Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: d5SwN8Fc71BCyZEuyz0nUORLYlulwyyl5Lsi/zpyl4U=
Subject key identifier: D8:01:B6:45:ED:0D:A8:66:0D:E6:9A:F0:0F:62:1F:4B:28:4F:25:A7
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019F9625256E6A95E5C8D6417A44E423A698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 10FE
Signing time: Fri 24 Jul 2026 22:00:44 +0000
Manifest this update: Fri 24 Jul 2026 22:00:44 +0000
Manifest next update: Sat 25 Jul 2026 22:00:44 +0000
Files and hashes: 1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: TL0ZgSteBH9cK8Wv5lYZ9BA0uL8OgHe2/dhhUC9r3jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 20:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:25:6e:6a:95:e5:c8:d6:41:7a:44:e4:23:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Jul 24 22:00:44 2026 GMT
Not After : Jul 25 22:00:44 2026 GMT
Subject: CN=d801b645ed0da8660de69af00f621f4b284f25a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:d4:d5:eb:e9:7d:be:04:1c:d7:57:15:aa:
39:ae:df:cb:39:87:a4:44:a7:24:81:48:18:59:d9:
ca:40:e8:20:12:58:07:af:04:f2:84:63:e4:a2:eb:
7e:d6:6b:8c:85:df:a7:06:92:18:4a:38:50:bf:53:
8c:65:ad:ad:39:73:61:81:60:e2:b2:22:53:72:db:
40:d2:81:c1:31:5f:00:2c:8b:79:a5:db:7e:ff:dd:
86:9f:19:c2:e5:6f:cd:57:ef:7a:09:1f:86:13:bc:
b9:f3:f8:d8:c1:24:da:cf:23:0a:70:e9:8a:c5:c9:
c4:bc:f3:ec:7a:18:68:43:83:27:4e:d1:0e:cb:cf:
e7:d9:65:36:e3:2f:09:9f:f5:4c:fa:03:ed:89:e7:
94:e4:21:84:3f:2d:70:01:41:d9:28:24:a2:2e:16:
34:23:e8:b6:65:f7:3c:19:32:17:bc:f0:bf:ad:c9:
b7:19:ea:26:8e:e2:eb:de:e2:8d:72:49:3a:da:84:
e7:69:15:d3:9c:7b:3d:0e:94:a2:66:7b:f7:66:a8:
17:b1:77:4f:cf:1a:88:21:e3:db:25:9a:c8:ce:74:
25:ff:de:6c:de:8d:9d:de:aa:c8:a4:e6:c2:6f:07:
a8:cb:4c:fb:e7:b4:fc:7e:e2:f6:58:5e:27:d0:13:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:B6:45:ED:0D:A8:66:0D:E6:9A:F0:0F:62:1F:4B:28:4F:25:A7
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4d:fc:a3:94:88:b5:67:f4:eb:6c:98:9e:be:bd:d2:a2:77:
27:b8:57:e0:aa:e5:cc:25:74:51:52:d5:33:90:7a:9f:15:6c:
2f:64:c5:ab:d8:b5:be:bf:80:e2:c1:b9:09:28:da:c7:95:ad:
cc:2c:53:04:39:7b:16:7b:53:8d:e0:b1:f0:6a:5c:59:53:88:
d6:98:5c:8e:ca:a8:d2:7b:2f:51:bb:c5:53:74:39:4c:11:50:
15:0f:3a:b6:eb:eb:b6:ba:c3:d1:2f:4c:3d:d1:8c:6b:94:21:
0c:4d:f3:29:9c:ed:75:69:72:db:13:bc:20:d7:89:eb:4c:e0:
c5:c1:31:85:b0:77:e0:fe:a9:c3:6a:dc:cf:0f:34:8c:79:4e:
0a:a5:d6:f9:01:ce:c6:cd:3e:8b:8c:df:63:86:fa:06:79:d8:
3d:f3:e6:a6:ad:d2:6e:23:c4:b3:a8:cf:a0:75:08:19:da:d9:
57:2f:bf:a6:f5:c4:61:fb:1c:d2:62:04:ea:8d:77:2e:41:24:
7c:69:31:32:00:e6:8d:50:74:a9:9b:bb:14:35:fd:7f:3d:92:
41:33:42:e9:bf:cd:53:aa:1a:e6:6a:bd:68:35:c5:2c:84:7a:
c2:45:e8:96:17:09:09:9d:08:f7:f1:59:40:c0:1f:b1:c1:90:
99:22:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:10:45 2026 by rpki-client