Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: DJZSaKxeJF2GcrBTAiRa4s1RchqGqoxNkhwl/j+bH8Y=
Subject key identifier: 99:08:E3:D5:4E:F2:53:FE:2F:9F:5C:B2:80:A4:4A:07:32:10:F3:A9
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019FAC7623422FE8AC782B5C9F9B138F242A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 119A
Signing time: Wed 29 Jul 2026 06:00:50 +0000
Manifest this update: Wed 29 Jul 2026 06:00:50 +0000
Manifest next update: Thu 30 Jul 2026 06:00:50 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: lUS+Wg/vR54L4fvXbPtrco21IrqtgpNgpu1Wxckwh30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:23:42:2f:e8:ac:78:2b:5c:9f:9b:13:8f:24:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jul 29 06:00:50 2026 GMT
Not After : Jul 30 06:00:50 2026 GMT
Subject: CN=9908e3d54ef253fe2f9f5cb280a44a073210f3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:20:58:7c:e0:93:4d:88:9f:aa:dc:2d:e3:
0d:57:29:84:f6:17:01:70:10:eb:1f:08:88:b7:96:
56:4f:16:05:48:43:3d:b7:d8:0b:a3:68:a8:8e:02:
0a:92:8c:b2:90:2f:bc:84:e0:71:ff:c0:42:a0:a1:
3f:12:23:64:4c:24:ce:04:c7:57:07:3f:ab:9e:31:
93:6c:03:33:0a:01:2e:c4:37:86:ff:05:46:9c:85:
6a:81:47:85:fe:0a:6c:58:05:d1:9e:88:fd:eb:44:
f0:60:c7:a8:b0:76:a1:a8:78:13:af:30:55:f0:e2:
65:c8:41:25:b6:04:78:64:71:1b:d4:52:16:f6:27:
1a:aa:0b:28:8b:54:90:17:be:89:d1:8b:d8:82:98:
67:3b:59:45:77:e8:a9:8a:61:7b:c2:77:05:28:62:
ce:47:b6:36:cd:ed:9f:2a:b9:eb:fc:44:51:15:5e:
22:c5:a2:80:ca:75:0a:a9:c9:42:15:ce:5c:63:20:
29:9c:3b:f0:1e:80:c3:d4:d6:b6:92:cd:9c:53:a0:
97:8b:8b:6a:33:98:c8:fd:de:c5:a4:4b:aa:fa:ed:
78:15:0e:c8:f1:e2:1c:ad:98:64:d3:26:f9:d6:72:
a0:e7:c1:28:11:10:4d:8c:f4:69:39:fd:99:2d:f1:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:E3:D5:4E:F2:53:FE:2F:9F:5C:B2:80:A4:4A:07:32:10:F3:A9
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:26:58:24:f2:57:e1:d0:c4:55:6f:c1:8f:38:b5:72:bf:4f:
ef:4d:c8:1f:31:90:85:eb:e8:0c:1e:51:e8:18:e6:fb:68:79:
e8:b1:26:d2:3c:93:66:2e:4e:01:91:25:82:c5:fb:25:a4:4d:
4b:19:80:c2:20:5b:08:fe:46:58:1c:6a:82:fe:ed:93:d4:95:
a1:67:24:88:e0:ab:f6:75:e6:ff:e3:63:b8:76:2a:61:d6:9d:
ef:cd:08:54:23:15:e4:ec:c7:66:3a:e6:39:b6:17:43:44:65:
7f:b6:46:37:bd:a2:27:3f:0e:be:f9:0d:f7:df:ed:a8:63:87:
91:28:e8:d6:1e:bc:45:97:19:ba:b5:78:9c:ab:ac:6b:21:7b:
56:20:59:9f:c8:4e:d9:6b:3b:b6:3b:86:9a:c3:2d:2e:cf:84:
53:f9:79:45:97:03:95:f7:fa:51:14:74:aa:c0:ee:8c:0f:d8:
bc:81:5a:3a:f2:6d:f9:78:20:90:4b:80:8c:bc:47:03:ad:f6:
f6:a9:75:80:97:77:45:b8:21:04:82:6a:7e:43:e1:7e:f3:77:
42:94:de:88:02:8e:5a:2f:43:c1:84:6a:5f:f5:78:6b:4f:03:
cd:69:a7:d5:a6:fc:5c:a9:77:7f:fd:16:eb:9b:cd:7b:04:83:
a9:b7:e8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:31:10 2026 by rpki-client