Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: T8Przro3Q1p4Mfu+OyKmpfZc8Tc8C6ZaFyqbfgOsyRg=
Subject key identifier: 8A:41:89:D6:03:E1:B2:63:65:46:DF:46:92:8B:C0:33:E0:F6:E4:28
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019F91DB2288AEDE2BBEE04635202984D187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 0152
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: PFZnJTS+3VuL0DEAhnFxmjRQeMprt/1FigC97bS4rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:22:88:ae:de:2b:be:e0:46:35:20:29:84:d1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=8a4189d603e1b2636546df46928bc033e0f6e428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:e4:e2:f8:2e:5b:76:0a:21:61:da:c6:3c:
93:c6:2f:de:b7:7a:99:9b:12:ba:06:15:c1:1f:cb:
18:9e:44:5e:56:77:f7:8d:96:59:b4:41:b1:19:0c:
06:33:02:a4:4c:bb:7c:ae:81:a2:86:b9:f8:b5:81:
95:30:6e:ec:f2:02:74:bc:e6:d7:66:6d:25:ae:58:
7b:01:cb:59:15:f0:a9:2b:7e:fc:43:42:0d:cd:b5:
46:32:f2:da:98:7b:01:b4:2e:51:00:0f:c9:e3:1d:
89:0b:b2:1d:db:87:a9:cd:b3:b3:37:7a:aa:80:dc:
2a:f3:4b:c7:d0:50:ef:aa:79:70:82:1e:b2:7f:e8:
99:4f:f7:34:da:0e:7a:e1:4e:ab:03:5e:29:d5:d1:
56:8b:6d:96:5a:e9:b1:8d:f9:28:75:be:4d:75:8a:
95:95:d5:b9:5b:61:04:39:bb:d5:07:93:b5:7d:fb:
1f:d6:66:1e:d6:b3:47:6a:88:20:9b:7e:c6:09:83:
77:9f:a2:86:11:a1:4f:d6:d7:ee:88:b5:23:b8:4a:
70:1a:a7:3a:3d:c5:59:33:62:0c:a8:e7:5a:0b:67:
69:f7:78:8a:01:eb:df:56:56:bb:b4:22:59:54:32:
4f:e5:db:1a:ba:4c:98:b3:66:d9:41:84:4f:5d:5c:
e5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:89:D6:03:E1:B2:63:65:46:DF:46:92:8B:C0:33:E0:F6:E4:28
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ab:c6:d9:d2:7f:62:46:f4:b5:d8:6e:7a:ee:27:3d:db:09:
13:d6:97:3f:71:7e:84:fb:f4:ce:31:f8:83:4f:74:4c:0f:9d:
6a:0c:fc:c5:a1:ae:f9:54:ca:df:ee:9f:49:c4:01:50:30:4c:
e8:31:18:72:45:18:bf:bb:7f:9d:41:c7:68:8a:8c:a3:26:89:
09:e2:dd:17:ef:89:3f:95:86:54:38:db:5e:4d:0e:4e:e3:96:
d8:59:2e:63:04:5f:91:0b:e7:73:a1:9f:40:8d:23:30:22:70:
3a:e5:4a:3a:97:37:89:5f:c4:de:96:a3:52:31:00:12:8c:f2:
9f:16:c8:ae:06:2b:0c:df:02:69:db:33:44:d4:c2:37:20:1c:
73:72:d2:97:09:95:47:af:bf:5e:b5:d6:8f:90:6c:59:d4:cc:
97:af:9a:e0:d7:11:86:66:e1:d6:8f:77:ec:92:df:07:77:e8:
4a:98:00:03:7b:8e:1c:bd:00:b3:62:b5:bd:8a:e0:08:16:3e:
07:5c:e3:fd:ea:64:38:85:b9:bf:7a:3f:a1:e7:f1:c5:c4:2d:
6f:4f:ed:bd:cd:f9:cf:cd:3b:84:86:7d:bd:1b:e2:cc:33:e7:
c6:13:b3:4b:26:05:a5:1b:af:b1:d5:39:a9:3c:47:1a:32:ab:
ff:14:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:30 2026 by rpki-client