Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: yJyvvxys4EJgxPCK889w/zs5tiuopzVrcNk9GxcxqT0=
Subject key identifier: 31:28:B8:DD:70:C9:F5:70:D1:C2:1D:8B:C0:BA:16:13:40:16:B3:EA
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019FA93E3595B3161FD39FF06EF5751BDC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 0AAB
Signing time: Tue 28 Jul 2026 15:00:53 +0000
Manifest this update: Tue 28 Jul 2026 15:00:53 +0000
Manifest next update: Wed 29 Jul 2026 15:00:53 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: nNNQEN0P+u/9+HXAKvT3FFD/snsR6f99mzX4icCBne4=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:35:95:b3:16:1f:d3:9f:f0:6e:f5:75:1b:dc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Jul 28 15:00:53 2026 GMT
Not After : Jul 29 15:00:53 2026 GMT
Subject: CN=3128b8dd70c9f570d1c21d8bc0ba16134016b3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:76:45:1f:63:fb:85:4c:34:e5:a5:20:72:
83:c7:0c:b6:10:5c:66:30:77:35:e2:fc:79:6a:74:
5d:d9:62:d2:09:91:d7:ec:b7:d2:4d:13:90:6f:e2:
82:5b:9e:48:27:6a:c9:17:96:3b:48:a9:13:f2:e6:
64:2a:26:01:64:4a:30:61:cd:e6:d7:59:3b:5c:be:
52:ed:24:16:60:ea:ee:40:a9:d0:62:7c:4c:e5:38:
cd:01:9e:cd:de:3e:27:42:cf:50:e3:53:11:eb:35:
ee:50:0b:55:25:94:82:ec:9e:a3:13:3c:a0:2e:1a:
86:c2:50:d6:76:28:63:57:64:5d:e6:12:90:fa:a8:
b6:b1:d2:52:28:02:04:1a:0b:61:0b:f6:64:83:a5:
81:06:29:f4:a5:5b:62:91:d6:fe:ab:83:27:3c:7c:
7e:da:93:a3:e4:91:40:40:da:ee:b2:83:bb:95:20:
79:8e:8f:56:f8:51:17:99:7c:cb:26:20:5e:f5:96:
72:1a:b0:04:e4:45:5b:4f:3a:52:dc:52:fb:17:e0:
95:a7:94:37:09:9b:17:26:6b:6a:6c:99:38:b3:8a:
26:9c:96:81:8c:ef:16:9e:34:36:20:70:f4:ca:d2:
71:ed:77:ad:00:7c:1a:72:7b:25:aa:10:19:cd:17:
a6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:28:B8:DD:70:C9:F5:70:D1:C2:1D:8B:C0:BA:16:13:40:16:B3:EA
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:03:c2:ff:6b:95:4a:65:04:d6:87:51:5b:7d:79:7f:ce:88:
52:a8:97:44:60:23:31:e0:76:99:bf:3a:f3:2f:a3:bc:75:20:
a3:2c:5c:69:da:ca:23:c4:c4:0a:db:54:ac:f7:e9:da:db:ea:
7d:6b:58:a3:c3:7d:98:66:47:3d:67:8e:e4:b8:e2:21:63:7b:
e6:74:1f:df:f4:92:bd:eb:12:aa:5a:34:7f:6b:e2:d2:4a:fc:
39:c5:65:e5:cc:5b:2b:15:32:f9:b7:0d:cb:e7:fe:90:fb:e1:
75:5f:2e:75:e1:f8:94:5e:95:f4:5e:6d:35:7e:ee:61:b5:ce:
44:bf:02:20:5a:a9:61:1e:34:f8:fb:46:36:46:c4:df:94:ef:
b8:a3:c3:a6:81:01:91:ae:fb:68:a8:e2:56:cd:a7:87:2f:86:
07:4d:83:8c:a2:7b:a9:c2:cb:0d:8d:41:1b:5d:e8:d6:63:65:
7f:46:34:c1:ba:eb:a3:54:81:c9:42:ed:71:4a:1f:53:38:e9:
a9:49:15:3e:42:0b:9a:29:dd:0f:a7:cf:3f:c1:ff:e8:0a:40:
ad:cc:6e:31:2c:3b:35:89:7c:91:2a:14:b9:fb:22:61:8f:68:
e9:fe:f8:60:52:5b:ed:24:f7:9c:93:a4:68:6f:5e:15:33:0f:
ad:3d:13:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:39 2026 by rpki-client