Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
File: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft (raw, json)
Hash identifier: HglLuICDJO9qKBliXz+6dGYT7LmD0hg0smAu96QIQ6s=
Subject key identifier: 9A:D6:47:A3:ED:AE:46:37:82:DD:01:FE:59:BB:4A:A6:7A:25:1E:E0
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Certificate issuer: /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial: 019FA93E791DE6D7D3F1D297DA692A372AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
Manifest number: A8
Signing time: Tue 28 Jul 2026 15:01:11 +0000
Manifest this update: Tue 28 Jul 2026 15:01:11 +0000
Manifest next update: Wed 29 Jul 2026 15:01:11 +0000
Files and hashes: 1: GhcMjny1TXWebHNpG3nX8AJ_o6M.roa (hash: 01RJ2qPd/9qIbm6XQe9IYI6taQh/cgn9v6zBF39c34w=)
2: KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (hash: 0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=)
3: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl (hash: 1YHCQxqFDQZR78opgoTnTVoaxXRlzN+nnvDafay3KVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:79:1d:e6:d7:d3:f1:d2:97:da:69:2a:37:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Validity
Not Before: Jul 28 15:01:11 2026 GMT
Not After : Jul 29 15:01:11 2026 GMT
Subject: CN=9ad647a3edae463782dd01fe59bb4aa67a251ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ef:81:2c:85:5e:a1:01:21:44:13:52:85:4d:
3e:dc:0f:05:e6:6a:73:d8:6a:af:bc:c4:e0:71:1a:
9c:42:8d:f1:3e:b6:e7:55:a6:55:99:92:dc:df:e1:
c1:42:a8:1d:a0:4e:4d:1c:b8:0d:ac:58:90:64:e6:
37:17:f7:53:91:6b:3a:e7:fe:a2:5d:72:6a:d3:03:
90:8e:bb:4c:e6:c0:38:99:eb:c6:8d:a1:cc:a7:76:
8e:60:ea:a7:32:14:8f:4f:cc:55:69:8e:45:23:f9:
f7:9a:42:2e:0a:9e:0f:6e:ca:e9:c0:f3:bd:e5:0a:
cf:05:8b:3e:cf:03:32:21:94:df:1c:24:27:36:1b:
2a:91:36:90:d7:ea:ab:90:3b:db:ba:4f:d8:f5:4a:
f8:2c:60:03:68:b3:46:e4:c9:ad:f6:a1:75:40:8b:
56:fa:8e:e1:42:e2:b4:e5:09:b9:74:cc:ec:fe:7d:
5d:74:fb:07:9c:7b:85:17:8a:f1:02:82:ec:a0:29:
4b:7c:74:d4:ac:d0:d1:6a:3d:15:15:32:7a:3d:c1:
af:aa:bc:62:ee:a3:90:34:98:f0:02:3b:36:c1:f3:
4e:11:86:be:3d:6c:ef:47:a9:a7:02:d7:d0:35:5f:
66:5d:e3:5c:7b:09:af:73:90:58:ba:13:08:af:8e:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D6:47:A3:ED:AE:46:37:82:DD:01:FE:59:BB:4A:A6:7A:25:1E:E0
X509v3 Authority Key Identifier:
keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:99:c6:4f:0e:cd:56:2e:f2:9a:33:73:5f:a3:37:2c:8a:c1:
03:b5:5b:22:49:18:50:ec:b9:22:bc:79:1a:e8:6e:ac:b9:01:
1b:c2:93:cb:68:0e:51:2d:67:df:4b:c9:aa:7e:48:f2:40:5d:
59:af:bb:6b:9d:28:32:05:12:fd:d7:fb:6e:8a:1b:9f:23:0a:
c2:d9:06:6b:91:9f:93:5a:2d:c3:93:32:22:c9:be:7c:c2:13:
12:c2:3b:22:21:fc:1c:bc:2d:8c:0c:92:85:0e:e9:19:9f:ef:
cd:4a:86:6b:57:bf:2f:56:26:a1:77:d4:58:4f:48:0d:f6:19:
f9:73:cb:99:7d:46:62:bf:fd:43:c1:35:4b:81:f6:ca:bb:01:
a8:d7:88:f5:9f:f5:3f:e3:93:d4:ae:2a:e7:e8:b4:1d:3e:18:
c7:2b:1c:56:78:4f:16:d0:94:f1:c5:b1:b9:ed:e5:d1:be:31:
25:42:9b:5a:4b:b7:5b:ac:7a:78:19:8a:a9:14:74:83:05:ce:
71:6d:2d:e4:78:e4:ad:bd:51:d5:24:13:08:38:b3:90:fc:54:
e6:ca:17:8e:1d:e4:68:2d:20:7d:8b:4c:6d:1a:fd:e2:a4:d3:
80:7b:30:e4:14:8e:75:07:cb:92:ed:72:73:81:1a:f8:20:22:
15:8a:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:39 2026 by rpki-client