Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
File: yzAqJzq07yWo6pGko3ebz30d5Zs.mft (raw, json)
Hash identifier: hCLoc7Su8nWBBPoEc2WLXRrDDxLwNqSMZu01VZz2S50=
Subject key identifier: 3C:90:8E:44:D5:9D:67:8C:FA:1C:DE:1C:2B:F8:1C:C6:3C:03:97:C8
Authority key identifier: CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
Certificate issuer: /CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Certificate serial: 019F954A3F69D58326122AAC685ED1A3A9EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
Manifest number: 1157
Signing time: Fri 24 Jul 2026 18:01:38 +0000
Manifest this update: Fri 24 Jul 2026 18:01:38 +0000
Manifest next update: Sat 25 Jul 2026 18:01:38 +0000
Files and hashes: 1: pkANJWQGRxeYUhe9QHaxt_kkCZ0.roa (hash: JQPpr1NgeNVkQnAHd4pZVUEgVBBePxibUcmbvm5s/ds=)
2: yzAqJzq07yWo6pGko3ebz30d5Zs.crl (hash: 1SGbYQwUaHWKzH0XBbkV/iy3ToOnwl12wElr15lEG2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:3f:69:d5:83:26:12:2a:ac:68:5e:d1:a3:a9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb302a273ab4ef25a8ea91a4a3779bcf7d1de59b
Validity
Not Before: Jul 24 18:01:38 2026 GMT
Not After : Jul 25 18:01:38 2026 GMT
Subject: CN=3c908e44d59d678cfa1cde1c2bf81cc63c0397c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:cb:5b:da:e4:26:27:81:88:94:9d:40:92:
38:fc:9b:a4:d8:a3:31:3f:62:4b:86:cb:90:df:a8:
e3:cd:e7:6b:f2:59:73:a6:7b:62:c8:21:db:72:ea:
b9:58:2b:3c:ef:0e:ef:2e:27:7c:58:9a:28:4a:d3:
91:5f:1a:50:04:a0:b4:38:82:78:96:e6:29:9a:6c:
cb:f3:34:6f:70:bf:59:0b:20:e8:7f:e0:3f:44:63:
6a:62:66:4b:ff:b4:3b:6f:22:88:40:4b:61:a3:52:
06:1c:10:c5:bc:86:4c:e7:1e:6b:87:9d:6f:fb:9b:
10:85:5c:b4:46:24:4e:b1:40:6b:41:22:56:83:8d:
5e:f7:26:fe:c1:33:c9:93:8c:07:2c:e7:61:35:9c:
24:95:80:8d:88:68:19:c1:9e:24:35:b4:7f:d8:10:
6e:42:19:73:82:3f:32:39:d7:ab:86:f7:63:62:08:
ca:61:7e:98:1c:1e:0a:95:94:82:23:f1:4b:38:cc:
79:e5:25:be:19:27:7e:3a:03:4f:b9:d7:b0:e8:7e:
a2:09:b7:23:11:d8:68:da:f5:4a:6e:df:61:8a:9e:
4b:fc:e0:be:d7:91:c6:18:d0:e0:f5:50:61:f2:33:
75:2d:8d:53:ce:09:cb:4a:e6:51:68:9d:d4:b5:0a:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:8E:44:D5:9D:67:8C:FA:1C:DE:1C:2B:F8:1C:C6:3C:03:97:C8
X509v3 Authority Key Identifier:
keyid:CB:30:2A:27:3A:B4:EF:25:A8:EA:91:A4:A3:77:9B:CF:7D:1D:E5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzAqJzq07yWo6pGko3ebz30d5Zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/977ddb-3095-488d-b36b-8008d1e7c38c/1/yzAqJzq07yWo6pGko3ebz30d5Zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:85:34:eb:ac:02:f2:92:e2:12:36:ef:56:a7:71:18:02:e3:
a6:4d:bc:d3:6b:0f:3f:54:53:8b:f2:06:3c:30:5c:ba:c7:94:
3d:7c:85:b8:a7:9a:4c:84:49:25:de:58:52:cc:77:34:0a:7f:
e6:cc:d5:4e:85:86:9d:dd:97:5e:c1:cf:6f:af:32:97:68:91:
c9:f1:e0:4f:17:60:36:38:33:a6:88:7e:32:f4:ad:ec:b9:7f:
8a:a5:e4:ae:21:0f:0a:20:16:91:ea:d1:00:55:8c:94:08:87:
51:5a:8e:2b:14:89:48:5a:66:7f:5c:8b:10:7c:e9:d6:ab:41:
2d:b0:a2:31:64:3d:7b:cb:be:6d:75:a6:24:cf:25:6f:be:f3:
3c:83:6c:c5:b3:95:27:67:ce:fb:2d:a7:89:d8:d8:2c:ed:b0:
78:40:37:2b:18:ad:fb:48:9c:d2:c1:e8:66:42:00:d2:9d:e7:
f7:34:0b:35:68:a7:dd:32:ed:bd:f2:30:31:1f:d3:23:9d:ec:
52:32:82:42:71:68:ac:58:2a:d9:28:ca:69:40:c8:7a:da:09:
ec:a6:0d:a6:72:09:cc:79:11:77:62:80:ab:ce:49:9d:14:ab:
b0:1a:aa:e3:80:ed:25:bf:5c:bd:b6:b7:fc:de:38:7b:08:e7:
72:d9:c7:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSj9p1YMmEiqsaF7Ro6nrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzAyYTI3M2FiNGVmMjVhOGVhOTFhNGEzNzc5YmNmN2Qx
ZGU1OWIwHhcNMjYwNzI0MTgwMTM4WhcNMjYwNzI1MTgwMTM4WjAzMTEwLwYDVQQD
EygzYzkwOGU0NGQ1OWQ2NzhjZmExY2RlMWMyYmY4MWNjNjNjMDM5N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g3LW9rkJieBiJSdQJI4/Juk2KMx
P2JLhsuQ36jjzedr8llzpntiyCHbcuq5WCs87w7vLid8WJooStORXxpQBKC0OIJ4
luYpmmzL8zRvcL9ZCyDof+A/RGNqYmZL/7Q7byKIQEtho1IGHBDFvIZM5x5rh51v
+5sQhVy0RiROsUBrQSJWg41e9yb+wTPJk4wHLOdhNZwklYCNiGgZwZ4kNbR/2BBu
Qhlzgj8yOderhvdjYgjKYX6YHB4KlZSCI/FLOMx55SW+GSd+OgNPudew6H6iCbcj
Edho2vVKbt9hip5L/OC+15HGGNDg9VBh8jN1LY1TzgnLSuZRaJ3UtQp0MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyQjkTVnWeM+hzeHCv4HMY8A5fIMB8GA1UdIwQY
MBaAFMswKic6tO8lqOqRpKN3m899HeWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmIt
ODAwOGQxZTdjMzhjLzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85NzdkZGItMzA5NS00ODhkLWIzNmItODAwOGQxZTdjMzhj
LzEveXpBcUp6cTA3eVdvNnBHa28zZWJ6MzBkNVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIU066wC
8pLiEjbvVqdxGALjpk2802sPP1RTi/IGPDBcuseUPXyFuKeaTIRJJd5YUsx3NAp/
5szVToWGnd2XXsHPb68yl2iRyfHgTxdgNjgzpoh+MvSt7Ll/iqXkriEPCiAWkerR
AFWMlAiHUVqOKxSJSFpmf1yLEHzp1qtBLbCiMWQ9e8u+bXWmJM8lb77zPINsxbOV
J2fO+y2nidjYLO2weEA3Kxit+0ic0sHoZkIA0p3n9zQLNWin3TLtvfIwMR/TI53s
UjKCQnForFgq2SjKaUDIetoJ7KYNpnIJzHkRd2KAq85JnRSrsBqq44DtJb9cvba3
/N44ewjnctnHMA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:34 2026 by rpki-client