Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: 78nevy4J+YhjdU7KeIYX0YWdQp4godMRBxrEoYyIGME=
Subject key identifier: E1:7A:43:5F:0E:AE:60:11:05:71:AA:ED:46:0F:6E:D2:A0:B4:8A:E2
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019FAB2C5EEF0847DF6C83A3430F18D2218D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 0B0C
Signing time: Wed 29 Jul 2026 00:00:39 +0000
Manifest this update: Wed 29 Jul 2026 00:00:39 +0000
Manifest next update: Thu 30 Jul 2026 00:00:39 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: xBKlUqPu59NwbXN3RwBJ2XjI8qmSPCwwlNbl+SYmLAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:5e:ef:08:47:df:6c:83:a3:43:0f:18:d2:21:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Jul 29 00:00:39 2026 GMT
Not After : Jul 30 00:00:39 2026 GMT
Subject: CN=e17a435f0eae60110571aaed460f6ed2a0b48ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:77:a0:3c:78:b8:be:c4:6c:00:a6:06:76:50:
4f:59:d3:52:90:8d:85:13:a7:ea:2a:cc:4a:5e:2a:
98:f7:0e:34:79:fe:1e:bc:0e:6d:60:0a:03:fe:c2:
42:65:4b:4f:9a:b0:7d:50:80:f1:70:9e:27:14:d2:
bc:9e:a4:ce:e0:02:de:a2:35:e3:8b:08:61:4a:41:
a2:30:01:4d:6a:ce:90:ae:f1:44:bb:ae:c4:c7:ce:
93:a4:db:da:27:ae:a4:4b:ee:d8:26:76:15:5b:7e:
a5:b1:fb:a7:c1:f3:a0:dc:54:c2:a3:0f:96:a1:aa:
56:fd:f5:42:9d:d0:5b:6f:8c:fe:68:f3:5c:bd:43:
32:ad:d9:d7:63:dc:4d:40:a2:4c:35:a2:31:0a:b1:
27:3a:1f:d7:5b:fd:1a:12:03:ec:f7:3e:c4:c5:89:
de:98:71:d1:b6:c5:09:4f:ca:8b:35:5a:9f:44:05:
39:b0:69:9a:bf:37:e5:55:79:eb:27:89:08:cb:c5:
c3:51:ae:a7:64:8d:e1:6e:43:d8:c4:aa:36:e6:4c:
93:7a:76:0d:84:fa:4d:96:84:a9:b5:b3:f0:f8:c7:
ea:f0:73:88:fa:be:36:28:9e:06:f5:89:5e:f4:40:
6a:94:66:c2:e4:56:2c:ac:2b:95:ec:41:61:83:c7:
a1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:43:5F:0E:AE:60:11:05:71:AA:ED:46:0F:6E:D2:A0:B4:8A:E2
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e6:87:f5:45:24:e3:c2:43:46:55:f0:25:8f:9e:95:4a:f7:
03:58:61:9a:95:60:6e:cc:69:c1:81:3a:82:5d:6e:ef:0b:e6:
36:20:88:37:ba:7b:0e:18:3d:49:1d:0d:c9:7f:4e:a7:1b:fc:
d7:2a:c2:41:97:30:69:99:05:f9:19:b0:7a:c6:57:95:00:10:
59:f4:3a:2e:b5:52:17:09:45:12:29:9a:4c:25:14:0c:d7:c0:
66:66:b3:74:7c:9b:82:2d:35:e4:50:f1:ea:16:7d:6a:fc:52:
35:fb:d7:b0:f3:b2:a2:7f:70:87:c8:91:78:cb:0d:89:df:d2:
37:f2:28:43:cc:3b:e1:18:28:87:e4:53:ed:14:89:35:d9:e5:
a9:f8:6b:9a:b4:b7:4e:69:e1:a0:f6:96:d6:bf:fe:73:95:1c:
46:7d:2c:ed:73:8e:e7:46:d8:09:6c:9c:3e:8a:9d:29:fd:f7:
1e:e5:a3:0b:59:5b:5c:7f:7d:17:7d:a1:ea:83:0e:3b:05:b3:
18:de:51:c2:e1:e5:29:d3:a0:d5:2d:c0:6f:86:c4:0d:df:a8:
a0:df:5a:a8:4d:a1:2e:0f:b5:1f:96:61:df:40:63:c6:be:3b:
d5:37:90:d6:3b:4e:9a:2d:f7:87:ef:91:e4:4d:16:de:a6:ab:
35:62:8a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:25:35 2026 by rpki-client