Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: nmwwjC0eSddcPG6Bfds9GGYnkapMioftAKvD5UPuF/U=
Subject key identifier: 8C:66:E5:75:64:28:AD:E6:50:E0:80:71:DF:B0:72:3E:40:86:C7:78
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019F93C8DEBCCEE5DDE9B037606881D8532C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 11:00:42 +0000
Manifest this update: Fri 24 Jul 2026 11:00:42 +0000
Manifest next update: Sat 25 Jul 2026 11:00:42 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: Dmgqh2gEu3r0BWU7pFxSZRlfqWnVbn0oa3h62TXUsgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:de:bc:ce:e5:dd:e9:b0:37:60:68:81:d8:53:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jul 24 11:00:42 2026 GMT
Not After : Jul 25 11:00:42 2026 GMT
Subject: CN=8c66e5756428ade650e08071dfb0723e4086c778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:48:c2:41:a1:14:c5:3b:96:b7:9b:a5:42:
40:d2:40:e5:78:12:0b:e4:78:51:c4:19:d5:b9:01:
70:3c:25:b1:9b:ef:45:95:a8:05:a8:3e:89:c6:21:
a7:96:f7:90:40:73:e8:3c:6f:a3:ce:47:6c:42:27:
b8:2f:c1:67:39:67:d1:32:87:f8:76:ad:94:c2:3d:
8c:4b:ff:04:c0:a4:e4:d6:5e:f1:01:bd:33:b1:96:
2c:e5:d8:74:bd:0d:42:e5:c4:c8:28:46:45:e8:df:
08:94:27:44:27:43:6c:f6:70:f4:f7:c1:15:00:7f:
78:86:4e:5b:d4:cb:d4:0e:f6:33:ea:2d:54:fc:70:
eb:df:f9:14:2e:f2:dd:76:0c:55:7c:a3:34:c9:1d:
ed:79:4e:a6:fc:a0:e5:f1:f1:16:d2:12:7f:41:01:
4b:71:34:5d:f4:c0:e4:5c:74:01:2f:b9:c7:a4:21:
88:0b:3b:78:1f:65:aa:c1:50:b8:48:67:36:aa:cc:
9c:7f:0c:8b:83:30:7e:7d:d4:c5:29:a5:eb:7d:58:
64:a6:6b:3a:43:dd:e6:e7:87:dc:0d:81:f8:b5:4d:
c6:34:4c:7a:e5:a1:83:f7:e4:1d:45:7d:a4:1d:ee:
92:30:0f:6b:64:19:9c:81:9e:8d:cc:4d:d6:0d:61:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:66:E5:75:64:28:AD:E6:50:E0:80:71:DF:B0:72:3E:40:86:C7:78
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:55:73:c0:5f:75:a1:9a:82:d6:29:fe:d5:b3:7e:90:41:d6:
7c:ab:05:0d:90:a6:6a:d6:57:e0:82:42:6f:66:9f:ac:02:40:
d2:1b:da:eb:89:2a:b8:bf:b9:3c:1b:7e:14:18:f7:40:d8:ab:
32:c3:f7:31:46:81:82:ce:a8:cd:9f:f3:23:ce:7b:fb:18:24:
72:2a:e3:a0:4e:3a:1a:34:0b:2f:d0:a5:20:82:d5:23:91:c5:
7f:5d:6a:dc:bd:af:f3:60:a2:99:7e:58:cb:01:8a:2d:c1:d0:
c9:96:62:f6:f7:ec:93:6a:48:4b:6f:b2:4c:c5:db:ec:08:b8:
2e:3a:94:53:e7:2d:0c:b8:ef:a5:5e:f7:74:0c:31:2b:5e:24:
cd:9a:97:c6:46:38:1f:61:d3:da:da:53:b2:12:17:2b:18:21:
56:2a:20:7c:6e:20:98:84:64:10:4d:d5:aa:72:48:9f:98:26:
67:42:e9:1d:93:cf:f8:b4:3a:1f:eb:1c:a1:84:73:4a:8d:57:
96:6b:5b:ed:bb:6b:21:0c:22:04:35:0e:e3:62:23:ac:c1:3a:
f4:c1:6f:cb:6e:73:9b:7c:1d:b2:a0:dc:1f:5e:43:31:e2:c6:
a0:b0:7b:27:5c:f1:a4:3f:05:53:71:cc:25:7a:0f:33:36:e7:
77:99:d4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyN68zuXd6bA3YGiB2FMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjYwNzI0MTEwMDQyWhcNMjYwNzI1MTEwMDQyWjAzMTEwLwYDVQQD
Eyg4YzY2ZTU3NTY0MjhhZGU2NTBlMDgwNzFkZmIwNzIzZTQwODZjNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnylIwkGhFMU7lrebpUJA0kDleBIL
5HhRxBnVuQFwPCWxm+9FlagFqD6JxiGnlveQQHPoPG+jzkdsQie4L8FnOWfRMof4
dq2Uwj2MS/8EwKTk1l7xAb0zsZYs5dh0vQ1C5cTIKEZF6N8IlCdEJ0Ns9nD098EV
AH94hk5b1MvUDvYz6i1U/HDr3/kULvLddgxVfKM0yR3teU6m/KDl8fEW0hJ/QQFL
cTRd9MDkXHQBL7nHpCGICzt4H2WqwVC4SGc2qsycfwyLgzB+fdTFKaXrfVhkpms6
Q93m54fcDYH4tU3GNEx65aGD9+QdRX2kHe6SMA9rZBmcgZ6NzE3WDWFgRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxm5XVkKK3mUOCAcd+wcj5Ahsd4MB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1VzwF91
oZqC1in+1bN+kEHWfKsFDZCmatZX4IJCb2afrAJA0hva64kquL+5PBt+FBj3QNir
MsP3MUaBgs6ozZ/zI857+xgkcirjoE46GjQLL9ClIILVI5HFf11q3L2v82CimX5Y
ywGKLcHQyZZi9vfsk2pIS2+yTMXb7Ai4LjqUU+ctDLjvpV73dAwxK14kzZqXxkY4
H2HT2tpTshIXKxghViogfG4gmIRkEE3VqnJIn5gmZ0LpHZPP+LQ6H+scoYRzSo1X
lmtb7btrIQwiBDUO42IjrME69MFvy25zm3wdsqDcH15DMeLGoLB7J1zxpD8FU3HM
JXoPMzbnd5nUSQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:37 2026 by rpki-client