Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: wn3APa8AYQa6bqpcziCk69PgQQbzCH4o6Yhp7bzFjWM=
Subject key identifier: 80:50:FF:9F:C9:1F:B2:E0:B4:4F:98:E5:0A:23:E6:24:FF:9B:A0:F6
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019FAAF5B761B11A43A802CDDA550901EBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 14B4
Signing time: Tue 28 Jul 2026 23:00:57 +0000
Manifest this update: Tue 28 Jul 2026 23:00:57 +0000
Manifest next update: Wed 29 Jul 2026 23:00:57 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: nz9XghQ5/Spe3i8cGiukTDRUO426YCg37PaMEB6iIuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:b7:61:b1:1a:43:a8:02:cd:da:55:09:01:eb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jul 28 23:00:57 2026 GMT
Not After : Jul 29 23:00:57 2026 GMT
Subject: CN=8050ff9fc91fb2e0b44f98e50a23e624ff9ba0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:0b:8f:54:3f:dd:f8:eb:54:eb:c5:28:3d:
03:ac:69:83:3c:78:92:f4:3a:a0:f2:e0:0e:e7:cb:
50:bc:83:0f:d9:61:1a:c9:6a:ef:29:43:e5:8b:e7:
06:0c:da:51:10:27:ed:bf:d8:18:35:fe:e3:c1:6d:
a4:97:e7:60:af:1a:8d:0e:fe:2d:bb:65:63:d9:4b:
13:5f:02:8b:d8:c4:5c:9d:3c:ab:b9:51:87:47:1f:
d4:03:8d:54:3f:72:f2:54:b9:58:8f:d7:8a:50:86:
a1:d9:c8:45:ed:3a:b2:5b:9a:e3:5d:67:2c:15:d8:
26:92:ac:8b:20:f2:28:65:f1:92:07:0b:13:b6:11:
0a:96:65:11:7c:78:ee:be:3c:9c:e7:ea:f1:ca:4f:
ca:05:a8:61:63:32:d9:00:bb:dc:d0:f5:3a:18:54:
e5:a6:a9:4d:bc:30:40:9f:1d:8b:4c:d8:bf:ed:73:
d6:6b:42:df:c6:6c:b1:ed:1d:a6:70:6c:13:d5:58:
39:81:79:47:42:8e:a4:06:c2:85:b7:67:13:85:69:
98:68:7e:fd:2b:f6:4b:a1:dc:96:7d:22:4f:9a:9c:
ed:02:37:86:73:1d:47:ad:c6:dd:9d:24:52:be:97:
7b:21:ee:04:b9:2d:11:92:cf:24:01:5f:b1:2a:bb:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:FF:9F:C9:1F:B2:E0:B4:4F:98:E5:0A:23:E6:24:FF:9B:A0:F6
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:09:3a:5f:56:9c:35:93:89:1a:06:54:e1:21:3a:b8:c6:de:
a0:3a:30:ac:a4:f7:13:ab:4b:3c:cf:5f:38:ad:b9:22:dd:86:
6c:52:2f:2a:e2:32:7f:56:12:7c:88:54:10:e2:d5:36:07:6b:
d9:8f:0f:fd:26:e3:2b:2c:ed:3c:bf:09:ab:31:1b:7a:f0:37:
9b:a7:5b:65:f1:83:c3:38:55:54:92:ce:1a:f2:b5:86:07:65:
09:47:32:a1:ba:2a:ac:5f:c3:93:45:71:0a:cf:78:cb:43:e5:
d1:98:6e:66:c7:02:1d:83:20:78:8b:09:6b:81:9b:61:78:b5:
14:ce:7e:60:90:4c:49:f9:06:f2:00:8b:3c:7b:38:56:d6:7e:
17:46:b4:a1:72:39:30:a7:0b:4d:6e:56:22:a2:5a:e6:4e:40:
58:a7:52:e3:64:49:e7:bd:b7:b1:ad:78:03:c9:0e:13:0c:94:
f9:62:bc:1b:ba:b1:f2:45:da:5d:04:bf:98:e7:6d:b6:1c:2c:
4a:90:aa:d6:99:c7:5c:58:8f:52:31:35:cd:9e:70:4f:fb:1d:
ff:1c:ad:89:2c:a3:af:8c:18:2b:cd:93:2f:68:dd:f9:dc:5d:
45:e4:32:f3:9b:06:50:14:99:c8:17:44:90:e8:42:d8:6d:71:
04:a9:58:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:53 2026 by rpki-client