Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: A5NpmaS9zOsTZClNgixNWGg902eYzsf1HpWK31JGxU8=
Subject key identifier: E2:8E:D1:90:28:39:D6:E9:8D:78:49:AA:56:C8:E7:E6:23:94:5A:7D
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019FAC76FE943BE26FC211444C3B6182A84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 06:01:47 +0000
Manifest this update: Wed 29 Jul 2026 06:01:47 +0000
Manifest next update: Thu 30 Jul 2026 06:01:47 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: iPnM6iN7KdMcISIpfX5eC1D8pn6vlSfUGtTpshfhGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:fe:94:3b:e2:6f:c2:11:44:4c:3b:61:82:a8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jul 29 06:01:47 2026 GMT
Not After : Jul 30 06:01:47 2026 GMT
Subject: CN=e28ed1902839d6e98d7849aa56c8e7e623945a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:79:44:51:58:ac:d7:99:25:8b:98:c2:2b:67:
80:75:4f:ac:d8:78:1b:d3:e7:0e:a2:27:a8:3c:9d:
70:dd:08:2f:ff:69:d1:a6:08:f2:df:3c:01:be:d8:
6b:b9:b0:ce:20:ca:38:c3:b9:cb:af:9f:fb:e1:e8:
dd:41:7e:50:1e:13:43:fb:50:6d:83:33:77:c8:6d:
e0:21:17:85:06:f6:09:ff:31:3d:72:ca:d8:a5:cd:
8e:38:08:4c:8a:91:e5:90:30:a3:00:b4:36:1d:72:
a9:6c:67:91:4d:8a:71:dc:fe:0c:6e:cd:c7:00:c8:
2b:3a:33:51:cb:63:bd:8c:76:1b:6d:cf:9b:a0:7b:
47:b0:25:59:d8:12:d6:7d:03:ce:b5:bc:8a:30:e6:
bd:cc:34:35:b2:f8:ed:a6:83:ec:85:68:32:44:3c:
20:b6:f5:06:1b:85:c6:6e:4c:b4:22:0b:f7:3d:4f:
56:b5:a4:79:84:ee:f6:32:80:a7:34:f1:8c:84:7e:
02:55:0a:95:5c:39:76:a0:44:70:bb:18:73:a1:07:
72:df:16:be:55:5d:17:0f:4d:71:93:b2:19:43:7c:
3f:36:7d:61:3f:da:94:b6:d7:f6:ea:30:7e:f1:63:
df:4a:b7:c2:0f:b5:f9:9e:11:2a:e4:f9:02:e5:98:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:D1:90:28:39:D6:E9:8D:78:49:AA:56:C8:E7:E6:23:94:5A:7D
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:ac:3d:70:a3:f2:97:06:07:4d:44:fa:7b:c5:fc:b2:64:
de:be:c4:47:b0:05:e7:dc:de:64:0d:4b:a6:d5:54:77:9e:14:
fe:0d:55:db:4b:e4:a1:26:a6:b1:2c:72:0c:8e:e3:be:2f:99:
3d:61:0c:42:58:99:cc:ea:a7:6d:90:5b:83:67:2a:e0:61:fb:
8e:7a:f3:e8:61:16:de:87:75:f3:34:d9:87:f5:88:fb:f0:2b:
a5:7e:06:c6:ca:ca:b4:35:8f:94:a7:2d:e0:b0:c6:27:fa:23:
5d:3d:bb:9f:65:e1:a2:07:54:a0:2a:cb:79:37:b5:c2:d9:dc:
36:42:b3:25:60:6b:53:e2:ce:47:b0:94:b8:cd:90:43:77:5c:
c6:c4:80:db:6f:2b:f5:3c:a8:63:06:ec:20:63:af:56:69:ee:
74:c5:f3:fa:74:ba:74:1d:02:e4:50:44:33:df:3a:de:da:6b:
3e:5f:14:09:be:06:58:e7:4f:d0:6a:3c:cf:14:77:f6:f6:78:
c0:fc:2a:fb:12:18:7b:77:92:5e:1d:38:a7:06:f3:b3:8e:9f:
d1:fe:0b:be:24:28:b2:16:8d:09:27:93:dd:f0:05:12:58:69:
68:f5:1b:91:1b:81:c6:3b:6f:15:33:ce:47:08:50:db:9f:1f:
36:e4:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:34 2026 by rpki-client