Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: sWul4k4KpVv8flQOsKIOANYTH+uQQim8iRRCoUEbe/E=
Subject key identifier: D1:25:6A:E9:B6:B0:C3:22:30:D6:06:A6:CB:0E:B1:B1:A7:CD:74:32
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 019F8F7F1FED53F8A49026FAB2D879080989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1958
Signing time: Thu 23 Jul 2026 15:01:40 +0000
Manifest this update: Thu 23 Jul 2026 15:01:40 +0000
Manifest next update: Fri 24 Jul 2026 15:01:40 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: oVZoUTpMTsM1QYaWxNbQpjgjHm0e8AES0DyNzzS1h2w=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:1f:ed:53:f8:a4:90:26:fa:b2:d8:79:08:09:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Jul 23 15:01:40 2026 GMT
Not After : Jul 24 15:01:40 2026 GMT
Subject: CN=d1256ae9b6b0c32230d606a6cb0eb1b1a7cd7432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:32:76:ab:03:30:97:e1:73:10:6c:b9:9d:3b:
2c:fa:6c:f7:19:61:09:20:0d:8f:60:a2:f5:a0:71:
7a:4e:ea:26:fa:b2:31:90:77:6c:c2:e8:7b:5e:e0:
a6:17:e7:f6:a4:34:9e:6f:da:61:a1:e6:c1:54:f0:
8e:cf:70:59:5f:4e:42:95:bc:4d:de:fe:ed:cd:ae:
48:97:de:b1:64:7f:de:dd:41:18:f9:a2:0f:bd:f1:
c1:ac:c0:22:ea:27:ba:0a:07:8a:8c:85:ff:a9:a2:
3f:a5:3a:73:3e:88:0a:83:cf:71:fe:09:77:ed:70:
6c:21:d0:e4:34:d3:0c:83:48:3b:8f:ee:f6:bb:cf:
bd:22:75:c7:1d:b4:40:44:03:66:a4:93:d0:4f:3d:
c1:00:d9:c6:1a:e5:45:eb:be:15:3a:d7:b1:cc:3e:
93:2c:5b:3e:70:38:11:a0:27:61:86:8a:1b:a0:7f:
46:0c:76:ae:c2:32:e9:ad:4e:b3:7e:37:73:97:5b:
a9:ac:3c:b4:54:25:31:b5:69:3e:0e:99:f7:36:5a:
33:7e:fd:62:cd:1b:da:c8:cf:b7:97:62:1a:4b:cb:
77:04:f3:83:78:44:b5:9f:da:f8:6e:43:10:63:0a:
fb:99:79:98:b3:2f:8d:bf:e6:bf:f1:76:2f:0e:4c:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:25:6A:E9:B6:B0:C3:22:30:D6:06:A6:CB:0E:B1:B1:A7:CD:74:32
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:28:ed:ad:b3:86:13:29:ca:36:a0:65:0a:7d:e9:b1:08:3b:
55:35:5d:5b:bc:9e:2e:7c:05:c9:3c:6e:7c:2d:77:61:b4:10:
90:07:af:b0:a8:f4:3f:29:76:55:70:4f:a6:29:07:01:de:80:
16:17:1b:a8:15:4b:2d:42:a3:90:81:88:70:19:f9:36:ce:1d:
d2:6c:64:f0:ca:4e:a7:46:ec:0b:51:df:42:1c:1e:d2:5f:ed:
d9:ea:5b:79:35:e3:b7:69:58:fc:fe:cc:35:22:c9:af:64:a7:
15:41:54:69:3a:5e:67:a0:7c:55:8b:be:93:2e:3e:9d:52:74:
72:e4:77:19:5a:49:99:c2:6e:e9:1d:94:aa:cc:69:56:c0:71:
ce:de:c5:cf:64:5f:0b:8a:44:c6:5f:b0:1f:02:ec:d3:94:fc:
1b:60:dc:f3:c0:84:f1:54:46:fe:d3:bf:d0:06:57:4c:b8:45:
24:d9:07:27:26:9b:13:da:ce:d9:75:48:43:80:21:96:15:e2:
43:f3:c8:d0:cd:d9:10:94:1e:21:6a:5e:bc:8c:84:09:0f:1c:
ea:9f:54:50:a7:34:60:48:16:59:55:38:e7:67:49:0c:1b:2e:
e6:b0:e5:ac:91:88:cd:9e:66:44:66:f2:b1:02:a2:51:29:26:
b3:8d:5a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfx/tU/ikkCb6sth5CAmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5
NzRlM2UwHhcNMjYwNzIzMTUwMTQwWhcNMjYwNzI0MTUwMTQwWjAzMTEwLwYDVQQD
EyhkMTI1NmFlOWI2YjBjMzIyMzBkNjA2YTZjYjBlYjFiMWE3Y2Q3NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJ2qwMwl+FzEGy5nTss+mz3GWEJ
IA2PYKL1oHF6Tuom+rIxkHdswuh7XuCmF+f2pDSeb9phoebBVPCOz3BZX05ClbxN
3v7tza5Il96xZH/e3UEY+aIPvfHBrMAi6ie6CgeKjIX/qaI/pTpzPogKg89x/gl3
7XBsIdDkNNMMg0g7j+72u8+9InXHHbRARANmpJPQTz3BANnGGuVF674VOtexzD6T
LFs+cDgRoCdhhooboH9GDHauwjLprU6zfjdzl1uprDy0VCUxtWk+Dpn3Nlozfv1i
zRvayM+3l2IaS8t3BPODeES1n9r4bkMQYwr7mXmYsy+Nv+a/8XYvDkx5aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNElaum2sMMiMNYGpssOsbGnzXQyMB8GA1UdIwQY
MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt
ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5
LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqijtrbOG
EynKNqBlCn3psQg7VTVdW7yeLnwFyTxufC13YbQQkAevsKj0Pyl2VXBPpikHAd6A
FhcbqBVLLUKjkIGIcBn5Ns4d0mxk8MpOp0bsC1HfQhwe0l/t2epbeTXjt2lY/P7M
NSLJr2SnFUFUaTpeZ6B8VYu+ky4+nVJ0cuR3GVpJmcJu6R2UqsxpVsBxzt7Fz2Rf
C4pExl+wHwLs05T8G2Dc88CE8VRG/tO/0AZXTLhFJNkHJyabE9rO2XVIQ4AhlhXi
Q/PI0M3ZEJQeIWpevIyECQ8c6p9UUKc0YEgWWVU452dJDBsu5rDlrJGIzZ5mRGby
sQKiUSkms41aQA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:28 2026 by rpki-client