Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
File: yA3IsMZQm8dryF5n9D7giooUyXU.mft (raw, json)
Hash identifier: hgFMfJn0VLVvnYOlCF5wrMEh9FbBv4w/9aL/+ohzQy8=
Subject key identifier: 53:7E:82:11:A5:0C:C1:97:12:81:51:2B:08:3A:10:65:8C:89:5A:1D
Authority key identifier: C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
Certificate issuer: /CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Certificate serial: 019FAAF5D3684C3248A43C98AE8E88EB0540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
Manifest number: D1
Signing time: Tue 28 Jul 2026 23:01:04 +0000
Manifest this update: Tue 28 Jul 2026 23:01:04 +0000
Manifest next update: Wed 29 Jul 2026 23:01:04 +0000
Files and hashes: 1: cpmgiH1BslsxBNjDBIkAI1gHkq4.roa (hash: 7HS2B/w6P1YHari4czqglwcerA3k27fD3l3Bj3QIfa4=)
2: yA3IsMZQm8dryF5n9D7giooUyXU.crl (hash: HxG/57xhpW+4pgnLBeBvoXp0FJjvrafHKqsls4bsjY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:d3:68:4c:32:48:a4:3c:98:ae:8e:88:eb:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80dc8b0c6509bc76bc85e67f43ee08a8a14c975
Validity
Not Before: Jul 28 23:01:04 2026 GMT
Not After : Jul 29 23:01:04 2026 GMT
Subject: CN=537e8211a50cc1971281512b083a10658c895a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:fc:6d:44:cc:cc:93:a8:de:31:0a:69:ba:
32:1d:c5:d4:32:0a:b2:dd:b1:51:1c:b3:ac:93:27:
0e:7d:9e:cf:f2:e5:29:b1:7d:c2:85:ce:3e:91:3e:
bf:1e:44:24:d0:e3:e8:a3:ac:13:a5:fe:17:e4:c4:
ba:af:30:cc:60:9f:20:9b:19:81:b4:e7:bc:7f:c3:
d7:3d:2c:63:c2:f6:aa:c1:a4:7b:6d:55:95:3b:fa:
1d:46:6a:cf:2f:23:49:b2:44:7f:2f:df:4c:05:31:
13:49:e3:5a:c3:41:9c:74:71:05:c9:d4:ba:1d:b9:
93:10:8d:42:57:17:53:06:aa:9b:9c:23:01:75:6b:
79:69:02:aa:94:35:5c:d7:ae:61:e8:d5:cf:97:10:
bb:9f:e2:9f:98:3e:04:57:ff:55:ad:55:24:89:bd:
af:2f:dd:94:ff:65:f7:0a:0f:fb:e6:fd:02:3d:5a:
6d:b9:30:80:4a:1d:da:30:f5:22:7f:78:5b:d2:d3:
f0:06:ab:41:03:7b:46:29:fd:44:b1:94:f0:6e:75:
74:11:24:e3:21:5e:7d:2d:30:f3:a8:36:36:d9:76:
aa:dc:a4:de:69:8f:3e:f1:e3:25:46:d0:e7:70:07:
dd:4d:95:a0:a2:48:d4:7c:4e:91:d3:9f:55:c7:41:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7E:82:11:A5:0C:C1:97:12:81:51:2B:08:3A:10:65:8C:89:5A:1D
X509v3 Authority Key Identifier:
keyid:C8:0D:C8:B0:C6:50:9B:C7:6B:C8:5E:67:F4:3E:E0:8A:8A:14:C9:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yA3IsMZQm8dryF5n9D7giooUyXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/08037b-5b67-407c-9105-4c4ea06acfe9/1/yA3IsMZQm8dryF5n9D7giooUyXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:21:86:0c:13:c9:24:86:93:09:73:bf:17:6c:ee:f2:66:e4:
89:34:7f:8b:1f:f9:8a:f9:ce:34:37:0c:08:ee:5d:81:4f:51:
57:50:c8:63:e7:54:dd:82:47:a3:35:a3:e6:10:97:10:f6:f6:
15:f6:c0:e6:b9:fb:34:4c:29:9b:44:89:35:07:da:be:d8:cc:
f6:4c:d8:69:7c:1c:94:0b:3c:f0:8b:df:7c:c9:0e:91:0e:d3:
eb:eb:99:48:c8:fd:10:25:55:e6:2a:f8:8f:56:ed:2b:67:c2:
c5:61:90:63:a9:de:c0:dd:88:d2:58:59:a9:f0:e6:24:f7:fd:
db:c6:45:d7:e4:6d:76:e7:4c:b5:2d:63:eb:29:1a:28:af:45:
f9:b5:92:cc:9b:27:44:43:09:cf:6f:e2:6c:ff:52:24:93:69:
69:e7:54:69:bf:79:d1:f3:f8:44:e1:08:02:c9:1c:c7:d3:1c:
c0:2d:59:b7:a1:92:f2:a6:ac:f8:26:f0:b4:bf:a9:86:4e:f1:
ec:bd:1e:31:8c:89:4e:5c:5a:e5:d7:5c:26:33:31:97:75:30:
0f:25:dc:d4:fe:12:af:48:11:84:8d:bd:fc:bc:57:0f:2f:6a:
0e:fd:a8:dd:73:3d:61:ef:e5:38:99:26:56:5b:dd:7a:9d:69:
4a:25:97:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9dNoTDJIpDyYro6I6wVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MGRjOGIwYzY1MDliYzc2YmM4NWU2N2Y0M2VlMDhhOGEx
NGM5NzUwHhcNMjYwNzI4MjMwMTA0WhcNMjYwNzI5MjMwMTA0WjAzMTEwLwYDVQQD
Eyg1MzdlODIxMWE1MGNjMTk3MTI4MTUxMmIwODNhMTA2NThjODk1YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxz8bUTMzJOo3jEKaboyHcXUMgqy
3bFRHLOskycOfZ7P8uUpsX3Chc4+kT6/HkQk0OPoo6wTpf4X5MS6rzDMYJ8gmxmB
tOe8f8PXPSxjwvaqwaR7bVWVO/odRmrPLyNJskR/L99MBTETSeNaw0GcdHEFydS6
HbmTEI1CVxdTBqqbnCMBdWt5aQKqlDVc165h6NXPlxC7n+KfmD4EV/9VrVUkib2v
L92U/2X3Cg/75v0CPVptuTCASh3aMPUif3hb0tPwBqtBA3tGKf1EsZTwbnV0ESTj
IV59LTDzqDY22Xaq3KTeaY8+8eMlRtDncAfdTZWgokjUfE6R059Vx0EOlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN+ghGlDMGXEoFRKwg6EGWMiVodMB8GA1UdIwQY
MBaAFMgNyLDGUJvHa8heZ/Q+4IqKFMl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUEzSXNNWlFtOGRyeUY1bjlEN2dpb29VeVhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wODAzN2ItNWI2Ny00MDdjLTkxMDUt
NGM0ZWEwNmFjZmU5LzEveUEzSXNNWlFtOGRyeUY1bjlEN2dpb29VeVhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wODAzN2ItNWI2Ny00MDdjLTkxMDUtNGM0ZWEwNmFjZmU5
LzEveUEzSXNNWlFtOGRyeUY1bjlEN2dpb29VeVhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiGGDBPJ
JIaTCXO/F2zu8mbkiTR/ix/5ivnONDcMCO5dgU9RV1DIY+dU3YJHozWj5hCXEPb2
FfbA5rn7NEwpm0SJNQfavtjM9kzYaXwclAs88IvffMkOkQ7T6+uZSMj9ECVV5ir4
j1btK2fCxWGQY6newN2I0lhZqfDmJPf928ZF1+RtdudMtS1j6ykaKK9F+bWSzJsn
REMJz2/ibP9SJJNpaedUab950fP4ROEIAskcx9McwC1Zt6GS8qas+CbwtL+phk7x
7L0eMYyJTlxa5ddcJjMxl3UwDyXc1P4Sr0gRhI29/LxXDy9qDv2o3XM9Ye/lOJkm
Vlvdep1pSiWX6A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:56 2026 by rpki-client