Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: LLpWmJTYexH9bs3F9AcE7COU94wSvHa7jf8oiiCJJBk=
Subject key identifier: 74:AB:A3:DA:65:80:F9:2A:11:06:99:81:86:62:4B:42:4A:A4:52:85
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019FAAF51CD677CB937135B7EE35A69D8782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 19DF
Signing time: Tue 28 Jul 2026 23:00:18 +0000
Manifest this update: Tue 28 Jul 2026 23:00:18 +0000
Manifest next update: Wed 29 Jul 2026 23:00:18 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: uyn6Ku7XDqMglNi9AezU/qOPyCttlRFjENOBfQhyFXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:1c:d6:77:cb:93:71:35:b7:ee:35:a6:9d:87:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jul 28 23:00:18 2026 GMT
Not After : Jul 29 23:00:18 2026 GMT
Subject: CN=74aba3da6580f92a1106998186624b424aa45285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:a5:92:63:25:8f:ee:ae:96:ee:4f:64:0d:
b3:0d:53:fd:03:9f:41:4f:cc:e9:23:64:b4:d7:27:
63:0a:3a:bf:43:8a:ed:e8:66:08:6c:b7:63:7f:f9:
18:4f:7a:86:f2:9e:35:22:6f:17:eb:42:28:2a:68:
50:c5:bb:47:6e:e9:98:84:c3:76:a7:78:9c:1b:9e:
18:41:db:ea:8e:3a:0b:f3:99:4a:02:2a:4a:7a:8c:
db:a4:16:79:ab:1f:61:d6:5c:19:3e:5b:68:e0:2d:
96:68:59:56:ba:db:b1:f7:2c:ca:f2:94:c7:79:0c:
1e:2b:91:3d:2b:0d:41:48:8b:ea:c1:a1:19:06:e9:
4b:d6:9d:32:2f:39:78:59:8c:46:54:1d:15:af:f2:
8a:cd:77:81:37:03:db:eb:1e:67:27:37:ad:5c:bf:
87:0c:d2:29:5d:de:dc:71:53:a2:12:cd:59:94:38:
f2:87:9b:67:32:a3:80:8e:92:27:89:27:80:11:6a:
3f:fb:87:8b:37:57:ca:8a:db:a4:7d:9e:84:29:e2:
ca:a9:70:67:ed:51:53:2f:bc:31:78:97:76:33:0f:
be:f0:a8:c1:fd:b9:25:0b:87:47:5d:88:80:13:20:
0a:50:88:33:f1:27:4b:cb:82:d4:45:ea:bd:bf:fe:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AB:A3:DA:65:80:F9:2A:11:06:99:81:86:62:4B:42:4A:A4:52:85
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:38:0e:b4:53:8e:a7:78:d3:b8:b9:2d:53:b0:6d:86:23:1f:
22:e2:79:8d:bc:d4:26:4c:b1:04:e7:88:73:da:1c:8b:5a:c3:
d8:6f:3e:be:71:c2:d5:06:96:81:5d:c5:11:16:b4:93:33:1c:
b8:f0:c2:d8:be:fe:aa:c6:bd:3c:77:7c:10:dc:cd:1c:6a:4d:
60:b3:84:b5:e6:14:ea:a5:4d:72:48:2b:99:4b:79:06:b6:19:
b7:70:3e:2a:e8:59:07:d3:98:2b:05:65:2e:f3:75:5a:6e:c8:
94:f9:46:f6:6d:85:78:92:fd:0d:26:a8:40:98:4f:8f:16:73:
a4:71:50:66:66:98:c3:d6:cc:45:54:df:f2:e5:95:74:ef:a1:
e9:5b:3c:6a:ec:5a:f6:34:62:84:ae:d9:27:66:68:3d:72:e8:
4f:70:6c:8b:79:a7:8a:86:c2:d7:f9:01:da:34:4c:49:3e:bb:
66:ad:94:a6:d3:af:a2:2e:f7:b1:02:66:a6:e2:71:54:3d:a3:
53:1b:09:5a:4b:33:c4:6f:59:ef:f0:92:bc:70:5c:a1:43:d9:
1f:25:b7:7b:b0:ce:6e:c1:4f:8b:ae:f1:f6:98:40:6e:82:6a:
53:9a:f0:06:15:fc:16:67:bb:7e:86:9f:6d:9c:55:f1:c9:d4:
3b:cb:f6:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9RzWd8uTcTW37jWmnYeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjYwNzI4MjMwMDE4WhcNMjYwNzI5MjMwMDE4WjAzMTEwLwYDVQQD
Eyg3NGFiYTNkYTY1ODBmOTJhMTEwNjk5ODE4NjYyNGI0MjRhYTQ1Mjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwKlkmMlj+6ulu5PZA2zDVP9A59B
T8zpI2S01ydjCjq/Q4rt6GYIbLdjf/kYT3qG8p41Im8X60IoKmhQxbtHbumYhMN2
p3icG54YQdvqjjoL85lKAipKeozbpBZ5qx9h1lwZPlto4C2WaFlWutux9yzK8pTH
eQweK5E9Kw1BSIvqwaEZBulL1p0yLzl4WYxGVB0Vr/KKzXeBNwPb6x5nJzetXL+H
DNIpXd7ccVOiEs1ZlDjyh5tnMqOAjpIniSeAEWo/+4eLN1fKitukfZ6EKeLKqXBn
7VFTL7wxeJd2Mw++8KjB/bklC4dHXYiAEyAKUIgz8SdLy4LUReq9v/6v/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSro9plgPkqEQaZgYZiS0JKpFKFMB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTgOtFOO
p3jTuLktU7BthiMfIuJ5jbzUJkyxBOeIc9oci1rD2G8+vnHC1QaWgV3FERa0kzMc
uPDC2L7+qsa9PHd8ENzNHGpNYLOEteYU6qVNckgrmUt5BrYZt3A+KuhZB9OYKwVl
LvN1Wm7IlPlG9m2FeJL9DSaoQJhPjxZzpHFQZmaYw9bMRVTf8uWVdO+h6Vs8auxa
9jRihK7ZJ2ZoPXLoT3Bsi3mniobC1/kB2jRMST67Zq2UptOvoi73sQJmpuJxVD2j
UxsJWkszxG9Z7/CSvHBcoUPZHyW3e7DObsFPi67x9phAboJqU5rwBhX8Fme7foaf
bZxV8cnUO8v2jA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:56:40 2026 by rpki-client