Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier: LTlgO8zYQDpIDqhHWsGtk5fzkjsVTN2yXWXEfgcS5gw=
Subject key identifier: 85:17:73:81:23:20:F2:C6:2E:6E:65:0C:CA:4F:AE:D7:2A:9A:B9:87
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 019F940025C692688BB89561D64E4F2CFA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number: 1058
Signing time: Fri 24 Jul 2026 12:01:05 +0000
Manifest this update: Fri 24 Jul 2026 12:01:05 +0000
Manifest next update: Sat 25 Jul 2026 12:01:05 +0000
Files and hashes: 1: 7B9W0clLzsK4p1pr53bEH61EQBg.roa (hash: g9Qq+800T4dGI74x3Nt1LLvxWvY9mzvmzZ74GSFdjw0=)
2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: bSJgzmZasxREbwbKhZRsvlkMaB+nCsaPxto7ENvsugY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:25:c6:92:68:8b:b8:95:61:d6:4e:4f:2c:fa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Jul 24 12:01:05 2026 GMT
Not After : Jul 25 12:01:05 2026 GMT
Subject: CN=851773812320f2c62e6e650cca4faed72a9ab987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:8d:ab:62:f5:fc:b9:9a:73:6e:0b:d0:fa:
25:78:4f:b6:32:e7:27:cc:f8:86:51:eb:fe:9c:d4:
ff:8f:f5:29:9e:19:40:91:e4:e2:48:95:eb:49:61:
0c:9c:ea:3d:c5:4f:de:7f:3d:62:98:7b:e2:6c:55:
a8:06:53:e6:d7:50:40:6f:0d:83:b9:a2:0d:72:13:
19:47:be:df:ca:0d:09:9a:7f:71:82:54:72:8a:ae:
33:11:5a:6a:1d:98:90:77:7c:73:f1:a5:fd:73:0c:
4c:e1:38:fe:12:f8:b2:a1:c2:c2:ee:25:a9:00:46:
16:a6:c6:e3:c0:e8:b5:87:85:92:04:21:59:f0:98:
42:84:1d:24:1a:3f:74:dc:6d:34:a4:14:cd:51:d3:
ef:2f:11:10:e1:4f:b8:88:15:36:ae:d7:f1:6d:a9:
94:d3:af:97:a6:69:59:03:56:6e:7a:47:d9:13:5f:
66:c7:56:67:1e:75:8d:64:49:4e:b1:02:69:f8:c2:
e9:dc:40:96:45:71:09:1a:15:44:65:ed:25:4e:c8:
8c:8c:9e:5b:de:45:bc:ce:23:d8:e2:51:f9:91:11:
5d:60:1d:bf:b6:8d:7d:e9:e0:f4:95:e3:c4:ae:fa:
4b:36:47:da:0e:92:11:0d:0c:1c:68:cb:95:28:27:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:73:81:23:20:F2:C6:2E:6E:65:0C:CA:4F:AE:D7:2A:9A:B9:87
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:c0:80:47:28:f3:eb:bc:0c:99:c1:51:7b:a4:7c:4b:17:
ac:71:b9:58:4f:64:4e:25:ad:19:46:95:e4:3b:9f:90:6c:fa:
36:3a:b2:12:76:67:d6:2e:43:d6:94:76:85:a4:53:86:d8:52:
bf:c7:50:f6:d1:04:5f:02:5a:68:43:76:67:0b:bc:53:f9:e7:
37:c6:53:74:a9:c0:3f:c5:15:0e:b4:f4:79:a8:69:6f:7e:21:
dd:b5:1d:59:2d:99:10:5c:9a:63:68:40:7c:53:7a:b6:07:53:
18:b1:e1:1d:d9:7b:fb:0e:03:ec:d6:ed:73:c9:56:c4:97:36:
db:b2:b3:b0:bd:b6:e4:fd:ae:6c:ed:3d:36:7d:fa:1f:4e:c9:
5b:e6:72:83:a3:05:3a:d1:f6:cf:79:8f:05:99:c9:3e:56:ba:
1e:f8:e5:cd:e6:51:80:e7:b5:3c:42:d5:3d:b8:d2:5a:1d:56:
ca:1f:f0:1c:4e:4d:f1:92:ca:77:4a:92:10:a2:d1:20:94:98:
95:24:4b:8a:ff:3c:04:b4:8f:24:c1:6e:0e:a8:ae:31:c8:bd:
e8:21:b4:58:36:c4:c9:63:cb:04:6c:c7:6f:ee:42:55:2c:8c:
40:ac:f3:64:bc:ae:6a:07:e0:ce:88:83:4a:da:43:f6:83:b2:
6f:da:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:34 2026 by rpki-client