Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
File: Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft (raw, json)
Hash identifier: RPsthlNXTh3O1NJpDPBkezDtKddoPS25blXnfUsfJRM=
Subject key identifier: 26:0E:81:13:A5:F3:BF:AB:FF:22:7E:59:34:D8:3F:76:A5:B7:37:B4
Authority key identifier: 63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
Certificate issuer: /CN=63d87ebc77db75024336fee91aba63d897fc7452
Certificate serial: 019FA8991F62D677E9A847F60A36353ED26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:35 +0000
Manifest this update: Tue 28 Jul 2026 12:00:35 +0000
Manifest next update: Wed 29 Jul 2026 12:00:35 +0000
Files and hashes: 1: 2wwJSN-aUvUu9Rxb4n6669OEQt8.roa (hash: w+2Vw7XNkk5azSPXvwkjHp7ZpTzcCE9fRC6rKTH/wjI=)
2: FRFGvgi2to8bVz8gK33C7Zcp9-M.roa (hash: ayMTUA2GjSPFdKep9QPV41LfFlo7JL6V3IT7Srxtqik=)
3: Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl (hash: wj8qAyQ0TZuuWnX69/5D37LmDL2W/NL6cJ7mnVjmftM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:1f:62:d6:77:e9:a8:47:f6:0a:36:35:3e:d2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d87ebc77db75024336fee91aba63d897fc7452
Validity
Not Before: Jul 28 12:00:35 2026 GMT
Not After : Jul 29 12:00:35 2026 GMT
Subject: CN=260e8113a5f3bfabff227e5934d83f76a5b737b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:68:86:2e:7f:11:20:01:9d:bf:ac:af:df:
0b:0e:d2:31:ac:50:16:cd:3a:6c:f1:c8:2e:4a:4a:
0f:e1:1d:8f:a6:b7:ed:5b:ce:fd:0a:c8:02:ba:a3:
dc:2f:06:4d:2b:4e:e3:1e:66:4d:e5:8a:23:f0:bc:
0d:3a:ad:5e:c6:87:82:6f:ec:f2:cf:69:67:28:3c:
56:e4:3f:68:8d:c1:83:ac:13:73:0d:23:af:90:47:
82:e7:28:81:f9:04:7b:87:53:7e:ca:7b:7e:b4:c7:
83:9b:d0:d5:7f:e3:1a:86:f5:67:91:ab:b1:2f:45:
0b:41:2f:76:e0:30:9e:44:ac:f3:02:78:42:d9:6e:
ff:c5:d4:ab:37:24:1a:d6:04:bf:46:e4:c5:80:2e:
c9:7d:a3:75:a4:e3:ae:d4:4f:74:8e:d7:f5:b6:82:
f7:40:17:3e:a0:63:39:7a:27:f6:2a:65:a5:f8:25:
9a:62:04:0f:26:19:89:61:01:47:29:13:0e:28:dc:
3a:13:c9:db:d2:6d:ad:4a:c7:09:48:bb:12:b7:4d:
6d:fb:23:20:52:f1:e1:1e:ae:3f:ed:3d:d3:78:ac:
2c:dc:3a:ef:b7:d6:45:27:93:82:7c:c3:29:5a:62:
c7:b4:d0:2c:a7:9d:99:1b:72:49:68:45:17:1d:e1:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0E:81:13:A5:F3:BF:AB:FF:22:7E:59:34:D8:3F:76:A5:B7:37:B4
X509v3 Authority Key Identifier:
keyid:63:D8:7E:BC:77:DB:75:02:43:36:FE:E9:1A:BA:63:D8:97:FC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/Y9h-vHfbdQJDNv7pGrpj2Jf8dFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:8d:eb:44:37:bd:a2:49:e6:1a:85:f9:47:3c:26:79:1f:12:
b9:8c:19:ab:87:0b:47:14:ab:41:09:20:55:d5:c0:a5:62:d7:
a2:9d:45:d9:3c:27:87:1a:24:7f:11:b7:ba:e2:37:56:bf:2c:
ce:c7:fe:77:59:bd:7d:d9:72:f3:15:0d:0b:ac:94:9c:9a:b2:
1e:fb:d2:f6:98:c8:9c:b7:78:ac:46:8b:52:58:d5:f1:2b:3e:
49:fe:cd:03:92:dd:98:fc:56:6d:e2:f1:56:77:72:8f:e1:36:
30:ae:78:7c:24:eb:15:cc:b9:b5:69:27:6b:78:14:3a:ef:ba:
5b:17:6a:af:88:83:10:b1:51:3d:d5:cb:5c:c0:6f:ec:f0:a2:
3f:aa:fe:45:51:b6:cc:18:de:1f:cc:be:8d:0a:a4:e9:05:ec:
35:c6:fd:58:5c:35:57:93:ae:74:eb:d0:bd:c2:5d:25:a2:30:
0e:16:30:d7:46:3c:7c:38:57:cf:e3:46:0e:98:e6:e7:0b:43:
4a:38:6b:33:ef:4d:43:01:01:f9:94:c5:ec:e0:a2:77:90:5a:
b9:63:73:8a:52:d2:b1:5c:55:d1:18:d5:9a:3a:ca:53:be:66:
60:82:b4:a3:ce:e6:22:27:ff:dd:ad:6e:b1:4b:76:9a:63:43:
6d:19:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:38 2026 by rpki-client