Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: K/jq0eFKQuMrVwufnDmURL0nY8W2vDktiKdcwcPQBSo=
Subject key identifier: 19:D9:4C:F2:02:D1:03:F4:84:C4:E6:33:BC:82:5A:5D:AE:F5:48:E5
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019FAAF525487E50A964DFDEE1BC15E2760C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 0A4B
Signing time: Tue 28 Jul 2026 23:00:20 +0000
Manifest this update: Tue 28 Jul 2026 23:00:20 +0000
Manifest next update: Wed 29 Jul 2026 23:00:20 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: xdCVOZqw3ZUyoa1aFZK3bsmMs6EJ7zXT4sJ2E6AIiSM=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:25:48:7e:50:a9:64:df:de:e1:bc:15:e2:76:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jul 28 23:00:20 2026 GMT
Not After : Jul 29 23:00:20 2026 GMT
Subject: CN=19d94cf202d103f484c4e633bc825a5daef548e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:06:3e:ec:54:47:26:67:98:e0:ee:79:28:
99:72:cf:ae:9f:bd:34:82:81:24:a3:5c:67:be:39:
a4:eb:70:78:ae:5d:e0:f7:b9:a9:60:11:c6:0c:94:
f7:5e:7d:60:19:cc:b1:f8:22:64:cf:01:3e:81:4c:
d1:98:a6:5e:65:14:ce:d3:72:71:30:b9:c8:23:77:
4a:71:0d:a2:37:b1:6c:20:f6:09:9d:89:6b:a9:ef:
3a:53:79:f7:ff:6d:c2:71:98:8c:1e:04:05:93:f0:
c6:54:ca:a3:62:61:95:d7:4d:fc:11:44:aa:68:1c:
b9:2e:6a:0b:87:3d:28:1b:9c:03:2a:ca:2f:ac:4e:
a3:40:1c:c0:1e:21:70:b4:88:bb:3a:e4:d1:9c:77:
5f:12:0e:0f:94:23:0c:c0:d6:13:68:b1:97:af:ef:
85:6a:20:10:7f:21:80:3c:f7:d1:bd:ff:32:4d:eb:
91:2e:6f:18:a4:39:e0:73:b3:3c:b5:9b:d0:42:5c:
d9:e5:74:2b:76:71:3b:52:09:d6:05:93:ec:77:d0:
3b:6b:68:41:ff:72:5e:ce:a3:51:29:cf:c8:cc:3a:
d6:d8:60:ba:03:c5:1b:8e:28:af:37:d5:1c:64:be:
55:f2:b1:52:50:4d:57:a1:b2:75:d6:50:f2:58:b4:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D9:4C:F2:02:D1:03:F4:84:C4:E6:33:BC:82:5A:5D:AE:F5:48:E5
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:53:6b:9d:2d:21:14:66:ef:c6:c3:0a:96:2b:90:68:e8:12:
07:92:c9:33:5a:46:c3:2b:a3:76:6c:e7:8f:d7:7b:52:e6:1b:
79:94:ca:2f:74:c2:1b:7b:70:cf:6c:2b:98:35:a3:1f:87:50:
90:fb:91:58:87:e0:4a:f6:8a:6c:d3:30:01:de:2f:3f:ca:3c:
29:3b:3b:54:6e:4d:12:bd:34:6b:ab:d8:ea:77:c7:72:5d:e5:
e6:d3:d9:0a:a5:a2:8e:53:0f:2a:9e:70:f5:d3:d5:d1:35:4d:
c6:96:53:49:82:28:bc:fb:c9:83:3c:5f:19:54:b4:28:db:ed:
17:ed:91:1a:fe:ce:89:a3:0c:ae:be:4c:d9:c5:40:e7:8c:c8:
e1:53:c1:d2:d7:a6:df:1c:0d:49:cd:5a:4a:b7:6e:f6:cc:8f:
d0:51:b7:47:ac:2f:60:fd:c6:e6:0d:30:0b:78:44:e5:75:4a:
a0:d4:19:e7:9f:0b:35:0d:cf:5f:1b:35:6a:be:74:84:f2:b1:
7c:b9:c7:c0:b4:64:91:86:29:a0:d8:d7:33:db:a7:b1:53:50:
dc:cc:ff:5f:e9:fd:73:fe:95:32:39:9e:d6:99:cb:13:f3:35:
ac:13:2c:76:8c:36:57:f3:06:2a:39:c3:2a:f5:60:5d:a3:82:
7b:c3:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:33:59 2026 by rpki-client