Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
File: yIYjh23RrY5iSiPdUossZMgKhSE.mft (raw, json)
Hash identifier: rmDA/oTt/jipcjvAMSqLktgxTMDkI2vrLHhwNB3eKFA=
Subject key identifier: A7:F2:6D:C9:E6:B4:35:24:4D:49:2E:E6:00:95:DE:D5:CD:10:DC:B2
Authority key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Certificate issuer: /CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Certificate serial: 019F935B3C941ED96FFE2EFA82666EC1852C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
Manifest number: 08E9
Signing time: Fri 24 Jul 2026 09:00:57 +0000
Manifest this update: Fri 24 Jul 2026 09:00:57 +0000
Manifest next update: Sat 25 Jul 2026 09:00:57 +0000
Files and hashes: 1: h1IcZRGY_rRXRhpZWTLbtpzh9tM.roa (hash: L8O1+G2QnBwVNFEY7LCl7zf6sGt3HNSfVfaE38wa8Uo=)
2: yIYjh23RrY5iSiPdUossZMgKhSE.crl (hash: vo8tGff/0s9OtKwZdN19ilTN/nHlII7c3wdu3aJyo14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:3c:94:1e:d9:6f:fe:2e:fa:82:66:6e:c1:85:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Validity
Not Before: Jul 24 09:00:57 2026 GMT
Not After : Jul 25 09:00:57 2026 GMT
Subject: CN=a7f26dc9e6b435244d492ee60095ded5cd10dcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:72:26:a7:33:87:82:b7:49:b3:a5:b9:c7:
fb:3e:fe:4b:b2:20:f4:6d:6a:dc:66:d9:58:1c:84:
a0:b2:65:5d:09:c0:fa:4c:7f:ac:b1:e6:61:04:1f:
27:50:aa:3e:c3:aa:ce:5a:aa:d3:8a:e3:6b:9b:f9:
24:32:db:30:ec:79:b3:aa:af:09:1e:b8:66:8e:0f:
da:3e:c2:c7:cc:4f:e5:5c:19:90:36:04:eb:48:8e:
8a:be:e7:ca:80:3e:ca:0d:7a:c7:23:7e:df:a6:99:
3a:64:fb:7f:ec:67:8f:5b:20:50:42:3b:c5:88:30:
be:ef:fd:e1:d6:4e:f8:c8:78:ff:6a:f5:1d:eb:06:
a3:30:85:e3:7c:f8:41:62:4c:a9:70:01:5c:f2:23:
b2:a4:cd:1b:37:f7:4c:92:32:8e:71:10:39:2f:92:
0a:9f:97:fb:82:a5:2d:ca:e7:c9:11:fd:a7:ac:91:
2c:a1:7b:af:88:5a:f3:fd:58:e4:e2:05:f1:e5:7f:
a9:3d:7d:16:21:6b:a3:2a:c9:c4:3c:e0:04:b0:a2:
38:a8:39:97:99:0b:5c:03:07:c4:e7:73:b5:55:54:
94:d2:b3:84:99:05:53:58:11:9b:e3:5f:c8:c2:82:
ce:f9:d0:70:81:7f:af:b8:9c:83:f1:66:c4:2e:23:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:6D:C9:E6:B4:35:24:4D:49:2E:E6:00:95:DE:D5:CD:10:DC:B2
X509v3 Authority Key Identifier:
keyid:C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cb:81:1f:aa:5e:45:74:f0:d7:bb:22:ae:b1:06:26:52:5a:
b5:dd:e4:bd:2f:d2:71:88:24:62:a4:91:a2:cb:b6:23:d0:c9:
03:36:e7:a4:fb:4e:65:13:bb:ba:e5:45:80:6a:88:bf:0b:bb:
83:d3:af:6a:05:8f:81:b3:d4:1f:74:8e:2c:ed:22:65:04:ae:
e6:99:c4:d3:e7:df:8e:62:3c:03:d8:e6:b9:a4:a0:e9:7c:ea:
fe:2f:80:a4:d6:aa:dd:70:4b:28:b0:d0:c4:f2:de:a1:f3:78:
d4:9c:81:c9:1e:b7:9b:a4:46:31:a9:0d:a1:4b:af:06:5a:1b:
85:90:55:f4:80:c2:15:55:f6:cc:74:8a:80:85:ed:a9:96:bf:
eb:b3:d3:7d:98:4e:94:ad:89:65:ef:f6:e9:40:f6:42:4a:cd:
4b:e1:8f:6a:dd:92:34:59:8e:93:e0:5f:42:9e:1d:ad:68:0a:
92:b4:d7:6b:22:b0:d1:92:99:80:f0:05:4a:5e:60:0e:7e:63:
71:90:9d:82:94:ce:b1:ab:ee:45:96:90:0b:8b:6b:5e:a0:1d:
69:47:ac:06:c9:82:82:a0:6d:f0:5d:01:54:78:13:76:a9:d7:
22:51:3c:55:ed:89:9f:32:7f:60:6e:60:8d:ff:85:fe:86:86:
b9:e1:23:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:47:51 2026 by rpki-client