Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: 5/3tYCbMTjtoPxeixEGj8OJYYojfzYfw5hVWzHSvYNI=
Subject key identifier: 4E:2B:33:AD:66:F9:96:F7:98:23:94:1F:65:80:D4:01:F9:CD:C5:F8
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019FAAF5A280976AE86A8E45BD5C0A22F032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:00:52 +0000
Manifest this update: Tue 28 Jul 2026 23:00:52 +0000
Manifest next update: Wed 29 Jul 2026 23:00:52 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: zF3lMDsx04TxPBNJxT3kVVZkl0FBgLOUL0INlVKIwoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:a2:80:97:6a:e8:6a:8e:45:bd:5c:0a:22:f0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jul 28 23:00:52 2026 GMT
Not After : Jul 29 23:00:52 2026 GMT
Subject: CN=4e2b33ad66f996f79823941f6580d401f9cdc5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:28:93:1c:36:d9:b5:97:ec:96:09:dc:4b:
e5:8e:6c:32:eb:18:a9:2a:40:a8:d8:c8:e5:90:94:
d9:f6:0d:d9:f0:51:8b:ec:74:43:d9:6c:17:43:3e:
d0:e7:c9:88:ea:72:1a:a7:08:b1:96:86:ca:f8:34:
95:23:8f:eb:92:10:07:b9:ee:94:bd:37:76:73:44:
eb:06:6f:95:ca:1c:f5:b1:31:d3:65:b3:6b:9d:3a:
ce:1b:a1:a2:2f:da:93:ff:3d:39:4d:9e:48:66:63:
0d:d8:64:14:35:3f:54:28:41:d9:bb:4b:47:d9:1e:
ae:d7:b5:75:17:e4:85:75:75:76:12:10:1d:49:b5:
64:47:49:67:2b:89:a7:71:25:90:ef:de:57:7c:84:
be:48:0d:a7:03:6f:15:22:09:b4:71:a8:d6:32:83:
fe:f6:b7:fc:36:e7:87:22:1c:43:98:43:cc:e0:f8:
d1:24:61:a1:4f:e9:b8:b4:b7:d4:a0:c9:71:01:56:
77:b7:f2:52:8a:e2:2c:17:8d:0b:c8:6d:11:52:72:
1c:b6:1c:32:d2:5a:83:73:d7:62:55:10:52:4f:8e:
ee:57:1c:d9:b1:0c:eb:ec:0c:4e:ba:11:e0:f3:99:
94:5c:7f:cf:5a:26:bb:c7:89:f9:f7:b7:f4:c2:81:
18:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:33:AD:66:F9:96:F7:98:23:94:1F:65:80:D4:01:F9:CD:C5:F8
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4a:9c:16:37:71:a9:9f:83:9b:03:e0:2b:2e:f1:a0:a1:df:
23:77:df:5d:d4:0d:ca:75:ab:84:c9:d1:9b:32:64:85:b3:b0:
20:93:1f:48:9a:64:f3:47:f0:cc:de:da:05:52:79:78:34:a2:
7a:17:04:6d:c2:e2:aa:41:82:c4:fb:47:c7:08:f4:b3:b7:be:
07:40:25:00:ea:8b:6e:43:91:e1:7e:08:06:a6:7d:2d:7e:71:
2b:cd:5c:e0:8b:ac:48:55:54:d4:10:50:c3:66:a6:11:f4:43:
de:c6:c6:af:69:f3:d4:66:b0:12:7b:68:ba:23:48:0a:97:4b:
6a:c3:6c:8e:08:d1:0c:60:2b:3b:16:21:ea:f5:e2:cd:44:9e:
60:2b:7a:99:e2:97:b7:ba:ae:2a:ab:3d:b5:ac:5e:24:c1:20:
f4:95:fa:43:62:be:ca:91:e9:f9:ad:45:9b:3c:7a:d0:33:09:
94:5a:91:f8:88:ed:b3:09:10:08:dd:b0:6b:76:78:17:61:09:
6e:aa:41:79:59:65:16:e7:8a:74:93:0c:6f:b7:bc:0d:7e:68:
d3:ed:cc:e5:5f:d1:24:ec:e1:11:48:e5:6c:76:c2:a0:6a:9d:
4e:6b:71:ed:37:23:4e:2b:af:3f:b8:19:18:bc:f7:c0:bd:65:
ce:a0:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:47 2026 by rpki-client