Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: ItWSfJhEkfq9eLtF+Wrm8UQRJ5VU5Qj/4j9UHrLb20E=
Subject key identifier: 97:9E:8D:07:47:D0:82:C9:E6:BE:E7:50:B0:5D:45:5F:8E:91:A6:9B
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019FA93DCCF86E3EC7A8D0BDDE32F8F83910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 15:00:27 +0000
Manifest this update: Tue 28 Jul 2026 15:00:27 +0000
Manifest next update: Wed 29 Jul 2026 15:00:27 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: nYYKhj00HzgCxqdIozeFiD25nGVJZRVMr0lWNChpFGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:cc:f8:6e:3e:c7:a8:d0:bd:de:32:f8:f8:39:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Jul 28 15:00:27 2026 GMT
Not After : Jul 29 15:00:27 2026 GMT
Subject: CN=979e8d0747d082c9e6bee750b05d455f8e91a69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:29:6f:bb:51:57:30:5a:e9:cb:44:4b:ab:25:
33:6f:d0:e5:de:3f:0f:e1:45:01:a8:73:5c:5b:09:
ae:e2:07:91:a3:8e:49:ea:b1:a1:94:7e:9f:d9:c7:
05:3a:b9:ec:0a:f1:22:1c:da:f1:21:5e:ff:a5:b0:
17:c8:fc:7d:b1:8e:31:af:d0:8e:a4:7f:2a:07:f1:
14:71:d7:11:2d:c2:44:60:05:53:69:3b:f2:8e:a0:
9b:1e:a4:0a:4e:e5:16:e1:8c:5d:fa:35:f9:b1:4e:
dc:54:8d:3e:18:86:5c:86:fe:58:0d:57:d9:11:c2:
75:84:26:9b:85:79:f5:7f:a6:f5:29:6f:28:b1:85:
ee:f6:d3:81:78:75:b6:df:d0:f2:89:c7:61:3e:d7:
9c:be:73:ca:d2:05:ab:12:31:7d:f3:35:2f:f2:a4:
c9:d0:fb:72:b4:40:fd:da:97:42:bc:96:c7:31:ab:
85:9e:1a:68:3e:19:de:0e:f6:e7:93:c1:92:c5:03:
b1:13:e5:a9:74:cf:4b:59:56:2a:f2:b0:b1:b7:8e:
fb:a6:6e:db:2f:ee:93:c4:97:dc:ae:77:e2:67:dc:
a0:b0:d3:d1:ee:60:be:d6:c1:73:2f:e5:67:dd:8c:
1d:0d:4f:1a:dc:0f:3a:31:ad:1e:08:4f:9b:23:13:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9E:8D:07:47:D0:82:C9:E6:BE:E7:50:B0:5D:45:5F:8E:91:A6:9B
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:49:4d:a3:34:f4:9a:43:fb:a2:fe:78:24:09:11:66:c9:97:
eb:b7:9f:5f:de:b3:c6:43:df:f3:90:97:d8:1f:7c:c2:e7:2c:
e2:3a:fc:bf:8c:c7:d5:a8:87:bb:83:8a:61:5d:10:fb:fa:86:
44:18:2f:68:ea:86:cf:a6:f9:59:15:52:be:21:71:d1:35:fa:
76:69:25:f6:e5:c2:8b:2c:9d:99:f1:31:4e:f2:62:85:15:30:
8e:ed:a1:4c:76:2c:d5:ac:01:7a:8b:f3:48:81:a9:72:0f:92:
a2:30:33:c3:2a:14:80:b8:a5:bc:ec:eb:63:d6:cb:28:00:a4:
76:92:8d:bd:49:c1:78:53:c6:d3:83:74:49:24:44:b7:7c:7f:
24:7d:67:2f:5e:5e:ae:6d:68:76:db:c1:bc:0d:da:49:7f:b7:
9c:b8:da:26:33:e6:9e:a5:6a:f6:97:68:d5:18:b9:2d:c9:6f:
5f:2e:7c:c5:9f:30:83:53:27:5e:51:fa:42:e6:e3:08:49:0d:
7e:0e:c2:b7:48:49:ff:eb:fc:12:56:34:f6:11:7f:41:ef:72:
77:db:e6:de:06:fc:55:78:26:d4:1b:4f:3a:c4:b5:e7:3f:5c:
ac:74:69:5f:ec:b2:34:2f:e9:28:f8:1f:7b:99:a1:a6:69:52:
f2:96:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:47 2026 by rpki-client