
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: DUucIvLN6q4vy8nAhrKOc3xao5yjERhJWUxiN83OFKQ=
Subject key identifier: FA:0C:92:A4:4C:7D:A3:AC:C1:D2:B6:CF:14:05:6C:D0:2F:BC:87:84
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019F97A6846DCC44EB43E037DAF17CD7A659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0FFA
Signing time: Sat 25 Jul 2026 05:01:40 +0000
Manifest this update: Sat 25 Jul 2026 05:01:40 +0000
Manifest next update: Sun 26 Jul 2026 05:01:40 +0000
Files and hashes: 1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: KXgV1lVyvaZ9T3WRT/xbNwlFKRFjePXXjou329FQU7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:97:a6:84:6d:cc:44:eb:43:e0:37:da:f1:7c:d7:a6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Jul 25 05:01:40 2026 GMT
Not After : Jul 26 05:01:40 2026 GMT
Subject: CN=fa0c92a44c7da3acc1d2b6cf14056cd02fbc8784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:53:3e:d2:05:e3:69:b9:ca:f1:a3:d0:16:
a9:fc:25:9e:27:82:4c:bf:02:78:ff:ae:21:d7:62:
7f:45:bf:ed:1e:71:19:92:f5:e2:3a:16:c9:d6:7e:
17:42:24:65:46:16:9e:ab:a8:62:b1:65:81:5b:b1:
f4:11:49:cc:e9:c9:b5:96:da:b5:c0:e4:e3:36:77:
9c:b9:e2:e2:c0:83:9a:e6:5b:44:6b:ea:b5:dd:1f:
10:f7:9f:0d:79:b9:bb:36:39:ba:a0:42:ce:18:a0:
3d:54:9f:63:4b:77:51:08:39:5c:c6:51:04:f3:7f:
e8:99:44:aa:01:84:97:2b:2c:8a:49:c3:c3:e5:ce:
c9:0b:5e:cf:c4:03:91:88:84:fb:fd:05:f0:87:40:
21:77:5d:7e:dd:da:98:75:6b:72:27:07:bd:50:a7:
1d:70:c3:1e:64:6f:aa:98:c2:b3:b4:0e:cf:1f:8f:
17:c7:61:ae:f2:0b:d8:48:3d:00:fa:82:23:39:54:
ee:21:db:47:82:b1:2e:1d:ce:b6:83:3c:72:05:3c:
c2:29:5d:06:26:7d:ff:50:0f:f9:ad:18:e8:97:81:
49:a3:b1:db:91:58:a8:9a:36:34:bb:91:a7:51:21:
b1:b6:9f:67:79:48:19:37:3c:c2:6c:c1:da:f9:76:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:92:A4:4C:7D:A3:AC:C1:D2:B6:CF:14:05:6C:D0:2F:BC:87:84
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:8f:4a:c7:d1:e8:81:52:42:20:d7:b4:00:09:f0:64:28:
c8:67:4b:a3:70:e1:5f:77:0f:9b:c7:7f:a8:6b:05:08:e3:e3:
e6:2f:6d:5a:8c:37:47:8a:59:62:3d:c1:8b:7e:f3:e1:c7:c1:
a8:ca:85:47:82:3b:db:39:aa:f5:48:3a:b2:be:4f:b0:73:17:
c1:7d:9d:ab:2b:d6:f1:0f:32:0d:c7:99:38:8e:0b:78:53:79:
4a:04:42:a9:a3:9f:14:f7:8c:37:66:09:15:91:bd:b7:0f:c6:
52:d9:d6:92:f9:c7:00:fa:a4:1e:88:01:4f:f3:e6:e2:38:5a:
88:3c:56:73:ec:c7:b9:9b:c5:0a:68:c1:4e:35:80:cd:09:6f:
60:3d:65:16:6a:97:9b:af:70:2e:22:33:b2:80:a6:b4:e8:0f:
d6:4f:4a:00:6a:cb:74:0d:ff:2e:0c:d8:e2:04:c0:88:48:7a:
f1:aa:e9:27:87:47:cf:5f:e0:b5:76:1e:de:b7:13:95:ba:4d:
c9:68:88:c7:35:86:9d:4f:bd:10:42:f6:b8:e7:d6:ea:e0:43:
ee:5b:14:17:e2:f8:1e:0b:5e:61:d5:fe:2b:2f:22:69:09:f4:
ac:68:d1:1a:ad:cb:ba:32:b8:27:f7:48:45:d6:3e:1a:f1:10:
94:a6:55:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 14:33:49 2026 by rpki-client