Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: eWvIs6Nx1g/5RwwUl3sm0pV9OIqO3FciWWx5fpXYYCc=
Subject key identifier: 8E:51:43:FF:A7:76:E1:4C:7E:83:E5:3B:7E:17:28:48:3C:70:20:E8
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019F9023409C45FF271750258F5A00591EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0A17
Signing time: Thu 23 Jul 2026 18:00:57 +0000
Manifest this update: Thu 23 Jul 2026 18:00:57 +0000
Manifest next update: Fri 24 Jul 2026 18:00:57 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: FysA6hCFb56xiWE0U3OVCLj7hytX7lr9apUFoyolJjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:40:9c:45:ff:27:17:50:25:8f:5a:00:59:1e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Jul 23 18:00:57 2026 GMT
Not After : Jul 24 18:00:57 2026 GMT
Subject: CN=8e5143ffa776e14c7e83e53b7e1728483c7020e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:23:dc:45:75:03:64:e5:4b:e9:35:0e:76:
c4:cf:46:51:79:7e:cd:5a:ef:4d:7a:53:dc:b7:29:
c2:5c:3b:69:c2:f2:15:75:91:d0:56:ab:e9:dc:b6:
5e:9e:b0:9d:db:34:a9:08:b7:a4:8c:32:48:73:a5:
38:6e:b4:7a:9d:0e:6f:43:7c:ea:51:b0:cb:5a:a6:
16:cd:4d:76:59:61:df:22:00:8b:58:b0:b4:97:e3:
42:7e:da:df:36:d8:2a:be:ae:ff:5c:5e:80:8e:3b:
47:0f:6e:03:0c:71:40:81:94:23:c9:bc:c0:85:cf:
2b:3b:e7:5f:61:74:9c:30:53:30:88:4d:b4:99:77:
6a:e1:01:2a:7f:4e:53:ba:0a:b1:45:34:37:79:96:
5e:ef:32:51:2d:d7:7a:6d:01:0c:3c:f9:cc:3b:2f:
55:0c:88:c5:1f:92:0c:e8:c0:4c:33:e6:21:bd:9c:
08:49:b7:5c:ed:79:d5:2c:8b:43:09:82:ab:8f:ea:
af:77:de:75:3b:74:d7:8c:d9:9b:a8:f3:a1:2a:f5:
5a:84:64:7c:8d:48:22:40:12:87:b7:83:3a:cc:6b:
c7:40:9b:91:bf:64:c6:50:fd:ba:64:d5:b0:6c:7b:
66:2c:37:00:65:89:57:06:89:16:a3:0e:0e:56:a1:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:43:FF:A7:76:E1:4C:7E:83:E5:3B:7E:17:28:48:3C:70:20:E8
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0a:fe:6a:62:24:a6:e2:10:58:44:3d:1e:57:84:04:1b:ee:
3f:ae:7d:ca:fc:f2:ca:f2:b0:4e:3d:a7:dd:be:5c:db:7c:80:
5e:cb:88:ba:e9:6e:f3:25:5f:e8:fe:8f:ca:b2:20:13:ed:58:
ec:4e:cc:b0:9f:8e:38:0d:53:46:63:83:a6:29:a4:ef:ca:74:
fb:3c:e0:a9:b6:7d:a5:c3:26:18:3e:e8:ae:f8:80:69:96:9a:
6a:b4:9a:09:ca:11:ba:b1:bb:42:72:98:18:fe:50:a8:79:9b:
0a:9a:b9:f1:8c:ab:b1:6d:db:b2:5d:54:ab:ff:29:a4:8e:dc:
82:cc:64:d0:1a:ed:d8:f5:65:da:4d:1f:9f:2b:35:e8:7b:d2:
28:14:a0:5e:89:8f:b2:a6:2e:8a:be:6d:f5:e9:45:d6:be:c6:
63:6b:fb:64:fe:23:e4:dc:63:29:45:ed:a0:55:3a:d4:6c:85:
20:d3:6b:40:9c:06:b4:1d:6b:01:64:06:c2:a0:7b:2c:76:40:
d7:3f:40:6d:e9:8e:ad:3b:49:8f:ef:60:1d:b6:0c:fd:8c:68:
83:c0:a6:e6:7a:6d:56:26:c2:4e:7c:6a:c0:dc:8d:7b:62:11:
b4:b0:d7:7b:7d:ce:47:26:ee:61:aa:8f:7e:5e:1e:10:68:29:
e7:ab:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:42 2026 by rpki-client