Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
File: yRggtQAH5BxT3WAps3lU01cvTCk.mft (raw, json)
Hash identifier: JdpufCfvqceqJcqcx6PGs8bhmk5movhuBxnDHmOCkrY=
Subject key identifier: E8:B2:A7:5C:59:A2:E1:7F:0B:A2:E6:79:E4:C4:ED:C1:80:B4:CF:9E
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial: 019F91DA8930FA913010328EB036C5571070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
Manifest number: 150B
Signing time: Fri 24 Jul 2026 02:00:46 +0000
Manifest this update: Fri 24 Jul 2026 02:00:46 +0000
Manifest next update: Sat 25 Jul 2026 02:00:46 +0000
Files and hashes: 1: hOC_g0aFFJDt5mJXYMKufHdXY_Y.roa (hash: /1Qaua2qcuy21kP73vJzs1KKO/Ht1pr5AntmjkyRFoc=)
2: yRggtQAH5BxT3WAps3lU01cvTCk.crl (hash: xyROe6j1Qaoe7w2s5uw6gyYptAn11m1CDBRIEhigZ9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:89:30:fa:91:30:10:32:8e:b0:36:c5:57:10:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
Validity
Not Before: Jul 24 02:00:46 2026 GMT
Not After : Jul 25 02:00:46 2026 GMT
Subject: CN=e8b2a75c59a2e17f0ba2e679e4c4edc180b4cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:3e:53:9a:f3:7f:01:56:6d:87:e4:24:e0:
2d:35:01:97:72:ce:6e:8d:61:d0:f7:f8:8b:34:7d:
08:7d:6e:b1:0b:b8:19:e1:39:c8:19:54:3e:8c:ff:
b8:55:2e:73:8a:49:84:26:39:fb:32:42:aa:20:f3:
ed:a2:1b:e9:25:ff:6e:7b:9b:29:ee:3b:38:83:2a:
5f:79:02:e8:ce:5f:a5:ef:70:f7:28:d3:30:9f:b2:
1a:2d:40:38:12:63:96:4b:2e:22:63:23:bd:5b:24:
55:02:c0:9e:86:9a:e3:b2:2c:28:f3:f3:92:2e:8c:
cd:cb:be:e0:4d:55:9b:a3:31:9b:09:a5:3c:2c:f0:
ef:2b:8d:71:63:ce:28:8e:75:8a:59:01:ad:82:9e:
f6:fa:39:05:74:a7:00:7c:b8:c3:55:72:2c:eb:ff:
91:9a:33:8f:86:25:10:cd:0e:2f:0c:00:ed:83:9c:
7c:3a:f4:6b:4a:92:b0:86:48:6e:ec:59:e6:39:af:
24:68:4a:c8:70:2a:a5:a6:92:7d:5a:aa:36:2a:86:
38:a9:4c:8e:74:dd:da:55:ea:1b:62:5e:88:6b:91:
fa:de:ea:cc:06:f3:e1:55:a0:04:53:41:58:8a:53:
4b:21:ae:10:97:c8:e3:d5:f7:73:06:92:f8:41:c1:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B2:A7:5C:59:A2:E1:7F:0B:A2:E6:79:E4:C4:ED:C1:80:B4:CF:9E
X509v3 Authority Key Identifier:
keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ac:59:02:e2:83:48:c0:ac:4a:8b:a7:d5:a7:14:37:d6:eb:
94:7a:70:4d:6a:97:fd:10:d6:cd:21:43:a3:93:b3:b5:9f:e1:
51:ec:be:fe:9f:ab:33:91:ec:98:60:63:ab:1c:54:4e:5f:42:
c6:f4:e6:0a:b4:aa:11:71:74:7e:8f:fb:ab:0b:3b:d5:b1:60:
cd:8d:57:02:b9:c3:fc:e6:73:b8:ae:3c:be:00:27:29:47:ac:
6e:3b:20:2c:11:7b:7b:46:95:33:ed:d5:b1:cb:ac:b4:23:8b:
cb:e4:35:4c:1a:ff:ae:ba:5c:3b:7a:dd:61:57:6b:fd:96:af:
06:31:c4:a7:6c:28:1c:4a:ee:d7:a0:b1:dd:59:f2:4b:2a:5a:
a4:33:50:9a:22:ec:f0:f3:1c:80:14:07:3a:50:24:10:70:08:
39:84:40:a9:e6:82:72:8d:4f:5c:6e:5c:aa:b0:62:b7:13:30:
ad:8a:f5:3c:98:4a:31:af:86:d7:e6:0b:4d:70:59:31:2d:ac:
23:8f:b2:4b:db:34:22:a8:d9:8b:8e:97:70:49:9b:e0:2e:d2:
e4:35:66:33:55:7c:e8:5e:dc:b9:fd:ce:37:8e:de:54:f1:13:
14:2d:93:32:ac:36:70:b4:bd:60:66:26:13:9f:6c:4c:28:4c:
f3:05:f5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:17:24 2026 by rpki-client