Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: w7OphXxvktXQIXJWw5dIA0zhjAKsoVN13u5KCtij/vc=
Subject key identifier: 09:A4:81:1D:9C:AB:F5:91:05:7B:C4:4F:63:2E:2E:C6:F5:50:B0:05
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019F939247961BD3362F9C00F08F1E83BF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 1001
Signing time: Fri 24 Jul 2026 10:01:04 +0000
Manifest this update: Fri 24 Jul 2026 10:01:04 +0000
Manifest next update: Sat 25 Jul 2026 10:01:04 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: DAHRhK+pdUbmukuCNk26RnOcCdaQEj0te+l9GJsaL3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:47:96:1b:d3:36:2f:9c:00:f0:8f:1e:83:bf:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Jul 24 10:01:04 2026 GMT
Not After : Jul 25 10:01:04 2026 GMT
Subject: CN=09a4811d9cabf591057bc44f632e2ec6f550b005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:8f:8f:af:ec:0d:33:9a:e5:02:f2:25:0c:
f0:1f:13:9e:f0:fe:46:6e:57:d4:76:53:c5:99:f7:
0d:f7:a9:5d:06:9f:9d:7d:ca:6a:45:25:76:9d:fe:
e0:11:cf:55:f5:0f:fd:db:86:93:cc:52:7d:c9:2e:
93:5a:7d:d6:e5:a6:6c:cf:04:4b:fc:6b:f2:4f:ad:
66:62:05:44:39:62:91:b4:d6:11:d0:bb:18:dc:52:
dc:fd:bf:a3:47:56:73:52:ba:b5:24:f6:39:1b:e3:
15:bd:f7:32:bd:fc:ec:32:31:20:64:c9:40:45:25:
49:e2:58:aa:3a:b9:06:bd:e6:29:a4:68:f8:a3:8c:
f7:33:53:c7:c6:1c:7a:02:fa:d5:26:a9:ab:0d:70:
a7:1a:31:03:0f:67:97:50:1d:06:7a:1e:50:5f:81:
a4:bc:f8:b8:bd:d3:bb:29:00:54:f5:67:6c:c1:17:
e3:af:0e:3c:03:a9:31:a4:43:60:f9:58:00:f3:ac:
98:53:33:dc:5e:57:14:7b:42:f5:ea:d2:ba:d7:4d:
40:3b:2e:2a:b4:81:64:1b:ed:0d:dd:f2:4e:3b:ba:
0b:e9:36:a5:91:a8:01:fe:b7:6e:de:6b:a7:c8:48:
a7:78:46:d7:f3:f5:ca:b6:8f:fe:22:6b:0b:f4:bf:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A4:81:1D:9C:AB:F5:91:05:7B:C4:4F:63:2E:2E:C6:F5:50:B0:05
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a9:07:b9:a4:66:15:47:bc:fa:35:f1:c0:77:92:f7:9e:cf:
70:b3:68:a5:6a:61:8d:0e:fe:a2:9e:93:41:c3:8d:95:14:cc:
5f:1d:cb:61:27:68:6d:7f:8d:37:97:cc:9d:ec:4c:3a:a9:29:
5d:44:af:9e:60:c5:0b:d1:d8:97:66:1f:3c:93:f5:ac:08:41:
71:4e:0c:c4:bf:2e:7f:93:f0:d3:e7:54:ec:9d:85:57:53:c4:
91:da:66:87:42:4a:f0:32:44:c2:65:5e:c8:9c:d8:d9:6c:d2:
aa:1a:d6:05:f6:00:e5:7d:44:4a:41:34:c1:47:0d:4b:b1:c6:
e8:82:1a:f2:62:ab:b6:94:a0:84:af:ed:aa:5e:10:6d:b8:72:
4f:4d:78:1f:b7:bd:eb:d5:62:fb:51:96:ad:80:11:5a:52:21:
e3:0e:e3:3d:73:a5:be:0e:d1:b1:45:e4:eb:a0:b9:12:8d:2f:
0d:20:6c:3e:40:74:0b:1b:02:a8:9b:24:e5:14:00:6c:a5:0b:
92:49:f5:56:36:28:9d:20:39:a2:39:a7:8d:03:6b:9f:f4:87:
46:2a:9a:42:93:70:2f:e3:04:89:f9:67:db:26:09:ca:0d:96:
77:8a:9a:89:82:97:3f:f1:bf:07:9e:95:b9:82:db:14:e7:ab:
dc:e1:6a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkkeWG9M2L5wA8I8eg7+JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiOTg5ZDJlMTUyMDFiMjBlMzQwODhkZDFjMDQ1NWIyNTQ0
NGY4ZmMwHhcNMjYwNzI0MTAwMTA0WhcNMjYwNzI1MTAwMTA0WjAzMTEwLwYDVQQD
EygwOWE0ODExZDljYWJmNTkxMDU3YmM0NGY2MzJlMmVjNmY1NTBiMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS+Pj6/sDTOa5QLyJQzwHxOe8P5G
blfUdlPFmfcN96ldBp+dfcpqRSV2nf7gEc9V9Q/924aTzFJ9yS6TWn3W5aZszwRL
/GvyT61mYgVEOWKRtNYR0LsY3FLc/b+jR1ZzUrq1JPY5G+MVvfcyvfzsMjEgZMlA
RSVJ4liqOrkGveYppGj4o4z3M1PHxhx6AvrVJqmrDXCnGjEDD2eXUB0Geh5QX4Gk
vPi4vdO7KQBU9WdswRfjrw48A6kxpENg+VgA86yYUzPcXlcUe0L16tK6101AOy4q
tIFkG+0N3fJOO7oL6TalkagB/rdu3munyEineEbX8/XKto/+ImsL9L8FhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmkgR2cq/WRBXvET2MuLsb1ULAFMB8GA1UdIwQY
MBaAFMuYnS4VIBsg40CI3RwEVbJURPj8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEt
MzY5MjYzNDQzMDI1LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iZTU2ZDQtOGRlNi00NGEyLTk2OTEtMzY5MjYzNDQzMDI1
LzEveTVpZExoVWdHeURqUUlqZEhBUlZzbFJFLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6kHuaRm
FUe8+jXxwHeS957PcLNopWphjQ7+op6TQcONlRTMXx3LYSdobX+NN5fMnexMOqkp
XUSvnmDFC9HYl2YfPJP1rAhBcU4MxL8uf5Pw0+dU7J2FV1PEkdpmh0JK8DJEwmVe
yJzY2WzSqhrWBfYA5X1ESkE0wUcNS7HG6IIa8mKrtpSghK/tql4QbbhyT014H7e9
69Vi+1GWrYARWlIh4w7jPXOlvg7RsUXk66C5Eo0vDSBsPkB0CxsCqJsk5RQAbKUL
kkn1VjYonSA5ojmnjQNrn/SHRiqaQpNwL+MEifln2yYJyg2Wd4qaiYKXP/G/B56V
uYLbFOer3OFqjQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:12:55 2026 by rpki-client