Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
File: yoFg7-OfGjB3_dL68ipkgEtUE4I.mft (raw, json)
Hash identifier: 0PWipICdhbcW1MLj4iBN/4sLs2k2O5YU7kaLAuyutH8=
Subject key identifier: 04:00:BF:C7:D4:1E:5C:03:BC:64:DB:BC:26:5C:E5:90:AE:77:01:7E
Authority key identifier: CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
Certificate issuer: /CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Certificate serial: 019F91DA311453516CE36FD64742BCCE1316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
Manifest number: 1667
Signing time: Fri 24 Jul 2026 02:00:23 +0000
Manifest this update: Fri 24 Jul 2026 02:00:23 +0000
Manifest next update: Sat 25 Jul 2026 02:00:23 +0000
Files and hashes: 1: c09YJVIz1gAeeersG-N_XV14zPo.roa (hash: A4WIJzWdDctFX+Ynr5FMyCdWVozIwFvvlX52iKZ/Phw=)
2: yoFg7-OfGjB3_dL68ipkgEtUE4I.crl (hash: x40DO6zkXkh0r0J5GvTvyBPx5ATrhDjnrCvMn+fnfnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:31:14:53:51:6c:e3:6f:d6:47:42:bc:ce:13:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca8160efe39f1a3077fdd2faf22a64804b541382
Validity
Not Before: Jul 24 02:00:23 2026 GMT
Not After : Jul 25 02:00:23 2026 GMT
Subject: CN=0400bfc7d41e5c03bc64dbbc265ce590ae77017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:90:09:f0:6f:00:90:a8:68:58:9d:8b:1e:
d0:89:6a:6e:9d:26:5b:8e:12:8f:d2:5d:2b:0c:f9:
01:8c:a3:4e:3e:b8:41:05:d8:e3:9c:57:a5:41:6d:
bd:48:f0:cd:92:ed:87:87:2b:48:6a:cd:e9:37:2e:
ce:79:06:9b:68:74:41:25:38:6e:0b:25:69:ab:0f:
d4:f4:a5:7b:2e:fc:cf:de:e9:8a:9a:f3:dd:18:d0:
b7:62:0b:fd:ba:1d:c1:25:4e:da:17:e3:65:87:98:
ab:69:d5:63:e1:a4:43:45:08:84:df:4f:00:76:48:
89:78:fc:df:fc:bd:0a:05:bc:c4:06:8a:85:c4:75:
3a:f8:c8:e2:ae:76:14:9f:d9:b9:55:f9:53:86:84:
b1:04:bc:d4:05:2a:47:9e:40:15:29:4e:c0:6b:91:
0d:68:2a:3f:93:30:65:e7:f7:59:6d:af:af:c0:dc:
5a:c4:bf:51:73:19:a4:67:dc:b0:75:fa:bc:f4:45:
54:7f:da:be:6a:5c:d4:6b:05:39:82:18:da:86:8e:
e8:15:e2:93:9a:fc:05:1d:15:eb:c2:72:f0:3e:64:
b8:38:65:b0:61:be:43:44:21:bf:7f:63:59:ac:56:
4a:e4:4d:1a:29:76:8f:10:7e:05:ac:91:81:94:4c:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:BF:C7:D4:1E:5C:03:BC:64:DB:BC:26:5C:E5:90:AE:77:01:7E
X509v3 Authority Key Identifier:
keyid:CA:81:60:EF:E3:9F:1A:30:77:FD:D2:FA:F2:2A:64:80:4B:54:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yoFg7-OfGjB3_dL68ipkgEtUE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d25015-7d24-4ad5-a2c1-ac4e28c2c5b6/1/yoFg7-OfGjB3_dL68ipkgEtUE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b6:97:5f:0f:e3:b2:2b:8a:3f:d4:aa:4b:3f:00:5a:2c:2f:
18:79:7b:33:fe:12:c4:fd:14:20:f8:fc:98:1d:8f:75:cc:44:
b6:76:5e:e1:f3:1d:cc:77:7b:3a:c6:70:cf:a7:79:3b:73:2e:
d5:33:b6:76:95:ef:7d:b7:10:a8:b2:ff:5b:69:a6:3d:cb:f4:
cd:c0:05:61:b3:42:d4:2b:fa:b2:ec:09:6e:c0:e5:0f:d1:f6:
94:91:9d:c6:bf:34:66:84:8d:c0:c5:9f:a3:46:f1:bd:eb:04:
f3:8a:a2:24:2e:e8:c2:9a:20:f8:3c:88:09:3b:e9:68:38:3e:
22:e2:a2:17:80:c2:55:15:9c:3f:e0:84:05:da:96:92:6b:8e:
92:40:f1:49:22:19:64:97:39:32:68:59:a3:a4:bf:2c:f0:c1:
bb:9b:3a:b8:9e:c8:d9:c2:f9:a4:1f:ea:6f:4e:f0:1b:d4:3b:
b0:e6:e8:de:94:e5:ba:41:d4:a2:84:8f:a8:2d:4f:ea:5b:8a:
72:6f:f2:1d:bb:77:80:6b:c3:f8:b6:0e:00:ba:99:02:fc:0e:
92:b7:2b:f7:23:84:e7:ea:05:a3:ba:16:e2:4c:68:66:0c:70:
cd:9d:89:4a:b0:74:f6:d0:7f:37:be:eb:dc:cf:bf:f9:f4:1d:
f7:83:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:21 2026 by rpki-client