Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: t1hAu24eD+K8KtrxcpVSRP6ILvNdu3a6T1AKVsQS2SM=
Subject key identifier: EC:B7:9D:2F:CD:F4:4E:A2:D3:92:25:3A:A5:1A:5F:DD:B0:7E:F5:B8
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019FAAF5147F8954444C343A2B7F5977C084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 19D6
Signing time: Tue 28 Jul 2026 23:00:16 +0000
Manifest this update: Tue 28 Jul 2026 23:00:16 +0000
Manifest next update: Wed 29 Jul 2026 23:00:16 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: RCJ1bQZN7pqGRy38ni8IsQo5jjQylCcpn6g3T7qJRxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:14:7f:89:54:44:4c:34:3a:2b:7f:59:77:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Jul 28 23:00:16 2026 GMT
Not After : Jul 29 23:00:16 2026 GMT
Subject: CN=ecb79d2fcdf44ea2d392253aa51a5fddb07ef5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:35:ca:ea:8c:aa:33:83:6f:ad:ec:dc:b2:
9f:80:7f:87:47:6d:1f:12:17:7c:65:22:ec:f9:98:
f6:61:10:93:41:9d:80:ce:16:11:9e:0d:ae:83:3f:
a4:22:2f:70:43:04:d4:8d:1f:c0:4e:bc:35:3c:21:
84:2d:66:4f:8e:98:c3:b6:40:c8:79:0d:f8:66:20:
cd:01:a6:e5:2e:d3:4b:b9:19:61:30:4b:66:b9:85:
a9:9a:31:09:50:35:3b:d7:f0:57:20:75:28:bc:41:
f9:bc:60:cf:8f:20:a8:fd:a5:bb:62:bd:d8:10:3b:
ea:42:02:dd:1c:2a:66:fd:7d:a0:75:16:f5:46:9a:
af:5e:c6:7d:ad:b4:0f:9f:d3:ee:74:f5:93:f0:23:
11:54:fd:6b:50:8e:2a:62:3d:3a:fc:d9:e4:ec:be:
42:af:66:0f:6a:d3:84:41:f4:ad:55:09:6e:32:72:
b7:03:f5:7e:7f:d1:62:03:c5:4a:12:8e:15:56:fa:
bd:64:fb:be:49:1b:d2:99:8a:7c:91:55:49:6a:47:
44:2a:92:0a:b5:66:fc:d0:93:d0:d9:c6:db:ec:29:
f9:77:e8:89:e4:ac:72:05:3e:be:30:b5:26:09:de:
c4:c7:99:47:4e:fb:61:bb:06:67:a9:2f:a3:26:40:
45:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B7:9D:2F:CD:F4:4E:A2:D3:92:25:3A:A5:1A:5F:DD:B0:7E:F5:B8
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5e:36:df:55:21:4f:3c:22:c7:ca:b5:80:fd:a5:8e:38:e6:
4e:13:78:8f:6d:58:fe:6d:b7:a4:dd:5d:7c:14:ef:d0:5f:9c:
36:6e:e6:fd:9b:b0:4e:c0:de:02:7a:0d:7c:51:0f:48:9a:7a:
35:73:b0:a4:74:78:5a:93:88:d7:8c:c6:2e:27:19:8d:15:81:
ec:b2:86:57:75:86:d7:62:e4:32:b8:40:58:5e:fb:e9:7e:1e:
87:bb:f1:35:3c:3a:03:b1:01:b8:40:2f:fb:2b:6e:52:00:d4:
2f:2b:0e:9b:65:d0:71:75:c7:d9:2f:8b:f4:58:fa:11:21:d0:
eb:cc:a5:33:ad:0e:2d:00:b8:13:91:0e:5b:30:23:03:cb:eb:
db:a5:67:52:d1:45:cc:cd:25:f6:66:15:db:90:3f:44:9d:15:
f3:00:8c:9d:c3:0c:35:6b:be:bf:5f:b3:d3:6f:31:8d:1a:ed:
fa:30:33:62:c3:fa:03:21:f3:e0:a1:dd:8b:d8:58:d5:49:8b:
1d:1e:ad:dd:50:82:04:f0:16:64:02:40:a3:15:22:8d:e8:4b:
97:a7:ae:09:88:e5:0b:d5:c9:c0:8a:e0:a0:9a:85:5b:40:60:
f4:3b:c4:1f:43:8f:50:8f:15:68:ac:b9:e2:0b:0d:5a:67:43:
1e:ae:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:23 2026 by rpki-client