Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: gaVpAQfOG5HbzqPvG23WqGiNB4+yusfU8uPbfwAUYkQ=
Subject key identifier: BB:57:CF:4A:C7:BF:46:FA:D7:7F:A7:8C:C2:2D:3B:D4:1B:48:DA:E2
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019FA89957B8BBB345E35747BD640133B4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 12:00:49 +0000
Manifest this update: Tue 28 Jul 2026 12:00:49 +0000
Manifest next update: Wed 29 Jul 2026 12:00:49 +0000
Files and hashes: 1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
2: PR33T4YXjO-tZqAZiQgeGwJ_Ca0.roa (hash: oPbU4Y8mKlBiefAqAJRo4HbwcVF9Ad3zQ3/NkA85j/Q=)
3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: nLO2OTh95E/yj5iJp890z1D81nqcNxPUjVcHVfMCiGM=)
4: bgwpe1XPspHXw9-58fArYTkDdSE.roa (hash: sTc3tvfZWKn7t7t02X8dggAsRS/C7RCVtpCWcGveXWw=)
5: hcEiOVl0IV3IE4216hs1e5DZGR4.roa (hash: ZC5U5qcJYYjeF6N2SbLW1XrnWze6Jseft5QLvx76FJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:57:b8:bb:b3:45:e3:57:47:bd:64:01:33:b4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jul 28 12:00:49 2026 GMT
Not After : Jul 29 12:00:49 2026 GMT
Subject: CN=bb57cf4ac7bf46fad77fa78cc22d3bd41b48dae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:9a:50:14:cb:d9:f5:6f:f2:a2:0f:2f:aa:
5d:89:8c:20:31:91:ad:0e:7d:cb:fb:ee:9e:00:40:
ff:94:a5:1d:cf:ef:1f:ac:a0:51:5e:35:a1:96:8f:
d9:fc:63:1a:e2:82:1e:69:4a:8a:0e:a1:67:6d:2d:
97:0c:cd:a2:ad:19:06:88:92:22:fe:c6:5c:be:f1:
47:f7:e1:9c:da:ef:49:8d:75:9f:66:13:aa:fe:e6:
79:c9:97:21:ba:60:89:95:51:69:13:59:14:ab:9d:
ed:ee:e1:c7:9c:9f:22:96:68:3e:bd:1e:58:fd:d0:
cc:90:1c:68:62:74:8d:63:02:50:97:ca:02:db:0d:
de:3c:ad:fd:9e:92:1d:be:47:89:07:95:55:2b:fe:
02:73:72:31:78:1c:ce:f1:88:9c:01:8a:41:62:54:
da:d7:31:96:a8:8e:2c:06:44:6a:9f:6c:99:f1:91:
ef:54:4b:63:ae:88:d7:80:48:66:ba:e2:9d:f9:25:
61:24:62:41:59:ac:4d:97:b4:6a:82:09:96:cf:cb:
47:60:28:e9:7a:ae:36:a7:cb:c0:1f:bc:9a:7f:ac:
f3:48:3c:5e:cf:04:d3:0d:28:0d:8b:73:38:d0:24:
4c:f9:59:f1:4f:16:a7:be:04:32:c5:0b:1f:13:da:
52:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:CF:4A:C7:BF:46:FA:D7:7F:A7:8C:C2:2D:3B:D4:1B:48:DA:E2
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ae:ba:26:71:8f:ad:dc:16:b5:85:84:04:c3:2a:f0:55:6c:
82:82:7e:77:f9:25:eb:07:91:3b:f6:18:f1:60:07:9e:a6:63:
a0:e0:ec:5b:96:2d:c6:bf:f2:00:a2:98:6f:a8:c0:ec:6f:86:
44:40:cb:a9:45:35:ef:e8:71:42:0b:f7:11:dd:b2:69:40:03:
57:f4:4c:f4:ef:24:6c:95:85:3f:24:c0:ec:78:26:75:f8:e0:
ee:1d:b2:a2:33:38:b8:c8:10:e0:a5:2d:c6:a0:57:a5:f9:0d:
35:35:1c:87:66:23:92:db:a1:90:fe:c3:c6:df:bc:14:f7:74:
76:15:84:25:ce:11:21:6a:23:9b:ca:8f:02:99:80:bb:25:bf:
60:a6:9c:d1:3c:59:fb:c9:c9:d1:d2:82:ad:0e:8f:59:5b:bc:
b7:0f:6c:3a:72:1a:fe:18:87:d9:31:14:71:f1:c4:0d:e9:93:
a9:5e:cb:eb:ce:04:18:f8:b4:50:9f:7b:db:9b:65:8a:9d:c4:
d5:92:ae:5b:a9:c6:b3:1f:94:38:76:f7:71:25:63:c9:14:76:
dd:dd:69:0b:c4:12:ae:54:5a:43:6b:85:40:68:fc:05:1f:2e:
09:0f:6a:0e:f6:d1:8f:56:ec:21:53:ec:03:49:23:08:99:1e:
2f:f1:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:10 2026 by rpki-client