Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: cFs7X4CsiGeRL6fC45+fsMQ1k53d2CF8n8Fy8W1ojJ0=
Subject key identifier: 4B:3E:C8:31:3E:1B:8A:FF:D8:06:31:D9:E7:BA:55:15:D1:00:6C:68
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019FAB634FA2D6EE174D76455B7027B2AA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0D09
Signing time: Wed 29 Jul 2026 01:00:40 +0000
Manifest this update: Wed 29 Jul 2026 01:00:40 +0000
Manifest next update: Thu 30 Jul 2026 01:00:40 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: OcktbXOnYzCNgsodtcO16ybF8ID3kJ4V7ZVyCE6pDvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:4f:a2:d6:ee:17:4d:76:45:5b:70:27:b2:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Jul 29 01:00:40 2026 GMT
Not After : Jul 30 01:00:40 2026 GMT
Subject: CN=4b3ec8313e1b8affd80631d9e7ba5515d1006c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:af:33:35:6c:eb:b5:08:98:45:16:75:e3:
f7:70:b4:df:16:7c:2e:38:79:37:1a:66:30:25:fa:
ee:ae:e5:c0:f0:4c:96:99:bf:dc:85:0f:74:c4:a9:
27:b2:ac:ff:a4:2d:eb:66:76:f0:2f:ac:83:ad:70:
be:26:68:85:11:95:0e:a5:44:b5:c2:e8:b9:1e:4a:
c8:ef:92:03:ee:6e:84:2e:69:ca:c1:52:71:5d:d6:
cb:bb:7c:bd:bf:d3:5b:87:6d:80:05:7c:8f:cd:67:
64:63:fa:8f:45:ab:25:ed:de:cd:c1:33:f6:47:6a:
7b:79:fd:c3:68:23:f3:d8:94:8c:a6:ca:ae:08:bb:
bd:ed:30:cb:c5:f1:67:55:fa:12:24:5c:c5:bd:bc:
ca:2c:d0:d9:30:e7:d1:fc:52:d9:d1:89:e7:34:91:
2b:76:67:d4:f8:68:61:53:6e:88:74:90:03:94:b8:
0d:02:02:5e:1b:41:38:d3:fe:e1:c6:fb:2c:fd:fe:
52:00:bb:ed:bf:73:c5:4e:cf:c1:3f:29:34:f9:c0:
08:0a:82:2b:9f:34:5a:56:35:b5:33:48:1e:49:ec:
89:7e:e6:ce:86:a1:a1:1a:5f:70:c6:c2:f0:bd:49:
ef:44:c8:d9:01:bc:7d:fd:c4:34:3f:8b:72:ee:17:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:C8:31:3E:1B:8A:FF:D8:06:31:D9:E7:BA:55:15:D1:00:6C:68
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:96:42:f8:79:dd:04:de:c6:2d:84:07:68:2c:f6:d1:ee:f6:
92:22:79:8c:f6:01:8b:69:42:b9:66:4f:45:e0:4f:69:53:7b:
56:08:66:88:4b:ce:4b:8b:65:dd:7d:0b:ac:56:4e:d9:10:bc:
df:3b:25:6c:e1:34:d0:e7:29:b8:04:18:ed:77:6c:09:3a:5d:
cd:68:30:c2:18:39:42:90:60:29:37:63:28:9b:5a:6d:c7:f5:
48:2a:40:18:8b:88:98:df:4b:53:c2:51:5b:d3:42:c1:eb:cd:
25:3c:f6:28:f2:d2:8b:16:ad:71:e7:bc:e7:ca:29:c6:72:86:
2c:9f:39:da:24:28:82:9c:53:b0:a2:29:c9:23:8e:fa:0f:92:
38:9f:b9:0f:d0:8f:fa:44:c9:c4:ed:47:62:98:bb:b6:00:7b:
95:b7:24:40:b7:ef:46:fb:da:a8:07:97:79:a8:13:ef:04:ec:
5f:b9:50:15:81:c7:67:4d:a0:89:f3:26:20:57:a8:db:ca:40:
87:1b:f1:09:62:f2:e6:24:ee:65:c0:b8:08:1c:83:1f:0c:11:
b6:7a:11:75:6b:f7:4d:d7:ca:5b:9e:bd:50:f8:ed:6b:45:41:
88:93:ef:50:40:5c:1f:76:20:fd:0a:f0:d5:2a:5c:33:a0:86:
96:ff:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:43:05 2026 by rpki-client