Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: xNhUr8RRidqr1e7ywqu59I2Y9VQwPRFrhjnVZIvQLo4=
Subject key identifier: 08:52:0F:0E:F4:93:36:6B:B1:9B:1D:99:2C:95:E1:0C:78:3B:76:F4
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019F8FB569F18BB5C414AC902777F0060102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 11FA
Signing time: Thu 23 Jul 2026 16:00:58 +0000
Manifest this update: Thu 23 Jul 2026 16:00:58 +0000
Manifest next update: Fri 24 Jul 2026 16:00:58 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: YNSem7XnhrSA61FMYI+Qp9f+LDkykcSxxcUzDaaCfag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:69:f1:8b:b5:c4:14:ac:90:27:77:f0:06:01:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jul 23 16:00:58 2026 GMT
Not After : Jul 24 16:00:58 2026 GMT
Subject: CN=08520f0ef493366bb19b1d992c95e10c783b76f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4b:3b:06:d3:b8:86:c8:de:b4:e3:ea:8a:62:
4d:a9:d4:45:26:5d:dd:10:3b:24:65:0f:6a:8d:0a:
2d:49:75:31:d0:ed:11:78:5a:66:c5:92:d3:9d:d5:
d7:5b:a3:91:9f:4e:b6:00:11:14:dd:b3:63:34:af:
3e:e1:b2:5b:78:0e:ec:94:ca:28:8f:f7:63:31:00:
2d:14:c8:6c:fe:32:9d:83:89:5a:71:48:11:f4:9a:
79:27:52:69:87:bc:86:39:d0:a3:41:ab:2f:54:39:
f9:a8:5a:0e:03:b9:5e:c3:de:9c:4d:2f:fd:29:d3:
18:c0:06:a2:a6:42:85:27:0e:b6:9d:3f:f0:16:81:
a6:c9:59:c4:92:4e:f9:83:fe:65:e5:60:1f:8b:68:
6c:71:97:13:1b:36:e9:f8:d0:6a:51:f8:b5:46:cd:
6a:92:84:15:4f:00:e7:b6:c5:c8:50:67:4c:c7:4d:
ca:4d:07:01:9e:e6:a3:5b:37:e1:f7:c2:fa:7b:13:
f0:5b:4a:03:37:c7:84:8c:b0:b1:d9:22:c5:dc:a0:
c8:5b:93:20:36:82:f3:f6:44:04:64:58:f4:0a:12:
b5:11:cb:43:2a:12:41:28:88:d2:18:11:a0:27:be:
85:ac:55:cb:24:a9:dc:d7:3f:0f:5a:73:22:4c:42:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:52:0F:0E:F4:93:36:6B:B1:9B:1D:99:2C:95:E1:0C:78:3B:76:F4
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:26:45:82:15:d2:b9:06:87:0e:12:6a:df:f4:46:0d:dc:de:
0f:bc:c8:bd:63:72:0c:5d:03:dd:77:6e:a5:d3:d0:37:3f:90:
45:9b:85:33:1c:83:13:31:e7:50:45:d7:cb:93:e4:a3:24:df:
88:4c:fc:f3:ac:a3:22:2c:59:98:59:e4:c5:07:b5:6a:9c:68:
81:fe:8d:d3:61:da:91:3b:40:d7:d8:48:50:58:3a:2d:38:33:
37:75:0b:9f:0a:31:74:4e:04:10:b3:94:ff:22:52:1a:61:c9:
88:7b:0e:ba:65:71:65:44:f5:ec:cd:dc:58:5d:ca:08:59:34:
a1:d4:fc:7e:bf:3c:98:e8:82:f4:7d:fa:73:72:b7:74:9c:3f:
44:44:ac:dc:4f:3e:6e:78:77:2c:dc:c5:a9:31:a3:d4:fd:5e:
27:ed:5b:31:5f:ce:96:b8:54:02:80:47:72:27:1d:22:f5:f8:
89:7f:7b:61:ad:3b:28:03:f0:41:1c:86:1c:86:a8:95:45:84:
e7:8c:96:e2:e2:fe:11:20:e1:a0:34:aa:f6:d7:c9:55:41:01:
60:17:36:6c:a4:99:e9:c3:4f:23:8a:9e:7f:85:04:5f:f0:6b:
23:fc:38:35:47:f7:cf:63:44:3a:d4:f0:07:9a:4c:e8:af:57:
8c:3f:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:49:26 2026 by rpki-client