Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: DJu74IJVBmWrYMexaXO/BgWI/XjGIh3JXb5XwBYOiHo=
Subject key identifier: B5:57:D0:CB:EC:13:C7:89:E8:D8:BE:11:02:CC:97:E2:8C:AD:91:03
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 019F91A3C98D5831D5802AD033E46EB43AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 057A
Signing time: Fri 24 Jul 2026 01:00:57 +0000
Manifest this update: Fri 24 Jul 2026 01:00:57 +0000
Manifest next update: Sat 25 Jul 2026 01:00:57 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: xWO4TFR6z+PNmAgh/lSPzFAueXdzMs2QmBdQGR2z3sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:c9:8d:58:31:d5:80:2a:d0:33:e4:6e:b4:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Jul 24 01:00:57 2026 GMT
Not After : Jul 25 01:00:57 2026 GMT
Subject: CN=b557d0cbec13c789e8d8be1102cc97e28cad9103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:ae:08:8a:19:94:98:10:2b:a1:bb:fb:e7:
42:b2:4e:82:91:e6:b0:63:07:72:57:f0:4b:a5:38:
d1:aa:a2:6f:1c:e9:8a:93:92:19:f8:98:bc:16:d2:
70:b3:69:73:d4:32:ee:cb:69:cf:08:c1:b3:37:a4:
8d:65:70:75:1e:d6:c2:0e:5d:b4:f1:29:28:d4:f6:
10:09:b6:c4:91:7e:db:e3:03:f9:e6:57:44:d2:71:
52:aa:8e:4a:23:ce:3d:09:8b:23:bd:a4:b6:e9:80:
fb:5d:70:46:a8:8b:c7:0b:44:ed:8a:7e:38:a8:90:
73:e6:7f:68:4c:c8:6b:8e:b5:3a:13:2a:f8:eb:76:
fe:21:2e:62:2f:97:83:9d:d6:b2:d2:35:f3:31:77:
ac:0f:f6:2b:10:1a:2f:f7:f0:f8:ad:6d:db:77:fb:
ec:78:d8:d2:0a:d8:83:da:5b:1d:13:9b:89:c6:dc:
0d:2e:b8:62:62:75:8e:1c:51:98:fc:88:98:5e:b8:
a2:c1:6a:55:f7:a3:7f:7b:dc:8e:ee:45:a8:35:f2:
30:60:b4:65:27:ce:65:92:68:26:af:ad:19:3c:51:
fc:61:38:93:6b:db:87:8d:2b:dd:c0:ee:d6:2d:3f:
98:08:42:0c:3c:84:ce:4e:ed:11:85:fc:3c:e8:01:
f6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:57:D0:CB:EC:13:C7:89:E8:D8:BE:11:02:CC:97:E2:8C:AD:91:03
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:aa:36:59:27:90:42:cc:20:98:90:ba:42:9c:d2:48:f9:cb:
42:51:eb:32:31:f4:4f:f4:01:9a:98:88:3b:bd:e1:01:fc:29:
62:93:71:07:bc:36:99:9c:ef:e9:ae:1f:10:8c:df:d8:31:02:
4c:4f:95:ca:46:4d:15:a5:b7:a9:68:c2:fd:29:eb:e6:e4:25:
33:2a:23:c8:9e:18:53:66:a9:a5:74:25:80:32:ce:e5:38:ff:
71:c6:59:c0:b6:83:25:43:a1:0d:1a:70:10:a2:0c:46:6b:8b:
a9:9d:38:99:be:e4:5f:0d:c3:db:96:46:06:2b:12:ae:c3:19:
b1:44:40:ab:25:1d:66:f8:40:6c:cc:aa:50:ee:b8:45:26:5c:
b0:0d:06:26:db:b2:9d:ab:00:c5:35:f1:63:d6:31:8e:99:ad:
74:bd:65:62:cf:27:4e:1f:6b:8d:b5:12:e8:bf:da:9d:70:86:
15:f4:93:8e:4a:e6:f9:44:9b:ff:ee:23:80:e0:7e:09:ea:a5:
19:70:23:da:1e:e1:37:7a:e4:98:f6:ea:72:b3:b3:b4:ff:49:
56:67:bd:58:d9:c8:22:88:8c:5c:63:5e:c9:12:33:9b:f4:0b:
b7:e7:8f:f7:f0:00:74:a1:85:99:62:98:62:9b:d4:ef:a7:6e:
85:e8:04:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro8mNWDHVgCrQM+RutDrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5
ZTViNjQwHhcNMjYwNzI0MDEwMDU3WhcNMjYwNzI1MDEwMDU3WjAzMTEwLwYDVQQD
EyhiNTU3ZDBjYmVjMTNjNzg5ZThkOGJlMTEwMmNjOTdlMjhjYWQ5MTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWquCIoZlJgQK6G7++dCsk6Ckeaw
YwdyV/BLpTjRqqJvHOmKk5IZ+Ji8FtJws2lz1DLuy2nPCMGzN6SNZXB1HtbCDl20
8Sko1PYQCbbEkX7b4wP55ldE0nFSqo5KI849CYsjvaS26YD7XXBGqIvHC0Ttin44
qJBz5n9oTMhrjrU6Eyr463b+IS5iL5eDnday0jXzMXesD/YrEBov9/D4rW3bd/vs
eNjSCtiD2lsdE5uJxtwNLrhiYnWOHFGY/IiYXriiwWpV96N/e9yO7kWoNfIwYLRl
J85lkmgmr60ZPFH8YTiTa9uHjSvdwO7WLT+YCEIMPITOTu0Rhfw86AH2GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVX0MvsE8eJ6Ni+EQLMl+KMrZEDMB8GA1UdIwQY
MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt
ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw
LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ao2WSeQ
QswgmJC6QpzSSPnLQlHrMjH0T/QBmpiIO73hAfwpYpNxB7w2mZzv6a4fEIzf2DEC
TE+VykZNFaW3qWjC/Snr5uQlMyojyJ4YU2appXQlgDLO5Tj/ccZZwLaDJUOhDRpw
EKIMRmuLqZ04mb7kXw3D25ZGBisSrsMZsURAqyUdZvhAbMyqUO64RSZcsA0GJtuy
nasAxTXxY9YxjpmtdL1lYs8nTh9rjbUS6L/anXCGFfSTjkrm+USb/+4jgOB+Ceql
GXAj2h7hN3rkmPbqcrOztP9JVme9WNnIIoiMXGNeyRIzm/QLt+eP9/AAdKGFmWKY
YpvU76duhegEMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:25:17 2026 by rpki-client