Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: CrnS4NXOUNtEtLGg05+Lt/KWASmem6+nfFApjoNdAIo=
Subject key identifier: 64:78:67:36:96:D2:FF:73:85:9D:D4:8F:6E:0D:B0:53:30:98:F3:B2
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019FACE3805E7ADB80D4ADE80ED6B8C6C2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 08:00:18 +0000
Manifest this update: Wed 29 Jul 2026 08:00:18 +0000
Manifest next update: Thu 30 Jul 2026 08:00:18 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: pyheLgzEOShb0E+WwsX3FtitJWqvKfKXzmLB1GtLKB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:80:5e:7a:db:80:d4:ad:e8:0e:d6:b8:c6:c2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Jul 29 08:00:18 2026 GMT
Not After : Jul 30 08:00:18 2026 GMT
Subject: CN=6478673696d2ff73859dd48f6e0db0533098f3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:34:b1:75:1b:64:f4:dc:13:7a:f5:7f:b9:c1:
fc:5d:1b:71:72:a6:ad:9a:11:0a:df:13:c7:b3:90:
af:d5:02:50:27:8d:01:49:83:ef:8e:ad:e3:9d:77:
14:73:36:25:59:de:da:1d:a5:10:e5:a6:44:9f:80:
da:49:31:9b:03:79:53:51:21:6b:e4:ee:f2:d1:bd:
74:d2:2e:72:7a:8b:c8:d2:11:38:bb:a8:4b:69:f7:
8c:13:cc:f9:18:f0:37:f3:bc:78:c5:53:d0:90:ae:
90:e8:0a:c1:45:04:5a:58:86:fa:7f:4e:56:71:52:
83:a5:0e:b1:06:2c:47:ff:88:9d:d3:0d:d4:db:e6:
48:a6:cc:c7:fb:22:17:b3:09:88:02:d9:f5:a2:fb:
f4:5e:28:6b:86:03:64:a6:ca:d1:92:ec:37:ab:2d:
c3:7a:33:14:b0:1f:61:f6:b8:85:3c:80:9b:90:86:
8b:c7:05:ae:47:cc:2a:cc:ec:bf:7d:69:76:a0:75:
8a:e8:42:d7:5e:d2:43:d1:e4:70:4b:6c:2d:9d:ed:
b8:c5:1d:dc:e7:f1:b4:59:33:6c:1e:49:3a:25:62:
30:c0:68:42:98:e7:3b:39:95:c6:6c:5a:d8:96:71:
12:4b:6a:fe:08:29:05:d1:17:57:66:36:a6:df:3b:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:67:36:96:D2:FF:73:85:9D:D4:8F:6E:0D:B0:53:30:98:F3:B2
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c5:3f:7c:6b:37:f0:ca:47:a3:9c:4c:0c:25:38:66:86:98:
59:b8:55:e2:ce:ff:56:1a:27:7d:7b:44:7e:d1:5a:54:0f:b1:
fc:05:49:8e:82:1c:2e:df:e7:d4:1b:d5:9e:de:8e:da:84:a5:
af:35:1c:db:75:e9:e1:b1:57:2d:40:66:89:8a:bb:a7:ca:79:
ee:cf:ed:39:95:a0:f0:cf:74:fb:70:80:55:3a:8e:03:c7:72:
44:51:af:6a:46:52:b5:ed:0f:ab:a1:20:77:cb:79:d0:56:fc:
31:70:18:c0:99:80:02:ef:2b:be:38:8a:7d:a1:b1:e4:1e:10:
e3:e5:af:05:b0:b4:9a:88:f4:dd:f8:34:4b:ba:32:5f:36:be:
a6:1b:3b:6e:38:96:e3:c5:d7:26:04:2f:8a:e1:fe:5f:e0:5c:
33:9b:77:70:28:23:67:d0:9e:1e:e5:aa:83:14:8b:5e:c1:44:
a1:ad:75:bd:39:d6:5b:49:67:49:ce:e6:e5:81:a4:09:fd:95:
a9:58:53:91:a7:17:78:20:7f:f1:51:4e:40:9b:22:d3:82:9f:
5e:e2:5e:4f:a0:f5:76:75:ce:d4:18:4a:01:74:41:76:6a:f8:
41:0f:cb:80:62:90:ad:f3:1b:77:96:d8:93:14:b2:86:bc:66:
dc:0d:35:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:17:25 2026 by rpki-client