Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: 07HFpDlgEG6kdlylVsH2MeV3YgFRIeixXBJWm7AevpM=
Subject key identifier: 24:50:28:DC:52:24:C1:28:86:35:E6:36:1D:42:1F:88:68:9D:58:BC
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 019F93FF6EBFF701F9B785135184DB9FE1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 180F
Signing time: Fri 24 Jul 2026 12:00:18 +0000
Manifest this update: Fri 24 Jul 2026 12:00:18 +0000
Manifest next update: Sat 25 Jul 2026 12:00:18 +0000
Files and hashes: 1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: tcr8msY7gCbrP97h2Uq0gTExdoGCa/IWhKMYZoKIjnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:6e:bf:f7:01:f9:b7:85:13:51:84:db:9f:e1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Jul 24 12:00:18 2026 GMT
Not After : Jul 25 12:00:18 2026 GMT
Subject: CN=245028dc5224c1288635e6361d421f88689d58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:40:07:14:fa:16:00:97:9e:71:b9:86:50:
d1:18:2b:65:44:54:b6:47:a6:66:37:38:52:a3:71:
5a:30:24:97:69:b9:96:17:ca:8b:fc:fe:b4:28:2b:
3e:ce:2c:da:84:e1:d5:a9:2d:24:57:b3:7d:df:06:
b9:82:85:80:f0:4e:f0:f8:ca:3f:08:31:82:31:bd:
9b:73:12:6a:0b:22:2d:33:c6:c0:0e:ce:b1:7f:21:
56:b2:7d:92:5c:6a:ac:60:06:6a:02:f8:bf:2c:5d:
3f:d6:59:8b:10:69:9c:bb:58:53:1d:c2:a8:bc:db:
84:5a:65:68:24:8c:b7:11:39:2d:69:f1:b8:d1:ae:
0b:a3:84:18:3f:c4:f9:aa:2e:76:50:2f:10:aa:8c:
1b:33:2e:e5:f8:27:a6:3a:33:e6:50:93:3b:bf:83:
22:b4:6c:e6:bb:0a:f5:8b:b3:14:41:65:88:03:14:
7d:9d:8e:09:dc:8b:9e:a9:34:87:ee:88:e7:99:05:
19:8d:6d:43:7f:a4:61:5e:1b:aa:f5:e6:7c:31:28:
e0:98:74:3c:b2:85:bf:2a:a1:e7:a3:73:16:95:4e:
71:88:4b:07:bd:5b:b7:8a:cc:0a:86:b0:6c:3b:36:
18:fb:75:dc:fd:41:33:56:6e:fb:6d:af:b5:b2:fa:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:28:DC:52:24:C1:28:86:35:E6:36:1D:42:1F:88:68:9D:58:BC
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4b:6b:e4:a1:97:d0:01:37:c3:10:6f:7b:08:bc:75:45:eb:
dd:7e:25:43:94:d6:99:9f:88:f4:22:13:10:f6:68:cf:00:d8:
e1:3b:fe:b0:53:55:9b:8e:de:75:06:5b:d8:32:3e:b0:3b:13:
62:c2:40:32:2c:1d:86:ff:0b:6a:3e:57:a8:6f:8d:6b:d8:ac:
de:b5:a1:03:f9:de:b8:68:0c:ca:8d:db:5a:53:f7:57:96:02:
a9:81:5b:cb:9a:18:2e:cd:97:b3:ec:4d:78:58:2d:48:32:13:
5a:12:af:d3:eb:0d:2a:6f:b1:b3:e4:21:cc:6a:0d:b7:14:e3:
83:89:c0:59:31:70:fa:09:0d:36:85:29:d5:2b:42:11:d7:c8:
de:a7:e5:a1:99:e3:a1:4f:f7:44:fc:c7:2d:78:40:c7:3b:2f:
ec:25:77:a0:6b:82:80:91:93:ab:cb:98:95:55:e5:45:b0:bb:
64:5f:d3:8f:e6:ac:b3:b0:da:d2:ff:3d:f5:a4:d7:57:e5:8b:
3c:77:db:3b:62:35:99:f0:56:d3:2d:ad:7c:d9:26:22:57:bb:
8b:87:6d:68:61:ad:75:10:3b:c1:0d:e3:a9:48:bf:36:dc:08:
c1:4e:e5:30:a9:78:7c:56:5e:d8:75:49:d3:12:b3:f5:5f:9d:
61:1c:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:25 2026 by rpki-client