Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: l2zm433/8HR1eLIJC9au9HyJ7QheGHgJonUIp3b9WuU=
Subject key identifier: 55:0B:4B:03:2B:78:34:A3:49:0F:B2:CD:EB:5A:71:EF:CC:44:93:FF
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019F9211A581BE443F0D4BCFF95FB6814C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 100A
Signing time: Fri 24 Jul 2026 03:00:57 +0000
Manifest this update: Fri 24 Jul 2026 03:00:57 +0000
Manifest next update: Sat 25 Jul 2026 03:00:57 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: JjXlnp9ua0w3+s5kh+YT8ITnxNv6Hb7+vnOp+Psd2eA=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:a5:81:be:44:3f:0d:4b:cf:f9:5f:b6:81:4c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Jul 24 03:00:57 2026 GMT
Not After : Jul 25 03:00:57 2026 GMT
Subject: CN=550b4b032b7834a3490fb2cdeb5a71efcc4493ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:74:ca:35:2c:b2:d1:38:f9:e6:52:da:3d:
9d:bf:a3:e9:bb:97:28:11:9b:36:bc:c4:66:fa:45:
7e:75:8f:b6:95:b7:1b:06:18:36:e7:3a:81:fa:74:
78:3e:19:ea:b5:6d:15:b8:d5:ad:1e:d7:b0:c3:41:
55:91:d1:85:a7:11:f4:6f:26:2a:3c:76:49:93:50:
56:f8:a1:9b:ad:aa:39:ca:dc:f6:aa:64:37:78:55:
2a:30:69:5a:70:c3:3b:54:c0:14:3c:5d:41:42:db:
77:b7:07:ac:68:7d:a8:20:f2:1d:f8:25:d1:65:01:
cc:36:fe:5b:d2:ae:95:d1:54:b1:34:6b:b1:dc:44:
c7:92:f9:a1:05:e4:df:30:29:5b:10:f8:8a:99:bd:
66:5e:f6:a5:f2:64:b4:83:c2:04:82:75:e5:7c:ec:
b3:38:8a:dc:bc:8e:6d:93:90:19:5c:fb:c3:e2:1a:
18:79:c6:8c:b4:f5:e4:49:5c:fd:2a:5b:d5:da:4d:
69:1d:5f:9b:2e:cf:66:9c:f4:b1:d8:81:09:3f:b0:
37:18:bd:f5:4f:f2:87:06:88:af:31:10:ac:c4:7a:
a1:0b:fe:3f:cf:8d:a5:35:2f:05:b3:7d:23:d2:7c:
e7:bf:c1:b8:3e:73:61:e9:09:9b:76:8d:80:47:bc:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0B:4B:03:2B:78:34:A3:49:0F:B2:CD:EB:5A:71:EF:CC:44:93:FF
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2f:b2:e8:bd:fb:d8:ff:a6:e3:d6:52:87:1a:c8:27:34:43:
41:90:26:32:e5:b9:8f:89:78:34:7c:b9:48:9e:fe:43:cb:29:
a1:48:b9:45:27:81:9e:ec:a9:e6:54:8c:81:c0:ef:de:b3:5d:
db:23:05:86:ef:a9:ad:de:b2:0b:ad:34:e1:12:22:f8:9d:47:
7d:b7:da:70:c7:5b:62:af:2f:40:18:c9:e2:78:9b:bd:ce:dc:
f8:37:50:96:f2:b5:07:c6:16:61:a5:53:de:29:8c:a6:60:85:
0a:b5:2e:d6:d3:af:93:b5:e9:93:50:37:50:19:f0:e8:4d:62:
30:80:3e:b0:f3:39:de:b8:44:1c:45:82:13:85:24:cc:2f:99:
d0:62:70:33:3a:65:dd:fe:7b:62:bd:d9:cc:45:fa:25:79:54:
bf:cd:0e:4f:10:22:5a:50:b9:6b:d1:28:5b:d0:8d:7c:43:7a:
c8:70:4d:0d:d5:8f:70:ba:6e:5c:03:fd:ab:d4:95:42:7a:8b:
04:52:f1:15:c1:2b:c3:b4:cf:11:c9:8b:37:59:60:01:e2:6c:
f1:87:2d:fc:3b:14:fc:e0:2d:b1:05:63:88:b5:57:a3:f5:89:
91:2b:4a:eb:b2:55:9c:c6:12:83:66:15:af:8a:65:1e:fa:e5:
fc:e9:59:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEaWBvkQ/DUvP+V+2gUwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5N2VkY2VkZWMzMjU0YjM1N2IwOTYxNWEwMmIxNmUwNmVi
ZTYzZWIwHhcNMjYwNzI0MDMwMDU3WhcNMjYwNzI1MDMwMDU3WjAzMTEwLwYDVQQD
Eyg1NTBiNGIwMzJiNzgzNGEzNDkwZmIyY2RlYjVhNzFlZmNjNDQ5M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssF0yjUsstE4+eZS2j2dv6Ppu5co
EZs2vMRm+kV+dY+2lbcbBhg25zqB+nR4PhnqtW0VuNWtHteww0FVkdGFpxH0byYq
PHZJk1BW+KGbrao5ytz2qmQ3eFUqMGlacMM7VMAUPF1BQtt3twesaH2oIPId+CXR
ZQHMNv5b0q6V0VSxNGux3ETHkvmhBeTfMClbEPiKmb1mXval8mS0g8IEgnXlfOyz
OIrcvI5tk5AZXPvD4hoYecaMtPXkSVz9KlvV2k1pHV+bLs9mnPSx2IEJP7A3GL31
T/KHBoivMRCsxHqhC/4/z42lNS8Fs30j0nznv8G4PnNh6Qmbdo2AR7wC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFULSwMreDSjSQ+yzetace/MRJP/MB8GA1UdIwQY
MBaAFMl+3O3sMlSzV7CWFaArFuBuvmPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgt
MzIzOWE4MWM5ZmM4LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9lZmQyODItMzNiMi00MzczLTk5NDgtMzIzOWE4MWM5ZmM4
LzEveVg3Yzdld3lWTE5Yc0pZVm9Dc1c0RzYtWS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATi+y6L37
2P+m49ZShxrIJzRDQZAmMuW5j4l4NHy5SJ7+Q8spoUi5RSeBnuyp5lSMgcDv3rNd
2yMFhu+prd6yC6004RIi+J1HfbfacMdbYq8vQBjJ4nibvc7c+DdQlvK1B8YWYaVT
3imMpmCFCrUu1tOvk7Xpk1A3UBnw6E1iMIA+sPM53rhEHEWCE4UkzC+Z0GJwMzpl
3f57Yr3ZzEX6JXlUv80OTxAiWlC5a9EoW9CNfEN6yHBNDdWPcLpuXAP9q9SVQnqL
BFLxFcErw7TPEcmLN1lgAeJs8Yct/DsU/OAtsQVjiLVXo/WJkStK67JVnMYSg2YV
r4plHvrl/OlZTw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:30 2026 by rpki-client