Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: 3eCYpWny9E2Z/ZuV3ICbT19bdUT9AmfxhILyvxKNEDo=
Subject key identifier: A5:0D:F5:6B:69:25:41:86:D1:2F:FA:71:07:7E:B7:B5:FC:F9:CB:AB
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019F91DA92149FE7152874710B50567996AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 14A7
Signing time: Fri 24 Jul 2026 02:00:48 +0000
Manifest this update: Fri 24 Jul 2026 02:00:48 +0000
Manifest next update: Sat 25 Jul 2026 02:00:48 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: OkX6BM/CvoI+FIIZrjEkSUUANJg3+2w6KN/MHIuCS3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:92:14:9f:e7:15:28:74:71:0b:50:56:79:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jul 24 02:00:48 2026 GMT
Not After : Jul 25 02:00:48 2026 GMT
Subject: CN=a50df56b69254186d12ffa71077eb7b5fcf9cbab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:48:e6:d3:66:06:7d:af:75:ec:07:38:7f:
48:85:f1:65:e6:d1:9e:29:a7:7e:69:93:12:29:3d:
73:7c:fe:49:cc:aa:f2:0a:fb:48:78:e4:c5:d9:f9:
95:92:7d:5d:43:25:ca:64:f5:cf:2f:a2:57:e7:1f:
60:01:34:ea:75:c8:15:03:4b:e7:6d:1b:52:a6:17:
53:13:8d:89:bc:b3:13:d9:17:0c:46:50:b5:ca:97:
6a:e4:93:e8:58:2a:91:20:3d:6e:8c:b1:a2:20:ed:
07:b0:07:dc:4c:e9:37:f4:7d:67:30:c3:79:fd:b8:
41:3e:16:21:d1:1e:ac:47:56:5a:3a:89:8e:dd:ec:
00:f6:63:72:cb:73:5b:c3:0f:cf:63:d2:9b:6a:16:
72:46:69:6c:4d:be:90:8f:f5:09:8b:d8:4b:d8:80:
a0:be:42:b9:e8:1e:af:9f:fd:ad:76:9d:73:9c:72:
14:e6:b1:11:26:a6:30:e2:1b:55:d2:b2:ba:f6:2b:
6c:de:a7:bf:3e:46:a3:87:ae:f6:49:fd:ba:22:e5:
41:41:26:9b:fb:e0:74:5c:41:6a:ff:8f:02:f5:2b:
fb:45:b2:82:82:eb:db:80:d8:c5:38:9f:c4:8f:db:
54:18:e5:06:af:68:15:42:23:f1:f1:6f:3e:56:5d:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0D:F5:6B:69:25:41:86:D1:2F:FA:71:07:7E:B7:B5:FC:F9:CB:AB
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:80:50:b4:74:3f:b6:f2:d4:09:bd:09:77:a9:3a:8e:8a:95:
b0:80:6f:9c:d0:c0:25:65:cf:15:b1:c4:ba:2c:c8:f1:74:a2:
57:18:a9:74:57:0a:bd:9e:d8:ff:e0:e8:4d:cf:ba:1f:5a:ed:
f7:e5:68:dc:61:11:0b:3f:15:e8:83:7a:0b:cb:a4:ab:56:40:
6f:ec:3f:e0:28:3f:39:fb:34:df:1d:14:e0:bf:df:51:45:6b:
1b:ba:e9:09:b7:75:49:86:b0:de:ec:50:62:17:c4:22:1d:70:
98:26:df:66:36:1f:2b:50:34:4e:54:dc:cd:51:ea:6c:b4:ff:
9e:73:07:fc:3d:02:30:52:9c:bf:1a:4e:d7:d7:47:dd:5c:4b:
14:72:4f:de:18:87:75:0f:be:13:42:71:c9:6d:84:b9:b9:6a:
1b:35:65:b9:46:3e:14:d2:dc:a3:15:4c:42:07:14:b0:3f:a9:
4d:61:60:e5:dd:d2:28:1e:ec:11:a1:25:e1:1e:f7:f8:94:db:
78:e3:b6:42:4f:72:c5:0c:34:6f:2b:d9:d3:3d:36:54:b9:01:
77:fe:f9:58:b9:e8:da:74:89:40:b6:86:88:30:d6:3e:a2:da:
ce:aa:ed:1f:3d:7e:ca:27:6a:8b:f3:63:9c:9f:c3:a3:36:b5:
35:01:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:28 2026 by rpki-client