Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
File: yAA8l5YD986hKsoB68IFfDb9fzA.mft (raw, json)
Hash identifier: /7gdyAU/Ck83sNIaMRmAVoslS7v+O2CnKu9kPGqk8GA=
Subject key identifier: C5:49:A5:F4:E1:20:CF:E8:29:CE:B1:76:DD:11:8F:7E:F0:56:23:12
Authority key identifier: C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
Certificate issuer: /CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Certificate serial: 019F9323D57BD22D57C12E6C90701C89B166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
Manifest number: 0EE9
Signing time: Fri 24 Jul 2026 08:00:26 +0000
Manifest this update: Fri 24 Jul 2026 08:00:26 +0000
Manifest next update: Sat 25 Jul 2026 08:00:26 +0000
Files and hashes: 1: 4NkVvtcGrZVKXcIHUXN3aX5aR-U.roa (hash: uUV3NRxzmHCDo1hNed6mKPC9qoNr+1AXHF3xP4nPhT8=)
2: CsyMHLJsqJsWQMS5RZVl3HT44Ig.roa (hash: eTv1DPwyjyPAv2oxMpOhG4oCNxnU96J8zTE8wkeBsrA=)
3: VX7ZDp6l2UyCZjm0hRN6nGJk9i8.roa (hash: B+CJtwt+tc0wqY8DQhcHcXdy6r3buq290Njel11LhmU=)
4: yAA8l5YD986hKsoB68IFfDb9fzA.crl (hash: Sa6lR/yRi+rbwceQ3mefukeOQ121hucRKk3YrNpjn8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:d5:7b:d2:2d:57:c1:2e:6c:90:70:1c:89:b1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8003c979603f7cea12aca01ebc2057c36fd7f30
Validity
Not Before: Jul 24 08:00:26 2026 GMT
Not After : Jul 25 08:00:26 2026 GMT
Subject: CN=c549a5f4e120cfe829ceb176dd118f7ef0562312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:85:15:7f:15:d6:88:f6:5b:f1:6c:5a:18:
bd:f7:0b:8a:f9:d7:ae:40:a4:03:67:b1:18:03:08:
8f:d5:e9:dc:34:85:88:04:be:ec:c6:4e:9e:59:a3:
a1:f2:48:56:c4:95:80:8d:e0:d8:c6:0a:d4:6f:6c:
5a:8a:72:d2:0b:77:2a:1f:9c:ae:34:9b:53:64:62:
a7:bd:18:4d:94:62:93:18:c4:a0:8a:f0:de:6a:80:
26:75:d9:7b:04:71:b4:e0:5f:95:a8:11:89:fe:05:
a2:01:5b:ad:ee:cc:0d:6c:2c:79:87:9a:77:09:24:
5e:56:1a:65:db:85:75:8f:4a:6c:8b:82:2e:86:d3:
e3:65:54:79:7d:b2:a9:e9:72:75:99:48:e8:6c:8b:
e0:8c:10:67:3b:fc:bf:3a:d9:98:6b:e5:d6:16:73:
b5:e8:7c:18:00:d8:36:9e:a6:f9:b3:bb:2e:d0:9b:
58:f5:a2:69:ce:97:df:51:cc:ef:99:99:6d:cb:3e:
23:e6:2c:48:f9:2f:da:f5:88:1e:42:45:35:10:f0:
7a:58:99:62:fc:f9:d2:a9:04:d6:fa:77:29:31:ff:
8a:d1:87:4f:22:09:d8:2c:0f:4a:01:59:59:fe:fd:
69:60:0f:66:cb:18:7d:3c:0a:cb:76:c5:62:51:c2:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:A5:F4:E1:20:CF:E8:29:CE:B1:76:DD:11:8F:7E:F0:56:23:12
X509v3 Authority Key Identifier:
keyid:C8:00:3C:97:96:03:F7:CE:A1:2A:CA:01:EB:C2:05:7C:36:FD:7F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAA8l5YD986hKsoB68IFfDb9fzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/03ca01-b959-41a6-8133-07228812d017/1/yAA8l5YD986hKsoB68IFfDb9fzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b6:ee:bf:e9:31:f1:bc:5a:03:61:c9:0c:16:13:9e:ec:6d:
ea:cf:01:c2:d4:0a:d9:d2:e8:73:9e:b9:55:77:f0:31:c7:7e:
e6:62:20:5b:80:5b:36:3e:13:af:ba:4f:23:93:f1:23:49:3f:
7e:cf:10:13:14:57:9e:4b:12:ac:89:4d:33:e3:fc:12:4c:ef:
2f:a9:76:3c:a6:76:3a:71:10:49:ab:92:0e:dd:7b:35:f6:6e:
8b:3f:80:92:4a:a7:51:0d:06:92:81:91:4d:d8:4c:7d:d5:8e:
64:30:ed:f1:6c:01:12:2a:4f:be:c5:b9:7c:ca:3d:7b:aa:3f:
87:b0:45:99:2c:ee:cf:f8:9a:66:af:94:53:75:d4:e9:b4:4b:
5e:6e:42:6f:38:bc:4b:01:43:bf:c1:1a:84:03:d2:c4:f4:dc:
18:de:bd:2f:6a:53:33:a2:ae:d6:e0:c2:ad:3d:80:1a:e8:98:
b2:47:4d:9b:e5:2c:c9:89:90:21:ca:9a:f9:ca:09:58:88:82:
c4:97:c8:77:62:1b:f1:b6:c3:1f:dc:8a:6c:42:67:46:cc:52:
f0:61:d0:f1:1d:8d:fc:c0:94:c8:9c:5a:66:21:18:1e:ee:66:
60:c5:93:4f:ac:a8:eb:fa:9b:40:96:43:e6:c2:15:35:c5:e7:
55:b2:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:52:05 2026 by rpki-client