Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: RpRbLRd7j/IRVM1/l+D9z/G8OtRGFkfePF3hgfT8OBM=
Subject key identifier: 91:E0:49:B1:FD:19:ED:67:E9:5F:BF:3A:7C:84:22:0D:85:5F:20:5D
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019FAB2CC0C74C53088399AAF52A518A4626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 12C1
Signing time: Wed 29 Jul 2026 00:01:04 +0000
Manifest this update: Wed 29 Jul 2026 00:01:04 +0000
Manifest next update: Thu 30 Jul 2026 00:01:04 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: sQOrcsClyfGWy5/68F9SPIFvghU8kBHqcH5zmcKpF7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:c0:c7:4c:53:08:83:99:aa:f5:2a:51:8a:46:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jul 29 00:01:04 2026 GMT
Not After : Jul 30 00:01:04 2026 GMT
Subject: CN=91e049b1fd19ed67e95fbf3a7c84220d855f205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:02:c0:0b:b0:af:3a:66:9c:11:e6:47:1d:
6f:34:ee:d1:e9:fe:e2:31:f8:1d:3b:e2:81:47:83:
49:ef:4f:5c:78:36:91:ae:91:8f:dc:7b:6a:3e:1d:
df:21:de:71:26:38:45:f7:fa:92:8f:c4:81:f3:47:
5d:39:25:af:3d:a9:1e:15:72:8a:7a:91:ff:bc:57:
03:7a:57:5e:22:87:f5:1c:7d:bd:7c:f6:86:5d:23:
2d:4c:8a:3c:c6:06:b0:38:62:ec:a2:7d:3d:89:fc:
a6:2e:51:16:0a:ee:90:d4:45:9f:28:78:50:9f:67:
5b:03:fe:a8:e8:60:7b:9c:aa:d6:50:a9:65:64:26:
38:4b:f2:97:86:f3:ff:bc:7c:57:33:0f:0c:bb:3e:
cf:04:b6:36:30:fa:0f:c8:ab:3c:da:cb:d5:52:bb:
db:e4:a7:e7:7c:ed:25:5a:b7:1b:42:d7:5b:c8:64:
cc:b0:a8:29:ec:c2:45:17:78:8e:b0:c5:4a:7c:ee:
4c:61:db:89:c0:c2:5b:b6:15:29:07:9f:71:8b:fb:
80:eb:90:ef:cf:c7:06:54:f8:92:49:02:b6:aa:9e:
c8:de:2d:10:55:0a:4d:59:a4:a4:4d:d9:73:aa:f4:
1b:59:25:49:a1:12:3b:f4:c2:67:ab:13:1d:1f:be:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E0:49:B1:FD:19:ED:67:E9:5F:BF:3A:7C:84:22:0D:85:5F:20:5D
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:01:4a:2b:e1:5b:96:aa:b8:af:73:c4:f2:5a:67:57:7e:ac:
2d:61:3f:1f:7e:53:34:83:b0:c0:10:a9:48:36:a3:a7:7b:0c:
a9:c4:4d:d0:50:07:54:79:ac:c9:35:45:b5:88:90:9d:5d:6e:
a4:20:c8:03:ee:06:1b:74:34:1a:57:1a:cc:89:e8:25:5a:06:
b6:06:95:ca:64:22:85:c1:07:c3:64:5e:a6:0d:58:88:e3:4d:
ba:5d:3c:88:36:9a:0b:5c:e3:94:bc:8a:31:ec:43:c8:fc:3b:
2d:05:5e:7a:cc:44:3c:5f:c9:bd:7d:b8:4c:f6:ca:87:00:e1:
2b:5d:1e:85:37:a4:9f:01:35:db:b9:53:3b:16:d7:ec:79:4d:
a7:f1:28:ce:3d:17:40:e6:0a:a2:ba:f3:99:57:90:69:e5:0c:
7d:92:d2:3e:f5:06:93:2c:2d:68:18:e1:71:a6:3a:3b:b4:33:
28:97:5f:6e:c3:45:4c:c8:47:3d:78:af:f4:11:c0:52:83:02:
30:fb:de:cb:a6:19:1b:65:4f:f0:b4:45:ee:6b:5b:06:1c:70:
4b:36:3d:ab:09:8b:0e:6b:e0:0d:05:bf:b3:e0:01:12:7b:5d:
e6:8e:5f:c6:6f:3f:90:32:6e:f1:99:c8:30:f1:0f:a8:42:45:
34:e7:e1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:35 2026 by rpki-client