Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
File: Y56u7x9LomYtRYnGlhfCIjT8f9U.mft (raw, json)
Hash identifier: n2EvPdMExYcK249hWh3nVH6tNxFw6g1iv8VJaquiWo8=
Subject key identifier: 0E:DE:99:2D:81:27:94:F3:BD:C7:A2:EF:33:72:27:FC:39:B8:32:FF
Authority key identifier: 63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
Certificate issuer: /CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Certificate serial: 019FAB9A7A18511F58066C74B5B5490E8E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
Manifest number: 1C
Signing time: Wed 29 Jul 2026 02:00:55 +0000
Manifest this update: Wed 29 Jul 2026 02:00:55 +0000
Manifest next update: Thu 30 Jul 2026 02:00:55 +0000
Files and hashes: 1: 5C7B9sK-52QOcFqJhruOpWErXiM.roa (hash: 4/5+RXA9GJGFx9VqeqH9sQ5DjIRLWG8YQmxsy4IiZ1g=)
2: Y56u7x9LomYtRYnGlhfCIjT8f9U.crl (hash: QtmfkbL2HeEJVyU96Ds7BQRZtE2zW0EhLVr1pGRrrWk=)
3: _GYRtRrE3o1gXliLdkCD1K39Pkw.roa (hash: MdvV5iINAnufC2VKyyJ2tO5THU9NvjiQkS7qbbRGAKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:7a:18:51:1f:58:06:6c:74:b5:b5:49:0e:8e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639eaeef1f4ba2662d4589c69617c22234fc7fd5
Validity
Not Before: Jul 29 02:00:55 2026 GMT
Not After : Jul 30 02:00:55 2026 GMT
Subject: CN=0ede992d812794f3bdc7a2ef337227fc39b832ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:a5:f7:2f:dc:21:83:b5:1b:91:0a:34:10:
e6:ed:e8:78:3b:c1:6e:ff:da:58:04:40:e1:1b:df:
85:a8:cf:1e:6f:4c:12:93:9f:cc:bd:f0:8a:55:42:
ce:7f:90:45:58:d9:0e:0b:56:ba:52:77:9c:69:7b:
f4:86:18:bb:23:98:b2:ab:3f:8d:ce:19:0b:b8:d0:
6c:50:08:11:5e:d7:67:35:ca:fe:59:56:50:95:42:
41:b5:c3:1f:ce:5f:48:5e:81:0d:dd:06:a5:41:ad:
cb:8d:0a:b1:ba:5b:36:0c:d4:2d:5e:c4:cc:ab:04:
53:e4:d5:8a:f6:54:03:59:3f:a7:40:db:3c:5c:6d:
07:8f:76:b8:a4:51:e4:50:80:dd:c1:a1:9e:9e:45:
66:85:b2:36:d6:d6:25:47:cc:2d:77:58:1c:c1:34:
83:8b:90:dd:54:a4:bd:2a:7f:32:4f:32:e2:50:28:
36:c9:3c:52:31:bf:07:9e:2b:78:f3:9d:ea:37:dd:
d9:45:db:48:e6:77:ce:2e:e5:05:57:b2:9a:b3:b9:
c6:8d:00:86:f5:54:93:d5:ce:90:02:10:c0:52:36:
a8:b0:49:a3:de:12:3e:1d:3f:7a:97:2f:dd:70:1f:
80:9c:58:53:52:2f:bf:24:f1:55:33:50:48:1f:b8:
f6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:99:2D:81:27:94:F3:BD:C7:A2:EF:33:72:27:FC:39:B8:32:FF
X509v3 Authority Key Identifier:
keyid:63:9E:AE:EF:1F:4B:A2:66:2D:45:89:C6:96:17:C2:22:34:FC:7F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y56u7x9LomYtRYnGlhfCIjT8f9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0196fb-ae63-4f09-bac2-ec717865f07f/1/Y56u7x9LomYtRYnGlhfCIjT8f9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2e:e9:be:f2:17:80:8a:9a:42:4e:24:2e:ea:de:3a:22:81:
b0:c7:24:94:21:bb:5d:3d:d4:13:43:ae:fe:be:59:72:68:58:
b4:69:76:6c:0c:21:66:c7:40:e1:7c:10:f6:55:3e:92:75:d6:
27:b4:b9:29:63:d0:9b:3b:59:17:ef:de:6c:c2:d1:2e:23:bf:
dd:42:11:63:09:7d:e6:84:03:d7:c2:8c:a7:fc:23:9f:48:ee:
21:4d:30:9d:3d:58:99:05:9f:a7:6d:d2:98:2c:6d:cc:ef:97:
56:56:c1:31:84:ae:9f:c5:9d:56:7d:4a:f4:2b:79:19:e1:a4:
a3:23:cb:ff:1f:d0:de:02:58:b5:bb:c4:95:99:48:5c:5c:93:
c6:cb:0f:73:6d:86:68:a3:53:9a:25:2d:0d:07:7d:8d:20:48:
1b:3b:2e:36:ef:38:91:fe:32:8e:2d:04:2e:ea:40:71:00:9b:
90:d3:7a:8a:0a:5d:d2:2c:25:c4:4c:dc:71:65:80:a0:c5:a7:
e3:66:8d:6c:f3:4b:09:2d:2a:35:97:09:6b:9f:36:85:5c:be:
d3:0d:8a:66:cb:39:6c:06:f4:3a:05:f0:de:29:83:16:6f:b2:
66:c6:98:83:a9:ca:d8:0a:0d:42:fc:03:5b:0e:27:f8:87:39:
65:01:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:20:29 2026 by rpki-client