Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
File: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft (raw, json)
Hash identifier: 5mOSW2ZYN/LVFB0rIosCS/6Y+/xTfUml7L5T+CjZ/Eg=
Subject key identifier: 6B:9F:FD:50:2A:87:8C:92:04:0B:62:0A:54:5A:A8:87:E0:6B:3D:EF
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 019FAA87C701FC5B6D8BF1C1FF72D96C4230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
Manifest number: 18FF
Signing time: Tue 28 Jul 2026 21:00:52 +0000
Manifest this update: Tue 28 Jul 2026 21:00:52 +0000
Manifest next update: Wed 29 Jul 2026 21:00:52 +0000
Files and hashes: 1: Lsrf7nsJ0SILJoz91hQ7QSVYOyM.roa (hash: e35RQqzj6QwkN2NUro/zWKe5ECceCwxDtJyTfKjd9Gc=)
2: XCiWygchwIEKERqPFwZ00-sFrY0.roa (hash: tFv0lTiieMgtOpoLPIFuEMNuZOBOLhYh1Oi1gR7OKqY=)
3: Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl (hash: zFu03YQPmWODw0UKcFiY+20wsJoQwMjGXAfkMY29jzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:c7:01:fc:5b:6d:8b:f1:c1:ff:72:d9:6c:42:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jul 28 21:00:52 2026 GMT
Not After : Jul 29 21:00:52 2026 GMT
Subject: CN=6b9ffd502a878c92040b620a545aa887e06b3def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:d0:bf:39:1b:53:0d:1e:23:92:40:b3:ec:
62:12:f9:bb:07:8e:e9:87:48:88:a5:e1:6b:02:3f:
62:4c:4d:92:b8:01:4c:e0:58:63:a4:29:a7:58:3c:
67:8f:ae:4f:20:82:f6:47:5d:12:ed:21:4d:a1:e3:
48:25:16:5c:40:b6:2a:25:62:b7:e1:6c:39:c0:93:
86:e1:a2:a2:d1:07:2a:c6:7a:3c:05:74:fa:7f:9e:
62:de:3e:e8:38:c2:d6:4e:1f:a2:c4:fa:46:87:03:
17:80:b9:80:d7:d5:59:40:18:5c:d5:ea:c2:73:8f:
32:6a:f5:ed:32:ca:f9:e1:62:19:08:4f:a3:36:0a:
d4:c7:c4:c8:4f:8b:5c:b8:15:34:e3:ca:b5:7f:05:
1f:0b:46:64:33:31:c6:25:49:49:41:68:75:02:52:
55:3d:aa:80:2c:eb:70:51:ea:1c:dc:41:af:8a:39:
95:61:3f:d8:56:35:72:84:e0:36:f7:ff:a6:6f:50:
b5:0b:e9:27:3b:d0:ca:30:8e:84:11:ac:86:d6:fc:
a0:29:b1:2c:cc:b9:e6:ce:46:e5:96:6b:ff:26:21:
6b:04:a4:89:98:b0:7b:50:66:b8:a8:a2:af:69:f9:
4d:65:96:59:d9:24:3f:ad:d7:1e:af:eb:e7:eb:8a:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9F:FD:50:2A:87:8C:92:04:0B:62:0A:54:5A:A8:87:E0:6B:3D:EF
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c1:c8:e9:b0:6e:83:68:04:4f:4f:04:d7:bd:a7:e6:fd:88:
46:b4:8f:ff:a6:ab:62:4e:9f:a4:6d:eb:60:be:1d:09:97:b7:
40:80:51:62:af:f0:f5:4b:c1:06:d7:22:50:ca:4c:d3:1d:88:
4a:21:ab:66:7f:f6:67:29:27:73:32:e6:ed:b6:a2:13:eb:3a:
25:b5:b0:73:a7:67:fa:a9:bb:38:59:9a:51:17:59:10:a5:93:
d9:56:16:ac:c2:a1:b5:68:4d:4f:89:3e:5c:23:ca:a6:04:d8:
44:85:bf:8d:6d:71:bc:2b:c6:bf:15:49:9c:aa:54:4f:36:67:
7c:43:7b:b4:28:88:ad:b0:c4:b7:e2:9e:39:06:4f:b9:9c:70:
94:00:3a:1d:8b:96:f7:e7:98:1b:8c:07:23:0d:36:65:ff:55:
f0:61:57:43:2d:3e:af:15:f1:3b:6d:8a:8a:ad:f0:09:4c:07:
07:3a:59:33:3b:68:33:92:25:c7:a6:34:9f:6b:32:8f:b8:5f:
85:31:8c:b9:c4:60:b0:19:73:17:ef:47:cf:5a:66:fc:bd:5d:
d1:9f:01:11:49:f0:bc:07:d4:c3:62:d3:aa:aa:c0:80:f3:90:
bb:8e:f8:e1:4a:4c:65:21:14:32:7d:e2:71:bb:e0:bc:ba:9d:
9d:4b:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:02 2026 by rpki-client