Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
File: y0QccfqMdkotwsDswYPlLSOnrh8.mft (raw, json)
Hash identifier: tBDR3ohBOG5ZibPbnFyHUJYq1UE4d2e5qDoW6XBPwQk=
Subject key identifier: 2F:E2:19:EE:4E:19:B6:CE:34:01:25:63:B7:E1:19:0F:5C:8A:93:CD
Authority key identifier: CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
Certificate issuer: /CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Certificate serial: 019FAC76822660B58E4EB62EC447A19160AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
Manifest number: BE
Signing time: Wed 29 Jul 2026 06:01:15 +0000
Manifest this update: Wed 29 Jul 2026 06:01:15 +0000
Manifest next update: Thu 30 Jul 2026 06:01:15 +0000
Files and hashes: 1: 8cev6T1zaLrh6Jk14ObD9NyakTQ.roa (hash: to4V+vWxwt5dlu/ctWHIBNuLYFM8RdFNyqXTXudedwM=)
2: Ei_y7M9Fl_3iztRjXuP1DP4SfU0.roa (hash: OsSZawzfUresZMVh8cgGQhsAKGK/Kk+rAbkVCPwwXCQ=)
3: P28NAR-gwo3DWhrCfUDsje3yy5M.roa (hash: Rg/sbFjmtTahpzYygmbXRtVR2XC/RUmlzbY7QG8k+LY=)
4: y0QccfqMdkotwsDswYPlLSOnrh8.crl (hash: ct5GS+y16HQBM8cAFQoVkFSrnCTfkgZZyi7IxaO7wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:82:26:60:b5:8e:4e:b6:2e:c4:47:a1:91:60:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb441c71fa8c764a2dc2c0ecc183e52d23a7ae1f
Validity
Not Before: Jul 29 06:01:15 2026 GMT
Not After : Jul 30 06:01:15 2026 GMT
Subject: CN=2fe219ee4e19b6ce34012563b7e1190f5c8a93cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:97:e3:60:f7:a2:71:76:b6:d3:8c:8c:29:
81:df:4f:be:a2:cd:ec:32:33:1a:16:43:da:6b:42:
9e:c1:80:6f:00:9d:f7:6c:80:39:e7:4b:72:8c:aa:
c3:2e:4d:9c:7c:9a:81:a0:aa:a4:92:76:23:0e:08:
83:5c:68:05:18:dc:ae:c3:4f:78:11:88:0d:76:f7:
02:25:cb:4f:af:bb:5e:8b:cd:e2:75:34:17:f2:53:
e7:6c:63:d6:f7:ce:fa:6c:3d:c5:d0:10:11:f5:8a:
10:0d:18:27:9c:73:28:29:e4:e1:54:a3:10:ba:5c:
df:bf:52:7b:da:23:7f:32:78:1d:31:06:62:2a:1f:
06:8c:44:6e:c9:32:c0:9b:5b:be:bd:79:32:85:b3:
e5:cd:d5:27:8b:4c:8b:87:86:d6:93:d8:c5:77:a9:
31:d2:c3:b7:c7:ce:60:c9:44:eb:c9:ff:18:60:e0:
fd:59:68:c0:ae:26:00:82:51:a2:58:d0:d2:bf:43:
f0:10:58:2f:52:5f:4c:cd:89:d3:9b:2b:f4:c8:20:
32:57:37:35:0f:44:1c:72:f2:de:ac:b8:69:f0:7f:
dc:2b:68:94:12:6e:bb:1d:22:cb:b6:6b:f9:66:7a:
b5:c4:69:92:5d:4d:6a:81:c7:05:ec:7f:09:d8:2e:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E2:19:EE:4E:19:B6:CE:34:01:25:63:B7:E1:19:0F:5C:8A:93:CD
X509v3 Authority Key Identifier:
keyid:CB:44:1C:71:FA:8C:76:4A:2D:C2:C0:EC:C1:83:E5:2D:23:A7:AE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0QccfqMdkotwsDswYPlLSOnrh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/620e84-c5a3-48bb-a014-ee70e1dd5a10/1/y0QccfqMdkotwsDswYPlLSOnrh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:57:62:32:0f:a1:a8:53:fd:d7:3e:b8:39:41:e0:43:2d:b3:
6e:35:15:a4:39:93:5e:7d:9a:be:9d:5b:47:fe:42:a0:86:ff:
4a:5e:b5:cb:32:7e:32:3a:10:3a:1f:ed:4e:ab:a6:77:ff:b2:
f0:1b:1a:9d:e4:6c:3a:8b:20:8e:2f:c2:e5:c9:b6:84:14:8f:
4a:c7:55:1d:5d:c5:ba:91:0e:c2:97:d2:4e:da:0d:e0:ba:45:
33:d4:69:1d:56:bb:a6:fb:10:25:01:85:b8:72:ae:5f:28:49:
5b:b5:97:8b:41:df:cf:e5:7c:f7:8f:4c:d0:15:91:14:f5:ef:
69:e0:54:ba:2b:ee:3f:17:b4:e0:59:3d:ee:01:93:bd:1f:82:
a1:a4:b1:92:5e:f2:1a:50:db:a2:17:7a:4b:a9:c6:8c:14:b0:
bd:bc:43:76:30:98:2f:aa:12:e1:6e:f1:5f:c8:53:ec:58:11:
9d:7b:21:c8:28:c3:c6:8e:b8:fa:1d:74:ea:89:43:e9:50:eb:
e6:aa:33:60:8e:6c:b2:1d:86:07:ef:a4:54:9f:45:02:e4:02:
c5:69:4a:98:45:8a:6a:a7:bb:fb:0f:90:86:6b:aa:66:b7:8a:
fe:13:16:f3:2f:02:59:7a:01:dd:e7:24:ac:b2:51:d3:28:2d:
81:ec:e2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:34 2026 by rpki-client