Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
File: Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft (raw, json)
Hash identifier: 3zKta3+DwHr0YZL3XOrIkIKBjhApzRVBhwrB+0c3YHs=
Subject key identifier: 24:80:47:A3:E1:6F:9F:D4:CD:C3:97:2C:B3:0E:64:23:CB:EF:35:9A
Authority key identifier: 63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
Certificate issuer: /CN=63497e324554dcd7da084832e158686135468a98
Certificate serial: 019FA8622EC63DC93CFA0BEC76F0A095DBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
Manifest number: 37
Signing time: Tue 28 Jul 2026 11:00:34 +0000
Manifest this update: Tue 28 Jul 2026 11:00:34 +0000
Manifest next update: Wed 29 Jul 2026 11:00:34 +0000
Files and hashes: 1: JbP1DaYmfAXbAIIDLF2iKNau78U.roa (hash: TeCpeD604HqwpWXylmrKKY5o1QnXKpTZG7uy3rpUOas=)
2: Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl (hash: NAW7Pds3Hq8jh8gh/jWvPMr6RBnsB+9XMX+MSozzDOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:2e:c6:3d:c9:3c:fa:0b:ec:76:f0:a0:95:db:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63497e324554dcd7da084832e158686135468a98
Validity
Not Before: Jul 28 11:00:34 2026 GMT
Not After : Jul 29 11:00:34 2026 GMT
Subject: CN=248047a3e16f9fd4cdc3972cb30e6423cbef359a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0f:32:23:5a:68:b3:eb:8d:73:53:ae:bc:0a:
e4:d8:06:3a:da:5c:69:6d:a9:f0:51:43:38:64:3d:
3b:5f:b8:95:c3:e1:73:2c:a1:80:7f:ef:e1:d9:c5:
f4:75:67:87:df:22:04:94:2d:f9:a5:5c:a1:27:f6:
dd:5b:0b:4b:52:65:7a:32:85:72:ae:4c:3d:bf:b1:
5a:59:66:83:e7:3b:49:ba:30:79:73:44:08:32:7d:
10:23:d9:48:d2:d2:46:29:fc:d3:64:7e:bd:d9:be:
93:ff:4b:2e:65:eb:33:c7:7c:cb:d7:54:be:53:7d:
63:72:4b:66:2c:c7:a4:f1:14:83:b4:22:15:04:b6:
55:ff:92:1e:e8:09:bf:44:b9:21:b5:82:d7:15:3f:
3d:73:20:80:eb:1b:d3:5f:2e:13:41:a1:93:8d:4f:
47:1e:60:50:65:88:af:bf:dd:84:2e:4a:56:f7:d5:
b0:22:9e:fc:3a:c6:31:de:52:73:65:f3:89:86:32:
82:f6:2f:3e:ef:eb:3f:41:c6:83:9b:e4:90:54:09:
e3:08:ef:0b:2d:fa:3c:23:a7:da:83:36:8d:44:ac:
1e:18:eb:72:ee:6a:a2:bc:29:4b:57:df:8e:82:76:
c4:ae:ed:bb:1f:55:c7:8e:c1:97:7f:35:7e:64:e5:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:80:47:A3:E1:6F:9F:D4:CD:C3:97:2C:B3:0E:64:23:CB:EF:35:9A
X509v3 Authority Key Identifier:
keyid:63:49:7E:32:45:54:DC:D7:DA:08:48:32:E1:58:68:61:35:46:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0l-MkVU3NfaCEgy4VhoYTVGipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a862e1-3d9f-4b46-87cc-abb9627d95ec/1/Y0l-MkVU3NfaCEgy4VhoYTVGipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a3:f4:46:93:68:0c:49:93:d8:71:61:23:c5:2e:31:00:f0:
27:5d:56:97:48:45:d0:f8:22:76:24:df:4e:72:04:62:be:5d:
5f:90:82:26:70:2c:ec:5c:98:97:6a:96:fc:2e:6b:08:16:36:
55:42:5c:64:ca:6c:e1:1e:f3:de:ac:d7:2f:43:1a:1a:61:8a:
4c:ff:c1:a2:d6:d0:a4:d8:28:fe:97:24:03:ee:d3:df:bf:5b:
e1:fd:2d:aa:a3:94:16:f4:d8:45:3e:00:03:02:c2:aa:0a:4a:
a1:ba:8a:7e:e3:ab:37:39:32:e6:f8:88:98:e7:66:76:95:0b:
14:a1:68:7d:45:4d:27:a4:61:82:49:4a:03:33:48:5b:ab:85:
a4:c3:ce:01:8e:bb:ea:98:a6:fa:3d:9a:92:62:63:bd:98:22:
d3:dc:8c:9e:1c:5b:d0:8d:d6:be:5c:de:e5:04:a4:45:9f:b8:
fd:11:77:60:ca:8a:f4:e7:21:e7:bf:86:cf:6b:9c:96:8c:50:
7a:9f:8d:ba:41:c8:38:68:e3:c8:1c:1e:c6:d0:53:ad:b8:91:
fa:6e:df:00:5b:fd:c3:4c:3c:5c:02:62:df:09:7d:ae:b9:d8:
88:cd:da:c0:02:51:08:67:90:31:10:7c:f1:01:41:ba:c4:ea:
c2:43:b3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:28 2026 by rpki-client