Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: is8IDicVl3JuQ77w+xZLqwp59pCJ5x1iOOXrw0LBGn8=
Subject key identifier: 73:A3:74:0D:B8:D2:02:C2:CC:2F:9A:FD:7C:08:84:E4:3D:98:D8:95
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019F93C895A4E0143A7FC9A3248C6D1021D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 11:00:24 +0000
Manifest this update: Fri 24 Jul 2026 11:00:24 +0000
Manifest next update: Sat 25 Jul 2026 11:00:24 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: tV8oZE4CMhRMI/ZczlghHcq4hBudsUmgGrvNvBBK8w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:95:a4:e0:14:3a:7f:c9:a3:24:8c:6d:10:21:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jul 24 11:00:24 2026 GMT
Not After : Jul 25 11:00:24 2026 GMT
Subject: CN=73a3740db8d202c2cc2f9afd7c0884e43d98d895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:5e:ad:02:e4:5e:e7:95:af:f5:21:64:ab:
49:97:c7:97:a4:fc:d7:55:3e:72:f5:b5:69:b8:22:
bf:a6:4c:2f:84:02:7e:a0:19:2e:8f:7e:ce:59:92:
25:b9:c8:6d:ff:d6:8e:44:66:e3:fa:9d:18:0c:00:
75:ea:6f:ba:37:87:39:d0:94:ab:3a:e4:cf:5f:8b:
b5:85:60:84:31:87:43:96:79:68:ce:29:2f:97:58:
ff:18:5e:5c:37:d4:64:ab:44:21:8c:0a:c3:9b:6a:
d8:fb:3d:66:2b:01:cc:2f:e9:f4:ad:b4:7d:c7:f0:
62:79:35:af:79:85:56:a8:30:ec:39:85:f2:86:1f:
0a:0e:ef:d1:01:69:be:12:f7:96:01:d1:28:ac:25:
36:bc:8f:09:df:7a:d3:dd:3a:48:0d:84:1a:a9:67:
fd:0d:0a:13:da:af:16:f8:b7:fa:17:f7:f5:88:6a:
6a:9e:f4:0d:39:94:37:98:f9:5c:0d:fd:d0:c7:11:
05:82:3b:01:2f:9f:7f:e9:ff:e7:1e:61:78:b7:3b:
0e:ac:22:84:a0:a7:0c:a0:b8:b5:f7:81:7d:f9:56:
54:37:3f:6a:af:94:56:73:67:31:09:b2:a0:2c:d8:
c0:07:54:39:7d:59:3e:eb:25:8c:ac:27:ab:08:a1:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:74:0D:B8:D2:02:C2:CC:2F:9A:FD:7C:08:84:E4:3D:98:D8:95
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8a:57:f4:24:6c:27:51:15:52:72:5b:49:b5:a7:9b:fc:51:
e3:6e:40:08:31:a4:28:b6:f0:90:77:ac:13:32:ad:87:0f:68:
97:db:fb:b3:52:ab:03:2d:6a:1b:54:c7:f6:6f:9c:f0:5a:ba:
7a:44:e8:7e:32:4b:47:33:32:da:65:60:b6:b2:11:a1:50:66:
32:39:e5:ba:80:f9:5e:38:03:5d:c4:55:95:10:af:3d:47:10:
16:dd:60:17:ba:dc:30:2a:36:e0:5f:6f:7e:33:b0:7e:74:c3:
c5:4b:75:5c:03:79:28:3e:67:07:d2:14:b0:f6:16:bf:cf:f5:
54:79:e4:96:1d:a9:4a:f7:d8:fe:f5:02:70:58:52:d5:82:1b:
55:fc:d3:fb:5e:77:45:ca:dc:1e:b9:4c:b8:b5:78:63:50:b8:
44:0f:a3:a5:8b:7f:8f:a6:0a:10:06:04:ea:9a:e4:3a:72:80:
79:c6:6b:93:4d:d4:13:8a:a9:2e:70:d2:03:95:1e:ec:b6:f7:
5f:35:7b:c5:e1:0d:0d:dd:5d:15:7e:7d:26:34:36:08:3d:57:
84:b8:99:50:98:a7:bb:74:9d:40:eb:6d:5e:8c:d2:66:a4:85:
85:29:6d:5e:33:f4:34:8b:53:b1:04:6b:ad:75:1a:5a:27:31:
04:f6:f7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:06 2026 by rpki-client