Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: f6dlijybI2Q3FdPxZmshqGUlXV4MsnqQRLYucz4wdBQ=
Subject key identifier: F7:3E:B0:A8:C4:EA:A4:00:30:CB:15:09:E2:61:9D:96:32:33:8A:BD
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019F92EDCAB67904C77BE375FC42F1697AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 096A
Signing time: Fri 24 Jul 2026 07:01:25 +0000
Manifest this update: Fri 24 Jul 2026 07:01:25 +0000
Manifest next update: Sat 25 Jul 2026 07:01:25 +0000
Files and hashes: 1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: BqbQQR+JqUpLBIBspyLm2s1V9w5OIcZvTa9eM8tCBk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:ca:b6:79:04:c7:7b:e3:75:fc:42:f1:69:7a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Jul 24 07:01:25 2026 GMT
Not After : Jul 25 07:01:25 2026 GMT
Subject: CN=f73eb0a8c4eaa40030cb1509e2619d9632338abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:c5:b6:61:eb:57:6d:54:08:c2:ed:bd:7d:
9e:a0:a1:92:98:ed:ec:02:00:2e:dd:71:da:b4:71:
51:a0:eb:67:5a:ad:e1:c1:42:49:87:c3:c1:8f:b7:
6d:1b:58:eb:23:60:79:aa:ed:f3:5c:d0:0c:04:b4:
a1:65:81:74:b1:f2:c8:b9:27:0f:8c:fb:03:d7:58:
fa:69:cf:16:e2:22:26:94:3f:2c:ce:36:af:b3:47:
c2:b2:f8:04:c7:da:52:d9:64:e6:03:57:10:51:c6:
09:dc:c5:8d:29:78:3e:b3:f2:c4:da:8b:a6:4a:ad:
45:76:ea:6c:a8:33:74:83:7e:09:9e:f3:86:7f:74:
5a:15:8a:67:d8:d0:c5:68:9c:07:fb:65:1a:8c:e3:
05:84:04:cf:d4:9d:6f:ec:71:1e:84:66:73:fe:c5:
1f:2d:31:71:3f:80:a1:d0:31:74:d1:84:a2:1f:e0:
aa:6a:f3:6e:70:8b:3b:2a:95:bf:0d:d3:d5:86:33:
26:d8:86:d7:a0:d2:94:16:79:4b:ba:6f:93:56:0b:
1f:7c:22:5b:40:e2:27:f2:10:b8:7e:c9:73:88:6e:
98:87:ab:c8:66:18:a6:83:87:fe:53:a0:19:11:5c:
6d:0d:7d:81:0e:a9:05:7f:1e:8a:c2:91:f3:0b:63:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3E:B0:A8:C4:EA:A4:00:30:CB:15:09:E2:61:9D:96:32:33:8A:BD
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:6a:0e:3f:50:9f:24:f6:92:e2:82:b6:3e:55:21:1b:7c:
83:38:7e:4b:4f:bf:47:fb:92:d7:56:d1:6c:f9:92:d2:c6:28:
5e:68:9d:b3:57:43:30:ea:fd:85:33:0d:b0:94:8b:6b:95:85:
62:eb:84:20:d8:44:a3:e1:6c:93:ff:57:6f:0d:07:3b:71:37:
5c:06:d6:c1:d5:82:ec:a5:77:e1:58:30:75:67:e1:3d:ab:eb:
f9:d4:84:a3:c7:cb:9b:88:67:ee:81:36:3c:40:33:92:95:a8:
84:9d:85:df:51:b9:20:04:a8:fe:e1:74:ed:3e:72:af:37:6c:
b6:09:e8:0e:4b:31:37:55:bd:00:a7:a3:7a:19:44:b7:38:2c:
b6:f6:2d:0f:ac:c3:dd:58:1a:cf:58:36:7d:00:c5:76:dc:77:
02:e8:b8:69:6e:81:9f:69:fa:83:ea:a3:65:63:5b:cb:e1:be:
a5:17:cd:c0:d3:98:04:56:7b:2a:8d:7a:fc:4d:2e:2a:71:b2:
7f:86:69:af:4e:ab:ff:59:b2:c6:14:f3:b6:f4:69:9b:03:0a:
eb:73:5e:09:8c:11:3d:a2:3b:d1:47:28:54:78:95:45:04:0f:
25:c9:c5:e1:d9:22:52:32:db:12:73:58:69:21:e4:46:ce:40:
0a:fd:3a:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7cq2eQTHe+N1/ELxaXqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MThjNDAxOTQ3NGNjODFlYzY2MWZjZTY0ZTZjOTM4OTcy
MTk2ZGEwHhcNMjYwNzI0MDcwMTI1WhcNMjYwNzI1MDcwMTI1WjAzMTEwLwYDVQQD
EyhmNzNlYjBhOGM0ZWFhNDAwMzBjYjE1MDllMjYxOWQ5NjMyMzM4YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF7FtmHrV21UCMLtvX2eoKGSmO3s
AgAu3XHatHFRoOtnWq3hwUJJh8PBj7dtG1jrI2B5qu3zXNAMBLShZYF0sfLIuScP
jPsD11j6ac8W4iImlD8szjavs0fCsvgEx9pS2WTmA1cQUcYJ3MWNKXg+s/LE2oum
Sq1FdupsqDN0g34JnvOGf3RaFYpn2NDFaJwH+2UajOMFhATP1J1v7HEehGZz/sUf
LTFxP4Ch0DF00YSiH+CqavNucIs7KpW/DdPVhjMm2IbXoNKUFnlLum+TVgsffCJb
QOIn8hC4fslziG6Yh6vIZhimg4f+U6AZEVxtDX2BDqkFfx6KwpHzC2NNqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc+sKjE6qQAMMsVCeJhnZYyM4q9MB8GA1UdIwQY
MBaAFMkYxAGUdMyB7GYfzmTmyTiXIZbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYt
OGFiY2JiNjVjNjIxLzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8yOTY4NTItYThmZC00OGU1LThkZDYtOGFiY2JiNjVjNjIx
LzEveVJqRUFaUjB6SUhzWmhfT1pPYkpPSmNobHRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0hqDj9Q
nyT2kuKCtj5VIRt8gzh+S0+/R/uS11bRbPmS0sYoXmids1dDMOr9hTMNsJSLa5WF
YuuEINhEo+Fsk/9Xbw0HO3E3XAbWwdWC7KV34VgwdWfhPavr+dSEo8fLm4hn7oE2
PEAzkpWohJ2F31G5IASo/uF07T5yrzdstgnoDksxN1W9AKejehlEtzgstvYtD6zD
3Vgaz1g2fQDFdtx3Aui4aW6Bn2n6g+qjZWNby+G+pRfNwNOYBFZ7Ko16/E0uKnGy
f4Zpr06r/1myxhTztvRpmwMK63NeCYwRPaI70UcoVHiVRQQPJcnF4dkiUjLbEnNY
aSHkRs5ACv064w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:18 2026 by rpki-client