Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: JTXCEVLe+a3WXSscdcL8Hndtem6D2N/yLbhzpzlM0SI=
Subject key identifier: 6B:81:84:1F:6B:D5:DF:3D:B4:2D:48:E4:55:7B:94:76:9D:6D:CC:4A
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019F90C7AD7430BD4AD44DBA11A0565C466C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 21:00:32 +0000
Manifest this update: Thu 23 Jul 2026 21:00:32 +0000
Manifest next update: Fri 24 Jul 2026 21:00:32 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: 1MXBSi9lA/MIHEURgID1FYDD9i5PSYOMC/OwxDdjL2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ad:74:30:bd:4a:d4:4d:ba:11:a0:56:5c:46:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jul 23 21:00:32 2026 GMT
Not After : Jul 24 21:00:32 2026 GMT
Subject: CN=6b81841f6bd5df3db42d48e4557b94769d6dcc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:61:05:bf:9d:66:b4:4f:5a:c6:00:7c:a0:
2a:dd:61:6b:49:f9:a3:83:44:3b:2e:ee:9b:9e:5e:
62:1f:a8:84:b2:f6:8f:3a:ed:b6:0f:59:6a:4e:bf:
2f:9c:a0:8e:da:4e:40:96:18:ad:58:48:bd:c3:aa:
d2:58:83:f7:51:ed:69:07:f5:a0:79:67:a1:9d:4a:
6f:5e:01:f1:f0:9a:b3:1a:07:91:36:1a:2b:b7:a3:
56:ca:58:5d:f9:05:ad:31:08:b5:b5:cc:03:51:71:
08:a5:5e:2b:ae:d5:a6:11:b3:a7:ee:b9:5a:73:0f:
e0:6f:ba:ba:51:c4:09:c7:e9:b4:73:9e:17:0d:f0:
d6:bf:59:81:31:8c:11:1f:95:c7:46:30:e7:86:e5:
ec:91:73:b2:44:a0:7c:24:ac:f7:dd:19:66:98:6d:
77:f2:fc:4b:f5:06:84:26:d6:af:53:03:aa:f7:c3:
0b:9c:01:6d:5d:87:ec:20:16:08:0a:b0:12:2d:77:
dd:9b:ad:76:e9:87:65:16:0f:55:e1:7a:51:42:5b:
df:f7:2b:1a:d9:5b:65:e2:8f:90:43:70:65:1e:08:
6d:81:37:4f:5e:88:9b:ec:a7:b2:1e:0a:a9:7a:e2:
72:f0:af:89:cc:ff:11:58:fa:71:69:15:55:dc:9e:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:81:84:1F:6B:D5:DF:3D:B4:2D:48:E4:55:7B:94:76:9D:6D:CC:4A
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3a:27:09:a1:d5:e9:07:a9:8b:e3:35:11:22:d7:7f:d1:b7:
57:61:10:6f:70:4d:3d:fc:e2:ff:89:55:07:fe:82:72:a2:19:
3f:df:88:cc:8c:dd:7f:b2:c9:e6:d6:46:07:5a:1d:f3:25:11:
86:eb:75:1b:50:af:d8:28:f6:a9:3d:cd:8e:6f:80:9d:11:b3:
b0:8f:1f:15:98:f2:bb:aa:3c:c7:4c:1d:3d:62:e3:5b:6a:aa:
b5:83:38:50:36:75:40:66:98:cc:41:76:80:2e:41:c4:20:f8:
ac:04:2d:fb:69:ae:19:4b:a4:d1:f9:e7:8d:26:e7:3d:24:9e:
9a:11:87:a8:96:57:88:38:eb:55:a4:82:71:78:40:56:e9:32:
ca:28:4f:4f:3e:a3:37:55:3d:6e:3c:19:55:8b:9c:33:e8:30:
50:4b:e3:68:e1:dc:28:2b:0d:13:cb:a0:64:2b:5b:85:cf:0f:
d3:d8:b8:f2:27:17:6d:d5:4a:df:d8:f9:f5:20:ca:e6:89:e1:
51:a9:c2:16:18:62:27:a5:b1:46:01:f5:c5:4d:ac:e3:5f:3b:
fa:e5:d5:c8:22:8a:80:83:5c:e1:ad:b9:68:36:e8:ba:d4:cf:
90:63:a2:66:d3:5d:e8:96:58:7e:6c:9a:99:9b:64:8d:72:93:
a1:23:ff:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx610ML1K1E26EaBWXEZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjYwNzIzMjEwMDMyWhcNMjYwNzI0MjEwMDMyWjAzMTEwLwYDVQQD
Eyg2YjgxODQxZjZiZDVkZjNkYjQyZDQ4ZTQ1NTdiOTQ3NjlkNmRjYzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK1hBb+dZrRPWsYAfKAq3WFrSfmj
g0Q7Lu6bnl5iH6iEsvaPOu22D1lqTr8vnKCO2k5AlhitWEi9w6rSWIP3Ue1pB/Wg
eWehnUpvXgHx8JqzGgeRNhort6NWylhd+QWtMQi1tcwDUXEIpV4rrtWmEbOn7rla
cw/gb7q6UcQJx+m0c54XDfDWv1mBMYwRH5XHRjDnhuXskXOyRKB8JKz33RlmmG13
8vxL9QaEJtavUwOq98MLnAFtXYfsIBYICrASLXfdm6126YdlFg9V4XpRQlvf9ysa
2Vtl4o+QQ3BlHghtgTdPXoib7KeyHgqpeuJy8K+JzP8RWPpxaRVV3J52BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuBhB9r1d89tC1I5FV7lHadbcxKMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDonCaHV
6Qepi+M1ESLXf9G3V2EQb3BNPfzi/4lVB/6CcqIZP9+IzIzdf7LJ5tZGB1od8yUR
hut1G1Cv2Cj2qT3Njm+AnRGzsI8fFZjyu6o8x0wdPWLjW2qqtYM4UDZ1QGaYzEF2
gC5BxCD4rAQt+2muGUuk0fnnjSbnPSSemhGHqJZXiDjrVaSCcXhAVukyyihPTz6j
N1U9bjwZVYucM+gwUEvjaOHcKCsNE8ugZCtbhc8P09i48icXbdVK39j59SDK5onh
UanCFhhiJ6WxRgH1xU2s4187+uXVyCKKgINc4a25aDboutTPkGOiZtNd6JZYfmya
mZtkjXKToSP/3A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:29 2026 by rpki-client