Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: neooSn3gxmYux/+WK9tKzPTkWwpuePPZ2a2l15A8HY8=
Subject key identifier: 96:DC:CF:D9:A6:20:98:D0:38:36:86:76:18:5E:A3:90:AF:BB:4A:70
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 019FACACA89D7A0446491B5B97A1151A4281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 0190
Signing time: Wed 29 Jul 2026 07:00:24 +0000
Manifest this update: Wed 29 Jul 2026 07:00:24 +0000
Manifest next update: Thu 30 Jul 2026 07:00:24 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: Vu+jqVl3Yumphi/PzWz3YfV+J+RtWdACS1Sdw0v2gLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:a8:9d:7a:04:46:49:1b:5b:97:a1:15:1a:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Jul 29 07:00:24 2026 GMT
Not After : Jul 30 07:00:24 2026 GMT
Subject: CN=96dccfd9a62098d038368676185ea390afbb4a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:4a:cc:ed:dd:af:ac:e5:20:a1:eb:ea:c8:
31:53:d7:fa:fe:06:fe:2c:e9:34:2c:48:b9:8e:c5:
78:2c:2c:d7:68:82:fc:06:46:83:6c:f3:c3:41:c8:
63:09:4d:b9:76:12:f6:01:c5:77:22:e8:e9:ce:d7:
b1:14:f9:02:5c:f0:99:ad:3c:6a:5d:b1:5b:ab:46:
3d:3b:75:6e:27:2e:8b:6c:fb:d8:1f:9c:3f:7a:c8:
f9:92:0e:8f:29:ab:1b:d6:f2:f9:d0:7c:18:65:03:
4d:b2:22:6e:6d:04:ad:c3:c9:31:c1:48:06:39:d9:
8b:37:97:b5:25:5d:40:0d:db:3c:de:2b:72:75:ac:
68:ed:55:a4:3a:99:d2:9b:25:d8:e3:36:5d:80:13:
df:33:77:b6:22:05:87:35:f2:6c:10:3a:2f:71:7d:
93:49:be:5f:84:8d:64:4d:16:a0:af:77:e4:8c:b5:
ee:b7:0f:ef:52:f3:01:35:01:ad:77:f3:ad:fc:fc:
51:b4:17:21:24:23:ab:e4:84:72:ed:ff:51:12:29:
79:cb:d6:68:34:18:b1:8a:32:e2:e7:2f:3b:ec:88:
50:3a:2b:14:49:64:bd:f9:6a:7f:55:82:6d:6d:de:
f0:27:8d:02:21:10:bf:04:17:be:e8:e6:85:78:cc:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:DC:CF:D9:A6:20:98:D0:38:36:86:76:18:5E:A3:90:AF:BB:4A:70
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c3:5c:ce:60:70:df:b0:6d:50:cb:50:bf:61:e5:a4:6a:01:
4b:62:a4:8d:f5:53:1e:29:13:9a:71:aa:fa:7b:d1:bc:fe:c3:
ec:e5:fe:31:83:0c:2c:ba:81:61:03:85:c0:aa:fa:bf:c8:fa:
16:bd:12:a1:e2:9d:d9:7c:07:3d:d8:c9:6f:d8:4d:08:2b:39:
76:4c:3f:88:6e:c4:f4:a0:d3:f5:b3:88:3d:7e:65:61:0a:2e:
ce:5f:6f:1d:5b:c1:6e:d3:bb:89:38:f1:5d:c3:0a:f6:30:08:
c2:76:93:5d:23:ee:68:13:8a:18:2a:09:f7:94:f7:e2:d6:59:
7d:79:0b:e9:8a:df:07:64:72:cb:c1:9d:2c:52:78:55:91:08:
88:1b:b8:91:ce:c9:55:21:76:cb:e8:21:dc:15:77:09:aa:68:
2f:ff:2f:69:61:fb:7c:23:96:16:f5:b2:48:39:c4:ee:67:d0:
fd:eb:ab:13:16:7e:04:46:96:18:54:6b:e9:b3:e4:61:49:2c:
09:a0:3f:21:6f:5e:4d:ea:84:b3:d3:6a:00:c6:de:7d:1b:58:
fd:93:eb:88:a0:bb:b5:14:cc:17:1b:a5:11:87:bc:e8:ff:22:
8a:f7:c8:11:b3:dd:89:a9:32:60:4b:33:4c:f7:b3:19:ee:51:
3e:40:e5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:32 2026 by rpki-client