
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
File: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft (raw, json)
Hash identifier: 6QmBYAzwkWg/PyEzQ6xWnmknFBY+VEtfLXnYXuJZT3o=
Subject key identifier: B9:DF:1F:70:DF:FC:3E:05:11:A2:B8:AA:EF:72:71:D1:80:DF:B2:D0
Authority key identifier: 63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
Certificate issuer: /CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Certificate serial: 019FAC75BD79FCCC69CCC7AABBB71E34FD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:25 +0000
Manifest this update: Wed 29 Jul 2026 06:00:25 +0000
Manifest next update: Thu 30 Jul 2026 06:00:25 +0000
Files and hashes: 1: 7cTjsLRiYYSxjEiyyxvrM7VcUoM.roa (hash: 9oRDcj/n0yIWrTx9daAB6UyBKfL+1eMjORwY8HvJ18Y=)
2: Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl (hash: bD0KZNKbU8SLkwfUQ3KkedVPH7AP2Jn/p/2+NvT5Lg4=)
3: p0eoEVp2ZRfAFQIEeNZFFp6BKKo.roa (hash: 7ygvBpXf/4xZkV++cCRPOzyCKN66G0s7NhzA+lJoryE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:bd:79:fc:cc:69:cc:c7:aa:bb:b7:1e:34:fd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63cb81a7af136d96f0c76051da6e4d05d1ff633d
Validity
Not Before: Jul 29 06:00:25 2026 GMT
Not After : Jul 30 06:00:25 2026 GMT
Subject: CN=b9df1f70dffc3e0511a2b8aaef7271d180dfb2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:71:1d:d0:77:69:2b:56:d8:46:15:99:99:
3d:14:70:02:c6:3f:61:c1:a3:d5:9a:f8:5e:9d:d2:
0b:c6:f0:aa:e3:02:9f:00:a3:01:72:de:09:56:e1:
98:b1:88:9f:b1:fe:08:b2:78:a1:d2:d1:3a:0f:9f:
3c:1a:77:c2:03:c3:46:6c:df:76:97:66:fc:8b:31:
b0:6e:30:ba:c6:55:34:3d:be:88:e4:2f:64:6a:2b:
fb:76:83:96:fc:3e:83:4f:1d:d1:b3:ad:60:86:69:
51:3e:77:13:24:20:6c:3c:03:c8:b1:1d:2c:58:35:
28:97:73:3b:77:59:c7:8e:68:9e:ab:03:12:77:81:
d4:a2:fd:f3:0d:af:1e:25:14:e0:72:4b:6e:e3:f7:
df:75:ab:17:d0:8b:33:f6:2d:ff:7f:f2:26:0e:cc:
9a:cc:6f:44:01:cc:31:63:50:40:e8:0d:3a:0c:1a:
fa:0b:52:90:4a:68:03:10:2f:e4:10:d8:35:d2:16:
88:eb:96:18:f6:b4:23:f6:6d:c2:9f:ed:db:26:8f:
b0:a1:63:04:23:43:95:90:04:f6:65:ba:c9:85:c7:
23:94:51:df:83:83:c5:6c:3f:7b:1e:24:86:74:98:
19:35:59:16:b7:dc:da:a4:c1:c9:4d:c6:0e:83:5e:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DF:1F:70:DF:FC:3E:05:11:A2:B8:AA:EF:72:71:D1:80:DF:B2:D0
X509v3 Authority Key Identifier:
keyid:63:CB:81:A7:AF:13:6D:96:F0:C7:60:51:DA:6E:4D:05:D1:FF:63:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/Y8uBp68TbZbwx2BR2m5NBdH_Yz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c7:af:aa:1c:d1:67:7e:90:d8:36:e4:a2:82:b8:9d:e5:08:
bf:e2:ca:8e:a9:24:c9:fa:43:75:2c:16:d8:0f:e4:e9:c7:5d:
c2:2c:5d:b2:ff:25:a1:14:50:35:de:d9:68:5b:fa:37:64:6f:
78:47:62:5e:3f:17:1c:a0:2a:aa:d6:a4:b2:74:46:f0:26:39:
30:39:20:56:ab:ca:d2:ba:8f:22:5f:86:c5:54:dc:e6:5f:da:
15:ed:9e:2a:05:a6:3e:2e:55:89:28:22:a7:92:c3:f2:df:17:
4d:38:0e:c0:13:01:e1:c9:d2:c6:ba:db:2a:8f:9c:f0:59:56:
b1:45:d8:70:21:b2:ec:84:8c:8a:60:e3:11:02:29:ad:4b:b3:
9d:80:ca:58:9a:73:9b:c9:c5:a1:f2:a0:ad:a4:bd:40:70:ff:
1d:de:be:a5:40:a3:91:c5:74:69:b5:34:cb:ec:8c:d7:f5:09:
72:4d:19:5c:32:94:46:7f:2c:64:8a:80:78:0e:46:1e:d6:78:
9b:4d:09:0a:72:33:d9:0f:5e:1d:f2:9b:e6:f4:86:78:0f:32:
4d:1a:a3:2f:35:1b:52:bb:8b:2a:84:f9:ab:4f:64:51:e8:f7:
8a:91:e4:ec:46:f2:f3:0d:46:f9:15:7c:1e:ce:f4:08:07:58:
47:55:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:33 2026 by rpki-client