Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json)
Hash identifier: 0TtI+b4afOg6YmMKD5KDXCXS3p0et2DC4sUy2UlwUKU=
Subject key identifier: F5:01:BA:90:A9:F3:8C:FD:CB:56:CA:8B:B6:C3:32:E3:A4:05:77:3A
Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Certificate serial: 019F9135FA3EFD7660CFFE056C3F15781504
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
Manifest number: 0EB9
Signing time: Thu 23 Jul 2026 23:01:01 +0000
Manifest this update: Thu 23 Jul 2026 23:01:01 +0000
Manifest next update: Fri 24 Jul 2026 23:01:01 +0000
Files and hashes: 1: ED9fPzOepDgkuJo-elslIFPUuoE.roa (hash: 6gPQSH/gpSv5/wqic1Y/TmKzEmUsxiYhBSwpI3RrMfE=)
2: xpqqOtgsAXsWWjj58DWw9Ikqzic.roa (hash: XQV7y3FYzj3+Xq+UX0OMewU57UNtc6BiHPtsxX2i26s=)
3: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: xHWhhikK6PaiTNQcHOwPWOHCDlNo7qyR3cT1apSgi4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:fa:3e:fd:76:60:cf:fe:05:6c:3f:15:78:15:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428
Validity
Not Before: Jul 23 23:01:01 2026 GMT
Not After : Jul 24 23:01:01 2026 GMT
Subject: CN=f501ba90a9f38cfdcb56ca8bb6c332e3a405773a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:5f:ad:2b:7b:b4:ac:f8:af:21:40:50:fa:
3f:53:f5:42:e7:2c:fd:33:82:fd:7b:df:d5:b0:93:
cc:b1:57:df:c0:dd:48:e2:00:45:24:ef:fd:6f:ea:
78:b5:73:d1:02:f5:c1:1a:f3:c2:28:8c:ae:e2:c6:
ad:d3:20:38:9c:2a:3d:c8:2a:24:04:3a:05:94:7b:
b2:e8:3f:02:33:92:48:06:00:57:7d:c9:1e:be:ad:
81:0d:7d:e3:3f:57:a4:06:d8:fa:6e:d0:ea:f4:f1:
10:09:1c:fe:d8:f6:39:1e:76:8a:fb:c5:21:bb:e3:
45:ba:40:57:18:5d:41:8a:47:10:88:8d:b4:8f:90:
dc:e9:56:ca:84:94:4d:9d:6c:34:d4:bb:d1:d9:5d:
b6:e4:4b:68:9d:e3:df:64:37:b0:ae:5c:e4:36:f7:
a6:d2:fd:42:11:15:3f:94:5e:69:c4:16:f1:3d:30:
4f:df:37:6a:6b:f6:05:11:e3:bb:e8:1a:ab:3d:94:
cb:ec:ec:91:88:b5:22:fd:57:8a:8b:01:56:ab:b1:
29:01:ee:77:68:ff:bc:f4:18:4f:ee:a3:27:c8:61:
c5:fb:72:3a:2b:52:de:de:05:60:cf:d2:cb:e2:11:
46:99:69:17:57:b1:60:39:6f:84:f0:3f:82:ba:4b:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:BA:90:A9:F3:8C:FD:CB:56:CA:8B:B6:C3:32:E3:A4:05:77:3A
X509v3 Authority Key Identifier:
keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:98:42:cf:e2:b8:6a:79:ed:60:fa:7c:fd:18:d1:c1:86:16:
1a:8d:df:1a:3a:b9:1e:5c:a4:be:f9:0e:79:ea:99:b9:b4:31:
40:e3:56:48:db:69:6c:19:dc:c5:12:2b:aa:35:a7:47:31:1b:
78:2b:74:d8:cc:72:12:ec:e7:d5:57:e8:a2:1c:1d:26:3d:23:
d7:c5:86:fc:58:05:61:e7:db:c3:5a:dc:b4:32:59:77:bd:50:
c2:ab:df:12:06:cb:37:0f:33:89:34:87:a5:d6:81:ca:a3:32:
51:c0:48:5a:7c:86:58:61:47:66:bb:bf:0f:08:6f:fc:e9:52:
8a:3f:77:9f:cc:03:de:80:f9:f4:9b:e8:d2:05:07:10:de:bc:
75:25:d8:78:2c:8c:f0:b8:c8:6a:0e:40:fc:ff:d4:5c:ed:f7:
22:4f:c2:09:e2:83:ff:ae:c6:37:7c:e4:9c:53:fe:5a:a4:e0:
ce:86:bf:2c:1a:5a:92:28:27:59:3e:48:c8:25:9a:21:98:04:
84:d9:2e:4a:1d:51:98:b1:fd:11:51:1c:9d:d3:01:fa:a5:b2:
c5:f9:fd:f6:de:64:38:70:71:4e:68:53:fc:09:69:a4:d6:8d:
40:fb:20:f6:bc:fd:e9:4f:8f:ff:37:8e:f1:04:20:46:ea:a4:
9c:04:49:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNfo+/XZgz/4FbD8VeBUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz
NmM0MjgwHhcNMjYwNzIzMjMwMTAxWhcNMjYwNzI0MjMwMTAxWjAzMTEwLwYDVQQD
EyhmNTAxYmE5MGE5ZjM4Y2ZkY2I1NmNhOGJiNmMzMzJlM2E0MDU3NzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNJfrSt7tKz4ryFAUPo/U/VC5yz9
M4L9e9/VsJPMsVffwN1I4gBFJO/9b+p4tXPRAvXBGvPCKIyu4sat0yA4nCo9yCok
BDoFlHuy6D8CM5JIBgBXfckevq2BDX3jP1ekBtj6btDq9PEQCRz+2PY5HnaK+8Uh
u+NFukBXGF1BikcQiI20j5Dc6VbKhJRNnWw01LvR2V225EtonePfZDewrlzkNvem
0v1CERU/lF5pxBbxPTBP3zdqa/YFEeO76BqrPZTL7OyRiLUi/VeKiwFWq7EpAe53
aP+89BhP7qMnyGHF+3I6K1Le3gVgz9LL4hFGmWkXV7FgOW+E8D+CukuU0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUBupCp84z9y1bKi7bDMuOkBXc6MB8GA1UdIwQY
MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt
N2E0MDU0NTUxZmQ0LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0
LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZhCz+K4
anntYPp8/RjRwYYWGo3fGjq5HlykvvkOeeqZubQxQONWSNtpbBncxRIrqjWnRzEb
eCt02MxyEuzn1VfoohwdJj0j18WG/FgFYefbw1rctDJZd71QwqvfEgbLNw8ziTSH
pdaByqMyUcBIWnyGWGFHZru/Dwhv/OlSij93n8wD3oD59Jvo0gUHEN68dSXYeCyM
8LjIag5A/P/UXO33Ik/CCeKD/67GN3zknFP+WqTgzoa/LBpakignWT5IyCWaIZgE
hNkuSh1RmLH9EVEcndMB+qWyxfn99t5kOHBxTmhT/AlppNaNQPsg9rz96U+P/zeO
8QQgRuqknARJNQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:38:54 2026 by rpki-client