Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
File: y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft (raw, json)
Hash identifier: KxJeo93vX0XeCLPEkVxjQbnd5xccVEK8o6XK62GEbSo=
Subject key identifier: DF:D3:23:5D:A9:6F:42:32:F2:8F:0D:54:CB:A0:B3:A4:34:0B:18:4A
Authority key identifier: CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
Certificate issuer: /CN=cb88a5ee7704889209de589b0e657961ed590c01
Certificate serial: 019FA898ED082BC2B77CB05756D02111B087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:22 +0000
Manifest this update: Tue 28 Jul 2026 12:00:22 +0000
Manifest next update: Wed 29 Jul 2026 12:00:22 +0000
Files and hashes: 1: y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl (hash: YQtXKo0wUCqbje0ye5Bt+OMkjB9FvAnvruFP+LyIllo=)
2: zRdtGNLqz3DTStXWoWXkQVdYwlk.roa (hash: 7dOrZtxziMGSIF3EGdNDH44Ze2WHNrr7lOSga6pUGbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:ed:08:2b:c2:b7:7c:b0:57:56:d0:21:11:b0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb88a5ee7704889209de589b0e657961ed590c01
Validity
Not Before: Jul 28 12:00:22 2026 GMT
Not After : Jul 29 12:00:22 2026 GMT
Subject: CN=dfd3235da96f4232f28f0d54cba0b3a4340b184a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:a4:30:47:bb:d5:c6:56:00:bc:1e:4a:d3:
19:ae:70:22:1f:e4:55:0b:f9:07:e6:19:f5:dd:04:
28:44:8d:01:8e:6b:b0:dd:37:ae:42:6d:49:13:2f:
25:15:3b:a4:1a:4e:f4:45:bb:a4:14:63:b9:c6:0e:
75:77:bb:93:7d:b0:29:97:1c:f8:52:41:b9:9d:59:
97:2b:a5:c0:75:79:5c:8b:17:dc:48:3f:86:2c:5e:
a7:df:8c:a5:f4:c7:30:36:5f:4e:f1:f5:dc:e5:d4:
13:05:89:ce:36:af:1f:9d:90:83:ce:45:8e:d4:5b:
bc:f5:ac:1c:1a:43:7a:b5:a5:2e:1d:cd:4a:e1:94:
8d:75:e4:6b:8a:9e:89:ff:5c:de:90:86:b2:03:a3:
c9:b3:a7:40:f7:d0:37:bf:c9:82:50:94:50:f9:0c:
6a:ae:77:f7:49:6d:4d:be:8b:a9:71:aa:0e:db:2e:
25:81:e0:22:15:a3:a2:c7:48:de:e6:1a:58:cf:73:
40:53:07:ad:51:6f:01:f4:dc:8e:6b:2d:89:b7:70:
10:23:86:15:dd:ae:4d:57:08:05:6e:38:c1:05:5e:
da:b1:a7:dc:dd:62:2e:db:40:72:a0:3a:6b:64:a4:
49:4b:76:11:05:5d:de:f2:cb:12:d0:b4:49:09:9e:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:23:5D:A9:6F:42:32:F2:8F:0D:54:CB:A0:B3:A4:34:0B:18:4A
X509v3 Authority Key Identifier:
keyid:CB:88:A5:EE:77:04:88:92:09:DE:58:9B:0E:65:79:61:ED:59:0C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4il7ncEiJIJ3libDmV5Ye1ZDAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/y4il7ncEiJIJ3libDmV5Ye1ZDAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:46:34:2f:e9:8c:a0:d6:74:2d:39:9d:20:11:5a:84:d6:0f:
5a:32:7c:0c:cd:ef:9b:81:34:b7:de:93:f1:64:90:8c:b5:e9:
f1:1f:b3:ac:7c:15:2f:13:f5:92:80:7e:30:b0:83:79:ff:e8:
4b:7f:25:4e:f0:22:27:40:9f:de:ba:7d:fe:60:70:79:03:40:
28:c1:b7:2a:5d:ed:88:7e:64:e9:f0:3e:05:34:b6:97:20:68:
d7:bf:0d:31:2c:99:7d:39:94:af:59:ce:3d:ee:43:57:82:32:
e7:41:27:01:a0:5b:9b:b1:ec:60:e4:b6:56:76:fe:98:d1:0d:
f8:32:9c:cc:38:bb:9f:9f:c5:84:01:b5:fa:84:89:01:aa:80:
31:63:ff:e4:b3:a8:ef:c4:82:5b:82:22:42:f5:77:72:3a:e0:
08:52:e9:62:ea:10:14:18:20:09:17:c1:ab:59:92:c4:cd:22:
5b:ed:67:b9:98:75:ad:60:0b:0f:64:d8:b9:28:91:5f:84:46:
3c:02:b5:02:cd:3e:e2:d1:e4:8f:fe:05:2a:47:fc:62:97:56:
bf:17:7e:49:62:91:be:52:93:a9:94:ea:23:25:85:96:4e:2a:
6c:dd:44:c9:7c:fe:8f:41:39:a8:7b:89:6b:48:bd:35:a2:49:
b5:8c:33:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:40:13 2026 by rpki-client