Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: kpz8QWjLXVw4oRX85vgASpTe8wosxNrMGVRoik9Ei3Y=
Subject key identifier: 4A:13:AE:77:CA:AC:A4:AB:7F:D7:84:FC:76:02:69:7B:BE:4C:16:C1
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 019F92B65A4082C77341BC89351917B2759B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 06:00:51 +0000
Manifest this update: Fri 24 Jul 2026 06:00:51 +0000
Manifest next update: Sat 25 Jul 2026 06:00:51 +0000
Files and hashes: 1: JBraeIgnuA6e6r7UQt_AjcfpK9E.roa (hash: tQM9C7OHo0XqPssxXUnuLcGysh5HiluPj8tqyjMnFVk=)
2: qQLv7uOVYz32Fa-HCYFsduryaUY.roa (hash: msrPJ+vS8iPsGg0xQfm9cnyh8JOxajlO3J5ownd6l7I=)
3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: dsr0UL5+aKXpBrLiQL7U+Eaml4fUoscuptcySw/mFo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5a:40:82:c7:73:41:bc:89:35:19:17:b2:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jul 24 06:00:51 2026 GMT
Not After : Jul 25 06:00:51 2026 GMT
Subject: CN=4a13ae77caaca4ab7fd784fc7602697bbe4c16c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6f:00:ad:b9:9d:ed:9b:f3:fe:ec:48:57:fe:
cb:97:b4:99:e7:bf:8b:73:fd:01:fd:88:34:69:da:
9b:2f:81:30:74:6e:8e:13:56:de:40:c6:81:e0:e3:
a3:68:4e:1c:31:a7:65:cf:90:ca:45:20:b1:e5:fc:
ae:df:7d:1c:c9:1d:8e:96:df:28:33:b0:be:45:c6:
b8:ea:3f:e5:b1:e4:b0:da:d3:25:ac:5c:1b:1f:01:
50:5a:57:16:f5:18:98:6e:bf:6b:59:b9:e1:dc:a6:
9a:46:49:cd:32:9f:25:12:1c:07:7e:69:e3:da:18:
1e:23:6d:ff:71:6c:23:0b:f1:fd:e0:69:a7:2d:aa:
71:03:09:27:30:ab:45:ff:5f:68:45:38:c5:77:7a:
ed:0f:52:52:14:a0:b9:6e:d0:1e:35:a3:2b:81:f4:
e1:8d:53:71:b4:e6:df:67:82:e1:ba:77:14:8a:7f:
ce:2e:e4:6b:a9:31:66:b6:b0:ad:ee:d7:d7:eb:93:
54:af:10:95:e2:d8:33:8f:ec:f0:55:0a:18:d0:6b:
69:0c:d2:1d:fa:69:c7:82:d3:9f:69:87:b5:9b:99:
40:1b:cb:52:81:17:47:bd:88:fe:cd:43:9b:cf:05:
de:73:fc:d0:e5:2d:78:ee:73:35:e2:09:fc:1a:a3:
69:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:AE:77:CA:AC:A4:AB:7F:D7:84:FC:76:02:69:7B:BE:4C:16:C1
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e3:2e:be:33:02:40:00:2e:f8:62:3f:f0:24:ff:f9:53:96:
99:78:0a:a5:ae:ea:ae:8d:f8:36:a4:48:ee:6e:69:46:a7:d0:
e7:52:80:3c:3e:e0:b2:84:a3:02:3c:ed:1e:5a:c0:70:e3:3f:
a4:5b:5f:44:8e:9a:30:1b:11:c2:7a:4a:42:9b:b7:e9:13:65:
93:74:12:1f:c1:71:82:50:c6:2c:c1:72:37:36:54:14:76:2d:
51:b7:98:74:5f:21:81:1d:97:52:0d:3d:6e:81:f6:0d:d9:01:
40:21:4d:15:32:1c:81:97:aa:ad:34:3d:0d:18:13:c4:60:fe:
6e:4c:c0:a1:f5:44:47:7c:c5:95:79:4d:1a:6b:7b:bd:0c:31:
7b:04:a6:44:fd:e7:14:94:79:e9:1d:04:32:9b:53:e2:3e:78:
1c:c4:35:1a:c9:9d:0d:2c:4e:b3:7e:7a:a7:7d:1b:e0:1d:9d:
06:49:e4:70:10:3f:0e:74:7b:fd:bf:b1:94:c3:29:2d:3e:c7:
13:b3:1a:6e:a6:2d:e4:7e:29:7e:c6:a8:6c:98:bc:fe:f8:a5:
c6:d1:43:d2:65:dd:70:83:05:96:3e:d1:5c:5b:55:45:3a:90:
24:02:cc:34:be:78:96:a8:6d:d4:ef:67:86:9e:fe:28:ed:23:
e4:9c:f2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:16:52 2026 by rpki-client