Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: BaRsRrhDY6g8b5d8IiYZQ57hP3cNVuHATxycYXNR5as=
Subject key identifier: DB:8A:7F:94:8D:5C:5C:3A:F0:70:1B:57:1A:B8:C1:25:FA:D5:A6:52
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 019FAB6363EA653EE18148CA11EDAD8A360E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 1669
Signing time: Wed 29 Jul 2026 01:00:45 +0000
Manifest this update: Wed 29 Jul 2026 01:00:45 +0000
Manifest next update: Thu 30 Jul 2026 01:00:45 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: W9YGg1dbHqcV+sp9PU8pb7txnu64ddu+sot94HqA+oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:63:ea:65:3e:e1:81:48:ca:11:ed:ad:8a:36:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Jul 29 01:00:45 2026 GMT
Not After : Jul 30 01:00:45 2026 GMT
Subject: CN=db8a7f948d5c5c3af0701b571ab8c125fad5a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ab:67:36:b7:93:3f:ce:86:7d:dd:df:ed:70:
15:e6:57:61:eb:c0:e6:78:83:18:f0:2e:e7:d6:60:
0d:72:e3:2c:43:3c:13:4d:2c:7c:16:c5:ef:40:af:
bc:55:47:5e:e5:69:d3:6c:e4:eb:f7:b1:14:14:c1:
78:5c:47:a9:2b:22:eb:5d:0a:fe:86:12:22:cb:31:
d0:7b:11:b6:8c:37:89:ce:f2:e9:63:d0:f5:9b:3a:
a1:b9:f0:0e:cc:7b:61:07:9a:fc:64:b2:8c:2d:e6:
6d:55:29:09:5b:4d:cb:2c:cf:c3:14:12:73:5f:8d:
20:cc:a4:0d:51:92:86:67:75:93:29:33:f8:44:8b:
6f:02:6d:ef:fd:15:78:83:eb:28:e6:8c:6c:71:7f:
8d:6b:56:89:95:74:75:14:45:24:be:ba:e1:01:dc:
90:c1:15:83:69:11:fc:df:73:58:47:63:b8:bc:57:
a3:db:9b:88:38:26:54:b7:e9:e0:ff:51:f4:44:aa:
30:f9:31:52:69:48:35:01:5d:74:ff:55:06:47:0f:
08:2f:af:30:07:85:ec:3f:74:d3:bc:1e:21:ad:86:
a7:56:24:1e:fc:61:18:27:7e:8a:0f:ac:d5:0c:74:
7f:e2:d2:24:13:d3:23:c9:fc:63:36:46:6b:6c:e2:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8A:7F:94:8D:5C:5C:3A:F0:70:1B:57:1A:B8:C1:25:FA:D5:A6:52
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9c:f5:56:f8:2e:99:56:f1:b8:c8:92:8c:40:8e:07:a1:cb:
ce:5f:e0:e3:75:36:db:9e:39:61:7e:87:bd:74:e2:a0:80:66:
6b:3e:2e:57:63:2f:9d:c3:c4:fd:8f:a1:10:78:dd:46:f5:71:
40:aa:50:2f:a7:89:59:71:14:e0:e0:ce:30:a7:6f:d0:e7:6e:
24:2f:73:f6:f0:5c:c3:65:5e:c1:73:ae:cd:7a:dd:87:cc:50:
f2:67:d3:51:7a:36:0d:f7:6c:d1:95:c9:5e:98:82:13:f6:c3:
12:3f:67:df:7d:8d:d0:63:9b:a3:41:4c:6f:73:7e:39:e7:d2:
81:d2:e2:97:c1:8f:e8:2d:ec:a5:6e:d2:78:ec:8a:d8:67:f4:
82:e8:b9:7d:25:48:d9:43:cd:d3:82:7c:1b:40:70:71:d5:27:
32:c8:62:b5:bd:68:f4:b6:f1:27:16:fa:60:f1:7e:3d:f7:f0:
c3:1a:47:b4:33:ce:62:1c:0c:ce:42:21:d5:7a:7c:d9:e8:5d:
00:c8:03:65:29:07:1b:64:91:57:7d:6e:f1:01:b4:c9:7a:a7:
b2:bd:a3:fc:d9:48:70:c5:51:ad:b6:7d:54:94:3d:a7:a9:79:
3c:3e:56:51:ea:61:81:c5:f6:0c:78:8b:7c:62:74:d1:d3:3c:
a2:b5:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:15 2026 by rpki-client