Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: +l5mUOf4oP8ZR4WSnEVHJ8wHXIJtvaDxIhUZAT5KUGo=
Subject key identifier: A1:B3:15:FF:FE:97:A1:64:C9:82:C0:EB:EC:91:66:10:5F:DB:DA:16
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019FA90721BD7229E666CA1CF0C98A1C38BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 19DD
Signing time: Tue 28 Jul 2026 14:00:44 +0000
Manifest this update: Tue 28 Jul 2026 14:00:44 +0000
Manifest next update: Wed 29 Jul 2026 14:00:44 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: jWYUpstQCkqWpjsijRh/u00gJf1t7ZlQNb4W5UIX92A=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:21:bd:72:29:e6:66:ca:1c:f0:c9:8a:1c:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Jul 28 14:00:44 2026 GMT
Not After : Jul 29 14:00:44 2026 GMT
Subject: CN=a1b315fffe97a164c982c0ebec9166105fdbda16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:ad:64:ee:01:c4:44:e5:78:bb:ae:32:4c:
71:4d:9c:61:cc:96:cd:16:65:38:2c:96:5a:ff:37:
94:03:94:36:9a:25:8c:c4:c6:0e:f6:49:35:ac:e0:
b7:2e:ff:8a:0a:73:a7:df:ba:d4:7b:ef:8b:97:34:
c4:88:d5:a7:97:7c:2c:b8:5a:3a:74:82:08:d4:bb:
34:ac:cb:9d:c8:af:91:ee:b6:95:41:1e:de:56:62:
f7:c8:00:42:51:22:62:17:7f:38:98:ff:9b:cb:59:
d3:82:2f:04:25:33:cc:1a:e8:a5:3d:c3:3b:02:cd:
25:45:b6:11:c8:d3:ce:8a:08:d3:31:38:81:e5:19:
4e:62:2f:17:80:d7:54:d4:57:38:9e:fe:ec:5d:f1:
7a:1a:43:c0:e8:40:9b:7f:5a:79:0e:20:e6:87:64:
8c:dd:48:9b:b5:27:b6:39:ef:ff:70:9d:b8:87:56:
62:4f:9c:60:b3:e4:d0:0e:c4:b0:44:37:46:db:de:
78:93:3e:2d:1f:39:c9:4d:12:8a:9f:37:23:71:cb:
17:37:50:24:21:b8:27:9e:79:6d:b7:7d:75:fe:73:
e4:e2:ee:14:b3:5d:9a:27:bb:31:9c:bc:be:e2:d0:
54:85:32:8a:d4:19:07:db:45:09:0f:13:cc:43:eb:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:15:FF:FE:97:A1:64:C9:82:C0:EB:EC:91:66:10:5F:DB:DA:16
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:6f:f8:67:b5:32:55:69:ad:bc:b2:5c:fe:e0:11:f9:de:
e4:e3:e8:51:04:58:55:8e:06:cb:33:f3:1f:72:55:01:10:c5:
ad:02:34:9f:e7:f4:a7:61:83:c9:04:76:91:dd:4c:4b:bd:d6:
df:3a:0d:b7:e7:9c:e0:0a:c2:73:5d:ae:5d:61:bb:5a:3c:c5:
4c:73:51:3c:d9:4a:87:e7:b9:59:5f:21:1a:27:c1:c3:30:cd:
d9:db:58:88:66:f2:63:cf:ab:bf:d4:bf:89:3c:4a:04:da:50:
32:37:a3:3b:9d:9b:68:fa:f6:d1:84:d9:ed:9b:9f:1e:d5:db:
ec:ca:c4:2e:d3:c7:70:ef:5f:2c:5a:21:4c:d6:e5:d8:47:7d:
0c:1a:6b:23:5b:8f:52:d6:6b:2b:28:ab:9f:dd:d1:94:19:a7:
3b:4a:1c:1b:4f:ca:a8:c7:67:a9:e9:7f:e6:fd:97:e3:26:45:
f7:a0:c7:4f:9a:70:e2:c8:7c:2e:25:f4:da:82:75:7f:f5:a5:
60:29:98:20:ae:ea:ee:ab:3d:f9:3f:f4:a1:75:3f:63:13:99:
d4:8a:ea:cb:a4:08:72:22:45:12:f8:60:75:da:03:11:ba:1b:
ed:76:55:9b:cd:38:f8:cd:cd:b2:2a:85:95:4e:0b:f6:75:29:
73:ae:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:30 2026 by rpki-client