Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: e235n4g+mq+LasxkSXyb/1c6Mzq2NSBp63cJk3H+Kkk=
Subject key identifier: 9A:4B:2C:2B:99:4F:3C:E8:B9:34:4C:B2:68:96:07:3B:7C:39:92:EB
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019F91DAE5789A1AD12845DAADD312B76086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 123B
Signing time: Fri 24 Jul 2026 02:01:09 +0000
Manifest this update: Fri 24 Jul 2026 02:01:09 +0000
Manifest next update: Sat 25 Jul 2026 02:01:09 +0000
Files and hashes: 1: BV_wbDPbUT8cQpcSNghKFwGtfvA.roa (hash: ICfuWyqr7El/ZDMz8MEEp0z3PKwy83J5F2WdPeRDG0A=)
2: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: TIkP38lTFJxItgwWQNp4QarnGEiTu4CzxzEz0mMpR6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:e5:78:9a:1a:d1:28:45:da:ad:d3:12:b7:60:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jul 24 02:01:09 2026 GMT
Not After : Jul 25 02:01:09 2026 GMT
Subject: CN=9a4b2c2b994f3ce8b9344cb26896073b7c3992eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:21:f6:ab:fb:ad:1f:5e:95:e4:d5:c9:9c:
07:ae:ad:f4:cc:38:3b:ff:cc:f3:61:07:52:d4:67:
02:24:bd:e6:3f:74:6b:f9:b9:57:43:9b:9a:b9:0e:
f7:2d:c5:e6:1b:30:01:11:da:84:17:8a:07:f2:db:
a4:01:2f:54:61:da:e9:85:4c:2e:6e:77:b9:e8:e2:
64:be:a5:fa:26:5a:ca:c4:3a:18:8e:cd:fb:d4:96:
d3:ff:20:74:fc:32:ac:e9:f2:87:9c:41:ef:93:46:
ed:62:1f:f1:3f:08:22:92:8f:c1:02:f7:89:1e:de:
f7:e4:f4:07:f5:e1:6e:0f:83:17:df:37:8b:37:98:
6b:dd:c8:df:f4:17:8e:72:83:d5:4e:5b:cf:43:dd:
08:4b:5b:0e:1c:2b:1f:97:9a:03:aa:a7:ce:fc:a9:
f0:46:4e:a4:ea:5b:0c:49:a3:1a:45:b5:41:95:92:
ed:47:0d:3a:e1:7f:51:7e:c2:cc:fc:f8:31:13:da:
83:b5:0a:48:b3:09:08:44:a6:24:a0:d2:cd:6d:6e:
70:9d:38:c2:43:2a:69:a1:67:e9:74:e7:40:af:1d:
40:46:2c:78:af:6a:75:25:8e:4c:3a:8b:bc:c2:a4:
7d:c3:ca:0f:32:9e:b6:66:ae:d1:df:2e:f0:49:91:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:2C:2B:99:4F:3C:E8:B9:34:4C:B2:68:96:07:3B:7C:39:92:EB
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:77:3a:7d:1c:d8:d9:90:a5:06:6d:ad:09:40:7a:1d:e3:9e:
e8:cf:6d:9a:80:37:61:a9:05:3f:c6:ac:30:43:28:1d:61:35:
90:d4:b0:a6:5d:20:cd:70:50:fb:a4:37:6f:7e:9c:92:a3:ef:
4b:2a:ae:d2:f0:24:27:58:b7:ba:4d:b3:ae:05:e1:53:59:b1:
5c:6a:2f:ce:14:60:19:0b:2a:89:1e:a4:39:06:c2:16:db:5f:
d6:9a:16:29:5f:fe:41:7d:25:49:99:6f:da:b0:48:12:67:8d:
41:93:17:4f:fa:41:ea:53:48:3f:3d:6e:7b:fc:0e:98:26:1a:
65:75:5e:df:cf:3c:bb:41:99:80:5b:79:48:27:c2:1d:f2:46:
8b:8d:cf:6d:d3:6f:53:25:1f:60:44:dc:f9:d2:3d:04:d3:ed:
35:98:92:93:f4:a0:f2:63:9a:ba:a0:ed:8d:a8:25:f7:96:73:
7c:1d:18:01:87:18:21:55:13:8b:43:22:80:6b:08:25:d0:eb:
7f:10:78:17:f1:5f:c4:9b:da:42:c2:cd:99:44:77:ac:da:af:
fe:ac:15:35:59:d9:1e:62:22:1e:f7:93:08:82:69:83:f2:3a:
db:2f:52:d1:3e:b5:a0:16:0d:2f:aa:b8:43:6e:df:3d:60:44:
44:ea:14:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:05:39 2026 by rpki-client