Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
File: y2qe-BDtqvUkU9KDc-8PebCb1j0.mft (raw, json)
Hash identifier: Xa1vvT+7RPhbXAIh4GjXfDQv0EtKopbeoG674/emfxU=
Subject key identifier: CB:46:85:21:5A:37:95:39:43:D7:69:F9:F6:96:6B:AE:2A:DC:C4:31
Authority key identifier: CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
Certificate issuer: /CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Certificate serial: 019FA9079FA1DC48A1BCC5ADC9CA32800450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
Manifest number: 28
Signing time: Tue 28 Jul 2026 14:01:16 +0000
Manifest this update: Tue 28 Jul 2026 14:01:16 +0000
Manifest next update: Wed 29 Jul 2026 14:01:16 +0000
Files and hashes: 1: 7sRoOWKbSUAYn6fc2kMDiGOFSzI.asa (hash: bVK40h1po743oXeQksBOOUrJaKABeP31ahdGkgnYLa4=)
2: y2qe-BDtqvUkU9KDc-8PebCb1j0.crl (hash: 18mbB7hHoLQR6loZ9Wi/N7Z2iQ8zc2h3m9Mzhqd5twk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:9f:a1:dc:48:a1:bc:c5:ad:c9:ca:32:80:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6a9ef810edaaf52453d28373ef0f79b09bd63d
Validity
Not Before: Jul 28 14:01:16 2026 GMT
Not After : Jul 29 14:01:16 2026 GMT
Subject: CN=cb4685215a37953943d769f9f6966bae2adcc431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:ea:d9:b7:99:ad:f6:96:6b:81:fd:55:e9:
da:23:39:ea:c5:e7:48:38:c0:c2:83:c8:4c:5f:c3:
c9:f6:cd:0c:1f:19:83:05:46:c8:26:e3:f9:00:a5:
26:a3:4f:67:ce:3c:aa:b8:e1:7a:3e:31:56:bf:c0:
b7:5a:7c:c9:ee:b5:79:cc:76:1e:87:9e:11:d4:26:
6b:64:8b:9d:b7:98:1f:6d:02:10:b3:b6:b5:11:03:
89:c3:89:26:38:d0:05:f9:62:a9:e1:a1:1b:7a:ab:
87:8b:f5:87:6f:c6:ca:c0:55:af:d1:15:7a:bc:36:
fe:f4:71:3a:02:8d:13:28:16:2c:8d:f1:c1:69:99:
89:ad:cf:69:39:f9:8b:97:cb:8b:62:cd:8e:2c:bc:
0f:57:7c:b5:e6:aa:11:cb:40:a3:28:9f:d3:18:6c:
8f:55:53:20:82:c8:f4:56:00:e6:e2:af:8a:57:c8:
b9:1d:39:29:1b:de:da:c9:e8:cb:89:e5:f4:45:06:
bb:46:2f:57:36:c2:0c:5b:23:9f:aa:9f:49:3a:fc:
c5:bd:a3:b6:a6:51:db:a4:8d:e9:68:89:f5:50:83:
86:ef:fd:eb:70:15:f7:51:e5:aa:93:95:92:26:c9:
9f:bb:5f:fa:93:06:38:26:b3:ae:f4:f6:10:99:e4:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:46:85:21:5A:37:95:39:43:D7:69:F9:F6:96:6B:AE:2A:DC:C4:31
X509v3 Authority Key Identifier:
keyid:CB:6A:9E:F8:10:ED:AA:F5:24:53:D2:83:73:EF:0F:79:B0:9B:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2qe-BDtqvUkU9KDc-8PebCb1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/96dcd6-0a8c-4e54-abe8-4a3e1fb9aae9/1/y2qe-BDtqvUkU9KDc-8PebCb1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:46:c4:ee:31:5b:fa:06:a8:1d:9c:06:69:50:1f:7a:3d:72:
39:c3:35:d6:0f:05:0c:f5:96:e2:da:5d:fa:52:0a:17:51:d9:
13:61:9e:3d:32:92:81:54:2a:23:d9:21:1a:c8:89:aa:24:19:
86:1f:74:1e:93:a0:c7:9a:ea:8f:fd:e9:26:ec:b2:73:2a:15:
80:e8:a3:8b:c6:88:75:18:e7:c0:2c:9b:55:e0:99:08:22:22:
46:a0:70:fe:1a:27:85:e3:39:8c:14:c9:34:65:b9:5c:40:2a:
df:8c:21:c4:56:33:6d:bd:54:a0:f4:56:da:f1:c6:5a:c7:45:
b5:4b:0c:ff:91:b1:96:23:bb:72:39:3f:81:59:1e:92:2b:5f:
d3:d9:ae:3e:64:86:d5:d1:8c:f2:27:28:da:6c:74:d0:ec:43:
4d:80:40:f8:8b:1c:04:e1:24:49:46:ee:bc:39:7b:5f:3a:d8:
2c:cd:bb:7b:49:ee:8b:91:5b:fc:65:07:56:b8:b2:f7:f2:75:
cd:7a:48:d2:fc:a0:dd:5a:89:c9:2c:b9:98:3a:10:61:c9:af:
a5:e3:31:7e:a2:9f:7d:83:d8:f3:99:b7:83:d2:a6:62:48:be:
4b:26:7d:57:83:07:63:08:a8:02:19:e9:90:13:95:26:c3:5e:
6d:ac:85:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:02 2026 by rpki-client