Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
File: Y0cDI_IxIpymkfPglRnBrILy6gE.mft (raw, json)
Hash identifier: 2OEht5BQ3uPfKCUhu78moYRmViu7L7gobPvrtF0r0jw=
Subject key identifier: F0:C8:EC:52:16:6B:3D:5C:61:53:DA:58:4E:23:4C:56:99:BB:7C:FB
Authority key identifier: 63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
Certificate issuer: /CN=63470323f231229ca691f3e09519c1ac82f2ea01
Certificate serial: 019FA93E571F298998CAD9EEB6247922B8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
Manifest number: 04BD
Signing time: Tue 28 Jul 2026 15:01:02 +0000
Manifest this update: Tue 28 Jul 2026 15:01:02 +0000
Manifest next update: Wed 29 Jul 2026 15:01:02 +0000
Files and hashes: 1: E0krjXu009T3jt9cr3fYovQCDpI.roa (hash: IPGdjP1/THS8Y3edpbZ6Sxvb1Cj7DJTCDKtVyiJIZuE=)
2: Y0cDI_IxIpymkfPglRnBrILy6gE.crl (hash: NJYjq3QPC31rP/cfhpery+Dtt8Vmxst39gaqf17B/tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:57:1f:29:89:98:ca:d9:ee:b6:24:79:22:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63470323f231229ca691f3e09519c1ac82f2ea01
Validity
Not Before: Jul 28 15:01:02 2026 GMT
Not After : Jul 29 15:01:02 2026 GMT
Subject: CN=f0c8ec52166b3d5c6153da584e234c5699bb7cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:a1:4a:2e:7f:25:80:0f:42:0b:ed:e9:9a:
95:3d:94:ef:7d:e0:74:72:3b:c4:53:cd:72:2c:9f:
ea:f5:3c:3a:58:67:dd:db:96:28:eb:ee:28:fd:82:
4e:8b:5c:8a:72:bf:66:b2:a1:53:af:55:dd:e8:09:
10:31:10:88:bd:bb:93:a2:7e:a6:12:f8:ee:46:96:
de:1b:22:8c:ed:32:31:b3:54:e9:ea:46:97:1c:88:
1c:1a:b8:14:5f:d0:9b:54:fa:36:b4:59:6f:26:69:
c3:28:3e:23:46:dc:ba:6d:9c:18:7d:1c:29:ee:02:
cd:a1:81:fd:11:92:63:c7:5a:d4:30:41:a1:5a:0b:
8a:11:91:ca:53:9b:2b:9f:73:0a:b7:0f:74:fb:e4:
7c:86:f0:8d:6c:de:74:ab:33:d3:47:52:0d:31:d6:
36:d3:4a:ca:0b:67:a5:7f:fe:27:09:e3:5f:28:c0:
06:87:c7:57:6d:18:55:27:52:a0:67:ed:08:f6:f2:
c5:77:60:a5:31:75:c3:15:0e:f9:97:ee:04:7c:a1:
38:e4:80:99:b0:53:73:34:c1:a2:a4:06:15:72:1d:
e6:79:00:48:13:30:64:01:09:f3:7e:a3:85:c8:bc:
d0:fa:83:ea:62:dd:f1:bf:ef:16:51:7c:d4:42:43:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C8:EC:52:16:6B:3D:5C:61:53:DA:58:4E:23:4C:56:99:BB:7C:FB
X509v3 Authority Key Identifier:
keyid:63:47:03:23:F2:31:22:9C:A6:91:F3:E0:95:19:C1:AC:82:F2:EA:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0cDI_IxIpymkfPglRnBrILy6gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ebf304-5ddb-4569-aa1e-d45c12472935/1/Y0cDI_IxIpymkfPglRnBrILy6gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d4:b3:a2:81:40:22:99:76:3b:77:1c:01:78:95:98:11:bd:
05:19:8a:e0:b1:71:18:4b:38:26:46:d7:7b:9f:08:26:d4:b3:
23:ac:67:88:67:90:16:6d:87:d8:2d:60:82:6f:b0:7c:54:9a:
8a:27:94:31:9f:f6:fe:be:25:3b:e1:50:ec:af:b9:68:25:07:
83:13:c8:bd:25:cd:93:9b:06:80:25:37:ce:e2:79:4d:de:81:
c9:ef:dd:aa:5c:18:77:a7:23:a3:c4:ce:89:d2:55:00:39:67:
70:6b:62:1c:78:8a:42:0b:6b:e9:2c:7d:c1:cd:19:28:96:fe:
b4:b1:05:a6:da:86:ec:a4:11:6d:8a:de:08:82:d2:56:59:20:
25:11:dc:9e:8e:60:f5:20:25:06:52:ae:43:18:de:93:62:c5:
a2:f8:90:38:e8:4b:0b:f8:ab:62:e4:d5:23:ee:48:6b:bb:88:
33:e7:25:ff:0a:6b:d4:8b:55:a3:20:d0:f2:b1:d5:41:af:58:
e3:cb:45:7b:2c:74:4e:81:7b:50:5d:1e:3f:77:eb:8a:65:43:
96:b0:c2:64:09:a8:19:88:33:8f:91:a2:b5:b7:47:07:ef:a3:
b8:fd:4c:1a:4a:b5:f5:96:16:c7:0e:89:5f:8a:89:13:9e:4a:
be:45:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:11 2026 by rpki-client