Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
File: Y2csMhGSVoEc_v9efDYpEZNlxBk.mft (raw, json)
Hash identifier: W+fmKVDL4v4KE3TkCjK/++TZ/gNuCsZlOux1Za+/J0A=
Subject key identifier: B1:28:20:52:18:14:37:E5:87:B0:34:1F:CF:1F:C2:71:A9:25:1F:0A
Authority key identifier: 63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
Certificate issuer: /CN=63672c32119256811cfeff5e7c3629119365c419
Certificate serial: 019FA89962957356FF3E94B0333C02EF91C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:52 +0000
Manifest this update: Tue 28 Jul 2026 12:00:52 +0000
Manifest next update: Wed 29 Jul 2026 12:00:52 +0000
Files and hashes: 1: Y2csMhGSVoEc_v9efDYpEZNlxBk.crl (hash: kqclCHN2x9da5UAX1Urlw86QIaPupSeogaeVZcZ6Cio=)
2: dX1Vj1Zg_v47CqacZN1UuRtVy7M.roa (hash: 7negqj+cXGDnJClvB1tA9Ds9JK3g22g19iEuLC7d5hM=)
3: zo2qx61yORuCWKZTMikpC0Y_XdA.asa (hash: htZ7XNkenFrj9WSytSLvWOuP7M7LeldRqaDXaKNxolY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:62:95:73:56:ff:3e:94:b0:33:3c:02:ef:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63672c32119256811cfeff5e7c3629119365c419
Validity
Not Before: Jul 28 12:00:52 2026 GMT
Not After : Jul 29 12:00:52 2026 GMT
Subject: CN=b1282052181437e587b0341fcf1fc271a9251f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:74:a4:f1:bd:2a:4c:57:14:ef:3f:85:4d:
f5:f8:48:fd:80:c5:4e:ee:84:11:e0:2c:38:20:a8:
15:11:ed:03:4e:21:d7:12:86:d9:c4:f6:56:4b:bb:
dc:b0:5d:21:2a:fa:60:b4:b5:6c:d7:cd:6c:fd:8a:
40:12:2b:10:56:1e:6e:14:56:1e:38:cb:a8:0d:15:
73:b3:18:4d:a4:18:ba:25:85:e5:4a:a1:5a:42:92:
73:ea:dc:46:13:42:40:04:1f:62:82:96:30:a8:eb:
64:56:eb:55:61:e8:8c:97:47:0f:28:7d:3c:1f:9c:
10:9e:1b:23:f6:7c:bb:5b:4c:ba:3f:cb:06:38:a8:
63:5f:09:3e:c5:77:02:de:69:1e:48:54:c9:74:b3:
54:2f:47:a3:5c:8a:15:b1:80:67:a4:54:e6:bd:6f:
24:3b:24:f3:87:e0:9b:d6:75:08:b2:fa:d9:4c:f4:
fa:1c:d5:9d:c6:50:85:3c:4c:fa:42:0a:7e:c3:ea:
ac:90:d6:f4:4f:1c:eb:0c:0a:68:a0:a5:d7:6d:45:
5a:6d:58:b4:64:22:84:82:69:0c:04:9e:64:43:93:
9a:b7:bb:74:bf:ab:11:a8:10:5d:b3:5c:60:86:23:
7b:bc:87:0c:54:75:3f:65:ec:a1:f4:84:55:2e:73:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:20:52:18:14:37:E5:87:B0:34:1F:CF:1F:C2:71:A9:25:1F:0A
X509v3 Authority Key Identifier:
keyid:63:67:2C:32:11:92:56:81:1C:FE:FF:5E:7C:36:29:11:93:65:C4:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2csMhGSVoEc_v9efDYpEZNlxBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/Y2csMhGSVoEc_v9efDYpEZNlxBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:17:c7:86:24:24:f7:61:c7:8c:90:2b:73:b4:ec:fb:21:f1:
fb:e3:8d:ec:54:2f:6f:6a:7e:4a:3f:89:cb:f0:3e:3a:ce:fd:
41:98:1f:23:a7:11:30:2a:32:0b:4d:68:46:7c:a9:18:44:d9:
63:b3:05:62:28:eb:94:c4:47:cf:4c:a0:1f:57:0b:f1:30:08:
b4:56:7e:aa:ec:eb:01:79:d8:e7:76:cc:ca:32:c4:3e:e5:6b:
80:96:df:54:37:22:a4:f0:2d:31:dc:e6:f9:26:06:69:93:e7:
e6:1e:ac:e4:8e:c6:58:02:51:5f:93:9e:95:1b:87:c0:b5:3f:
3e:3f:69:dd:69:f4:d5:45:d1:9c:03:48:6b:49:eb:31:6b:c6:
9b:68:df:ca:b3:85:f8:c0:0d:10:5c:f7:e6:ab:eb:fd:66:db:
58:4c:bf:5a:d4:fe:9e:e0:d2:83:de:c8:31:49:18:a4:84:fa:
d7:3e:32:fe:fc:0b:66:76:63:43:0d:85:93:d1:7d:8c:e9:42:
0a:bb:05:bc:3f:67:ff:db:17:e7:b0:5d:3d:bd:77:a9:17:da:
3a:4b:8c:a2:eb:87:7c:50:84:46:d2:b4:4a:ac:90:83:de:bc:
78:fb:1b:30:8f:3b:f9:cb:6b:6b:87:6d:32:60:cd:dc:95:d3:
9e:cb:8d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:34 2026 by rpki-client