Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: xfLMx8WHKblZeotU3/4gvRxCV+fghO3JUQzVpSint0E=
Subject key identifier: 66:51:94:E7:1F:A7:5D:3D:88:80:4B:4C:28:59:DF:3F:40:93:BB:AC
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019FAA19CE68A1BCCA121FAC95EAAF01B648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 19:00:45 +0000
Manifest this update: Tue 28 Jul 2026 19:00:45 +0000
Manifest next update: Wed 29 Jul 2026 19:00:45 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: HTl1GCR6dtXsRIZG8f+QtFWDWJsFE0bgyhnB0N9gVI4=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ce:68:a1:bc:ca:12:1f:ac:95:ea:af:01:b6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jul 28 19:00:45 2026 GMT
Not After : Jul 29 19:00:45 2026 GMT
Subject: CN=665194e71fa75d3d88804b4c2859df3f4093bbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:19:3e:cf:29:af:3b:f0:c3:77:00:70:a2:
69:7a:dc:2c:93:57:fc:9c:c7:b0:9e:e5:c0:1d:f3:
23:db:ad:01:fb:f5:9e:30:54:ea:69:e6:4c:15:17:
96:78:c2:40:62:26:e1:db:08:24:32:8e:b1:cc:f2:
1c:e1:30:91:9e:05:ee:7b:c0:44:a4:ef:11:dd:88:
68:ad:46:48:67:2d:d8:99:f9:36:e4:6c:b5:c0:28:
d2:e8:41:4a:ab:3f:5c:8c:4b:4d:f7:15:ce:d8:f7:
92:15:bb:c5:0e:11:41:8d:57:a6:12:35:bc:b9:60:
1c:58:d6:65:52:b7:bd:0b:09:73:3a:78:18:8a:d2:
b9:74:c5:32:bc:29:a3:20:4c:80:fd:79:e4:2f:5d:
83:af:b5:0e:5c:69:c1:10:41:93:f3:a2:b2:b7:4a:
57:fa:72:45:3d:40:a5:86:8a:b4:8b:42:0d:74:03:
59:29:87:1b:dc:68:d0:57:b5:f0:56:02:ec:cf:a7:
af:f8:eb:98:05:08:76:e0:b6:13:3e:d0:60:8a:e6:
17:e7:51:68:c5:08:84:31:9f:a9:2f:f7:28:a7:d8:
8c:77:03:af:3f:bc:86:f8:ca:2a:4f:36:28:6d:d9:
85:9f:d4:df:7e:9b:34:1d:0c:80:32:eb:0f:ef:17:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:94:E7:1F:A7:5D:3D:88:80:4B:4C:28:59:DF:3F:40:93:BB:AC
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:95:54:5f:82:23:6d:ee:93:a6:1d:23:db:0d:73:c6:8d:2a:
73:c9:d1:b3:ca:5f:90:3f:fd:01:5a:bf:ad:ad:0c:f0:cf:da:
43:1e:cb:a3:fc:dc:cf:58:c0:4d:af:15:99:ab:ab:aa:5f:c8:
7a:46:08:40:7f:7b:db:cc:7a:9b:38:d5:4b:be:a4:b2:14:5b:
1f:d9:1a:74:88:0d:3a:ad:99:cd:c5:a6:07:7c:84:1d:c2:02:
fb:a9:a3:91:4b:3e:fd:25:2f:87:1e:a1:ae:72:8c:c4:d6:84:
41:e0:fb:36:7d:cc:08:a6:dc:74:55:7a:79:21:23:ef:ef:b3:
97:d2:02:96:05:c9:1c:09:40:a0:e7:f6:e8:1a:58:c7:a6:65:
40:19:30:1e:3a:05:e0:be:78:3b:f0:bb:b3:a3:16:2e:b0:b6:
c2:b8:38:ed:be:84:bc:02:5c:8b:38:fd:71:cd:02:26:8e:ca:
00:ff:46:b2:bf:c6:29:ae:74:79:17:79:d3:de:3e:b2:8e:78:
0b:71:38:bc:dd:7d:4c:36:5b:7a:f1:ef:bd:32:06:df:38:4e:
cb:7c:5a:f9:36:be:06:d5:eb:19:b0:57:b8:c1:66:75:57:d3:
b0:6c:5a:85:05:6b:31:14:df:59:ba:06:8d:0b:dc:2d:93:dc:
81:12:6f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:26 2026 by rpki-client