:
40:80:59:fe:3c:75:99:60:43:0d:9c:27:f0:bd:44:
e6:db:50:d5:09:29:5a:46:70:11:be:f1:59:64:62:
d1:fe:d2:f2:0c:29:48:07:9f:5b:d1:15:20:eb:e8:
01:60:d8:87:5f:53:f5:8d:d1:4e:86:00:53:eb:21:
16:fb:0f:d9:a1:39:28:ab:c0:6b:fb:e8:77:cf:76:
1c:37:45:ea:a8:25:72:3e:7c:b7:28:2f:71:7f:35:
dd:80:ca:e2:17:b9:28:21:8f:90:62:b3:b7:3d:fc:
45:2c:cc:32:87:9b:86:a4:de:29:00:4d:a5:fb:06:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1A:1F:F2:C7:AB:56:7C:06:EE:49:ED:F8:42:A6:02:EC:02:C4:F9
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:61:da:fa:d3:ae:88:67:51:29:1f:de:ce:19:21:81:57:f2:
18:a9:bf:c7:f2:a2:01:31:e9:7d:90:28:0d:d0:4a:f1:3a:36:
dc:ce:c7:01:0e:fd:75:fd:19:81:d9:e6:89:bf:7f:f7:a5:f7:
49:65:ee:e5:ba:ea:b2:56:04:6d:82:72:cb:c9:8a:16:3b:c5:
9c:1c:7e:41:1f:67:a4:00:00:61:26:5d:77:dd:30:a5:48:2f:
f7:fc:73:32:82:08:52:fb:2e:e1:0a:f9:46:2d:ad:7f:28:3b:
c7:2c:4d:75:4c:ca:41:44:50:2b:d8:5d:c6:1a:63:f1:7b:6c:
1f:67:c7:48:45:8b:39:a9:a3:e3:b8:de:1e:4e:a9:95:e0:da:
52:7a:dd:5b:56:74:56:5a:1a:c4:8a:9d:64:36:fb:0f:f6:90:
1a:2c:cc:2f:d4:d4:84:5f:6e:32:c7:96:04:96:06:7e:55:1c:
ac:2d:4d:1e:f9:3b:25:e0:dd:a7:8a:d8:ea:b4:bd:cd:59:77:
73:36:36:6c:6b:da:d7:fd:da:3c:ef:0a:16:59:ac:1d:d6:f6:
64:ca:8b:bf:06:60:44:03:73:e8:a2:4f:14:94:b6:96:7b:9d:
f0:64:01:41:b3:39:d9:3f:c6:8e:76:38:88:47:c9:37:b5:12:
17:e2:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:39:57 2026 by rpki-client