Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
File: ydWxKeBvlSRoXnABAoQfctaRXDM.mft (raw, json)
Hash identifier: 5ZBD1K+xsD5ngOyP03DQMw2PeCc/1Uk9MMkXOAYuMfs=
Subject key identifier: 80:79:D4:AA:93:14:19:66:A1:A1:BD:EC:6D:D6:AA:CD:81:82:FE:F9
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 019F9135A34CC060DB8BA2AE7E386F7C9733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
Manifest number: 07AA
Signing time: Thu 23 Jul 2026 23:00:39 +0000
Manifest this update: Thu 23 Jul 2026 23:00:39 +0000
Manifest next update: Fri 24 Jul 2026 23:00:39 +0000
Files and hashes: 1: BNMGtjTTYKe2pymUlI-2By8WAuY.roa (hash: RrYXesXXO0Vl2bktuDwSHZFyLC3J01YK9f8as6ZBpiA=)
2: ydWxKeBvlSRoXnABAoQfctaRXDM.crl (hash: nOaiIyFwWCJGuCkPgCsHxDj45kN5w1TY7psZ34TLcoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:a3:4c:c0:60:db:8b:a2:ae:7e:38:6f:7c:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Jul 23 23:00:39 2026 GMT
Not After : Jul 24 23:00:39 2026 GMT
Subject: CN=8079d4aa93141966a1a1bdec6dd6aacd8182fef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:4a:8b:5a:61:44:39:b6:ff:75:c6:7f:70:
b8:a3:15:d0:18:e9:7c:e5:1b:b0:f9:24:ef:d1:b5:
51:50:51:f2:ed:41:fc:39:a9:f8:a5:b4:e9:b1:0a:
ba:e2:e6:9b:a1:4b:bb:de:65:53:ac:bf:3d:d2:34:
bb:b1:2f:cf:8e:1e:06:a5:4c:98:c0:82:d5:3b:69:
c9:d3:56:14:43:8b:98:14:af:df:1a:79:2d:45:f2:
c5:f9:b1:6b:7a:04:68:49:e1:63:c7:14:30:f2:d4:
0e:b2:88:02:1b:c2:bc:8b:91:0f:c0:6c:3d:80:ae:
56:dc:92:9d:d8:34:01:c3:bb:af:67:1d:25:4e:89:
7a:a6:be:1e:46:de:3b:de:f8:86:26:77:68:76:ca:
e6:2f:fa:91:ba:29:40:72:ef:e3:48:c9:1d:6d:0c:
62:e9:da:f5:2d:8e:3e:ba:73:b1:01:b3:49:a9:bb:
94:5f:80:88:57:5b:bb:04:a5:fc:8f:8e:3c:cf:1a:
59:1e:6c:e3:7a:ac:2c:f6:90:2c:4d:e5:93:c0:61:
78:31:8e:aa:77:d1:64:28:d5:c8:86:90:df:8e:50:
09:e4:46:92:b2:96:b2:aa:8f:7c:d9:d0:1f:10:c4:
bc:b1:65:49:17:c8:4f:b2:45:39:91:a8:0b:2b:1d:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:79:D4:AA:93:14:19:66:A1:A1:BD:EC:6D:D6:AA:CD:81:82:FE:F9
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:05:cf:39:ae:bb:ff:3f:59:58:f6:1f:93:05:d5:d9:13:e7:
63:fb:c0:51:c6:c1:d6:97:2f:24:c0:87:b4:57:23:65:b5:84:
ae:97:cd:3e:84:8c:13:32:45:24:61:78:bb:04:b3:de:8d:c7:
96:60:22:a8:f3:8e:b4:f5:9b:71:61:47:01:de:88:e4:c1:70:
e7:c4:52:d6:89:aa:5a:3a:17:ce:95:61:4a:0a:ae:8c:da:06:
c6:cf:44:f2:31:a4:83:85:78:e6:0f:94:f9:5e:bd:e2:a7:81:
11:f7:5e:e0:49:cc:ec:53:04:a6:cb:a1:66:7f:5c:13:ed:5e:
c0:9b:3a:73:2f:02:c2:d1:d5:e5:59:c3:93:e4:93:83:4e:8e:
37:28:15:8a:99:56:d6:fd:16:85:09:19:0b:fc:b0:9a:2f:88:
ab:a4:05:8e:c5:07:3c:3b:ec:6b:d8:eb:e5:59:03:a3:3d:16:
56:08:a6:5c:69:05:bf:27:4e:b3:2f:14:60:a1:27:ee:29:54:
ab:0e:a3:70:d5:ee:9d:6b:58:33:8d:e6:7e:ce:98:6c:1d:fb:
d4:ed:c4:a7:e3:87:95:14:d8:8c:b8:7a:76:61:2f:6d:94:6d:
ba:45:07:8f:b9:36:69:9e:2d:65:4a:b9:55:18:4a:03:24:86:
01:c9:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:29 2026 by rpki-client