Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: dII4RHsFGIs573RuXjJL0TOHAuVV3FE9VhOkgld5VSU=
Subject key identifier: 47:39:A7:5C:E8:6D:65:CA:5D:8A:8C:BD:38:F1:00:AE:E4:7C:83:8C
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019F91A3E3D2FA3B0F55A98E09FFE87BAC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 11FB
Signing time: Fri 24 Jul 2026 01:01:04 +0000
Manifest this update: Fri 24 Jul 2026 01:01:04 +0000
Manifest next update: Sat 25 Jul 2026 01:01:04 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: j2juZgIBsPaD3uYwLA+6PsOmfrmL8fZKVGxbzgROhf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:e3:d2:fa:3b:0f:55:a9:8e:09:ff:e8:7b:ac:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jul 24 01:01:04 2026 GMT
Not After : Jul 25 01:01:04 2026 GMT
Subject: CN=4739a75ce86d65ca5d8a8cbd38f100aee47c838c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:75:d8:dc:4b:3b:d0:a1:13:88:c8:c6:68:
fa:bc:ba:a4:58:09:27:57:45:45:10:e8:18:34:ba:
c0:7a:06:63:bf:84:5f:98:8e:7c:98:90:30:08:99:
9a:af:f8:c8:00:c9:6e:8b:90:dd:db:fe:0e:98:cc:
e5:cf:4d:12:61:91:49:78:0b:87:6b:80:2c:b8:e4:
75:fb:3c:54:43:99:29:b5:98:94:b2:60:a7:16:ee:
43:8d:98:18:d6:c3:95:a9:c9:f1:a9:4b:9d:99:f4:
3a:99:dd:16:9f:68:e2:a0:85:33:ff:2a:ce:53:2d:
ef:f4:39:bd:76:ee:5c:63:79:da:c8:e7:e3:6d:7a:
d2:9a:51:38:83:48:fe:b9:b8:0f:9b:ff:b4:42:46:
da:2d:d4:92:43:8a:88:33:42:a9:a9:5f:f7:11:59:
f6:4a:70:d4:aa:ad:a2:66:5b:c0:e8:c2:29:e4:87:
4b:4c:ea:e5:1c:a9:75:ee:91:2e:9c:d3:06:3c:dd:
d6:ee:a5:a7:fc:0f:1b:ce:48:4a:b3:bc:ab:1f:4d:
7a:21:b3:aa:ef:9c:b8:84:7e:79:e2:49:f3:d6:c0:
83:07:9c:6c:95:e5:96:8d:29:54:55:36:5d:ef:84:
58:57:97:7c:ce:99:a1:83:1f:97:c0:31:c6:61:22:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:A7:5C:E8:6D:65:CA:5D:8A:8C:BD:38:F1:00:AE:E4:7C:83:8C
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:0e:6c:b5:a1:cf:44:35:dc:b8:e8:e7:28:59:c2:62:b3:44:
d3:95:9c:93:f1:6e:77:fd:7c:e1:69:3f:51:ff:9d:8d:f0:64:
d8:7a:74:14:1e:b7:0c:31:d6:fd:e5:34:3d:ea:ec:19:1c:b9:
63:57:44:07:1d:d1:48:2f:a5:77:5f:74:b7:79:13:47:2e:39:
f8:6d:03:9a:41:d9:c2:21:df:c9:e5:fa:fb:7b:95:2b:8e:38:
82:eb:f0:5d:68:eb:19:40:27:67:93:d1:7b:da:d0:f9:7e:3b:
72:15:db:c8:63:6a:58:1c:4b:78:c9:99:b8:25:6b:e5:13:c1:
9d:a0:4c:88:b8:08:45:8e:02:6f:97:21:5e:be:d1:7e:af:d8:
c3:05:f6:87:88:1f:8d:ef:f2:d8:42:07:3e:69:a8:9a:eb:1c:
02:32:52:ce:99:06:ba:69:16:eb:23:b5:63:6c:04:ef:9c:a9:
ac:41:db:36:ed:da:8d:dd:69:65:35:2d:ce:18:6a:a5:f4:3e:
15:f4:b4:6f:45:bb:70:70:a3:9b:3d:7a:57:af:fe:f4:6e:f7:
f3:9d:c4:ec:0f:2d:74:ef:14:1e:1d:4f:2d:9d:16:7d:d6:b0:
fd:f4:09:dd:a0:9f:37:c8:32:fc:50:25:61:03:0c:01:00:69:
4b:20:9c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:42 2026 by rpki-client