Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
File: c89qsxYEWZuC1U3S9A-ysispwh4.mft (raw, json)
Hash identifier: 4Tw99MiIQ3Xt7sOgI6OtQlp6Gitdq9Q/JafDWYVL420=
Subject key identifier: 49:32:29:CC:73:E5:6F:0B:C1:95:12:99:E8:4F:15:49:2F:2A:5E:BD
Authority key identifier: 73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
Certificate issuer: /CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Certificate serial: 019FAA87E9D42DDD5C8D6CABC4C8A2BC1142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:01 +0000
Manifest this update: Tue 28 Jul 2026 21:01:01 +0000
Manifest next update: Wed 29 Jul 2026 21:01:01 +0000
Files and hashes: 1: 4Bt4awQ3a_9RIM6HHri_qCJgSWg.roa (hash: oeWIAAnSZ4lhgU2K6FkPq7+EIWrrH2aLb/TTgduHWn0=)
2: AqCtuwGvVSgRJxVxr4mxQU1HkAM.roa (hash: O/QtFV+qDKvIVvd2P3gXnC1wGd9GAwJT7ubN9qYRXPs=)
3: c89qsxYEWZuC1U3S9A-ysispwh4.crl (hash: OOGz8qxomJOOsJARuqbIkGiaxhR2ugpceFkeM9kWFyw=)
4: zwmjAN4LcEyM9uxOrsR0kjbHDxQ.roa (hash: tZdW/oSxv26bqccrBhCTEl8SrQVT+jOlShFdNQKzxOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:e9:d4:2d:dd:5c:8d:6c:ab:c4:c8:a2:bc:11:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Validity
Not Before: Jul 28 21:01:01 2026 GMT
Not After : Jul 29 21:01:01 2026 GMT
Subject: CN=493229cc73e56f0bc1951299e84f15492f2a5ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:98:96:ee:19:be:a1:21:7e:d5:5d:42:cb:
d2:37:23:57:51:ab:09:46:c9:61:6f:80:0c:1d:bf:
22:81:11:91:b4:b3:47:34:78:4a:26:f2:ea:d8:bb:
b3:62:14:51:fc:66:8e:be:ff:1d:1d:1f:18:a3:8c:
3c:b6:6f:c8:97:a2:43:b6:89:ec:10:51:62:11:09:
dd:13:bc:76:17:63:f1:9b:b7:48:1a:09:ec:98:6c:
dd:ce:86:f1:53:2a:c0:6c:b9:ea:68:0a:c1:7e:06:
01:f2:ce:78:93:31:96:6a:2e:f6:4c:a7:9c:72:f3:
86:29:2d:ba:d6:ce:99:a0:45:34:a1:7c:c1:0c:37:
33:c7:64:d2:1c:82:ef:6e:d6:d2:9e:5a:09:1c:23:
af:fe:ed:3b:2d:89:a1:6d:71:19:13:bc:19:74:57:
23:3b:b0:0d:bf:3c:f3:2c:be:17:22:09:f5:99:99:
c0:a4:49:5c:4f:80:5d:29:98:20:7c:bd:d2:15:f3:
eb:06:01:f1:a6:b0:26:0f:ae:04:e3:a4:ed:28:38:
58:99:71:c8:2f:aa:d7:ec:f8:12:ba:33:de:a2:ae:
03:9f:48:3d:48:82:76:e6:35:e5:60:f6:b7:fe:36:
cb:c3:a4:1b:63:2a:60:8c:40:bf:1a:ea:a6:b7:5d:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:32:29:CC:73:E5:6F:0B:C1:95:12:99:E8:4F:15:49:2F:2A:5E:BD
X509v3 Authority Key Identifier:
keyid:73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d1:50:83:74:58:05:6e:c8:bb:bd:b6:db:10:d3:c2:69:ec:
58:dd:f1:33:ea:24:10:f4:01:16:14:51:4b:2b:d7:ff:2f:8e:
43:5f:e8:a4:98:23:cd:ca:16:07:6c:b1:3b:64:c8:81:82:7c:
fe:bf:3d:7e:1d:3f:5b:08:f3:5c:23:36:96:1f:00:36:ad:be:
e4:b7:83:e7:1b:8b:e0:f6:8a:44:0c:e0:27:3b:0d:84:93:91:
cd:25:6e:88:13:af:5d:00:af:7c:91:fc:b8:2e:35:a0:1a:23:
9d:f6:d1:74:d2:18:17:2a:d0:95:06:b8:94:10:09:da:79:a5:
6f:35:99:3c:ea:ae:d3:7f:91:f6:cd:fc:9d:72:4d:c3:92:ba:
36:71:03:be:cd:18:96:24:99:d2:e2:d3:5d:e7:61:32:4f:f3:
9f:eb:a6:99:dd:72:62:a2:ab:8b:9d:0e:a0:36:25:83:1d:3d:
2e:99:9c:83:09:e1:39:78:e4:0e:ca:1b:d9:69:2c:bb:e3:52:
17:b3:3a:f7:a2:d9:6c:db:ff:1f:19:12:c6:1b:be:c2:fe:92:
b8:94:91:46:05:cc:88:77:cf:88:89:13:7e:84:ca:ab:7c:d6:
f8:83:f9:c3:1b:3c:84:b6:3e:8b:57:52:c0:3b:e2:98:a3:f8:
a1:2f:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:25:16 2026 by rpki-client