Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: M/bHGiP0UjttRQPCTWZO8/4gELiOTB4hB9xSqj3soHU=
Subject key identifier: 8E:BF:24:AF:1D:E5:A2:02:15:29:3C:3F:E6:3E:50:EB:ED:DF:C7:FA
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 019FAA876EB81D81B337B83D0ABA0D4289A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 08E5
Signing time: Tue 28 Jul 2026 21:00:30 +0000
Manifest this update: Tue 28 Jul 2026 21:00:30 +0000
Manifest next update: Wed 29 Jul 2026 21:00:30 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: c6MSj+5p6gmQQEjVqUOdXvo+q6/HURMZ1T2d52ddtkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:6e:b8:1d:81:b3:37:b8:3d:0a:ba:0d:42:89:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Jul 28 21:00:30 2026 GMT
Not After : Jul 29 21:00:30 2026 GMT
Subject: CN=8ebf24af1de5a20215293c3fe63e50ebeddfc7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:c5:93:0d:d5:fb:10:d2:06:40:25:5e:ca:
e2:d6:20:fc:10:e6:1f:7f:4b:87:df:92:00:ae:5d:
90:1c:70:51:06:ed:52:ec:a5:df:16:21:b2:75:0e:
28:99:21:e5:10:cd:af:47:b4:f1:d4:fd:ab:54:c3:
30:0e:20:8b:bb:33:7e:0e:28:5d:c2:98:d8:2a:7a:
78:91:a0:f9:c4:cd:5c:3d:1e:e2:e9:a5:27:c2:8b:
91:cb:bc:a7:d7:82:de:87:24:10:e3:9a:dd:9b:f2:
92:0f:83:01:29:ab:bf:64:70:bd:19:9f:eb:3e:eb:
72:c8:a7:46:93:84:d8:c7:c3:bd:fc:dc:a1:cf:1b:
ba:36:97:55:f5:da:4e:81:2d:63:3a:24:f4:a5:2c:
fa:9b:37:17:04:1c:1e:f3:b0:ae:be:58:0a:80:53:
8b:e2:23:c2:80:43:c5:7d:f8:61:fb:88:bd:22:b8:
f7:64:bc:d9:26:d2:7c:8d:ef:75:1a:3c:83:99:8b:
76:5d:f3:80:58:03:73:d9:5c:25:c0:1e:80:2d:49:
57:c0:95:83:4c:c8:c5:74:05:ad:8c:a2:d7:17:af:
b4:42:7b:df:2b:e2:2a:dd:3b:94:b6:bf:91:ea:6b:
d8:69:1e:9c:0e:d8:8c:ec:ea:4f:eb:18:dc:26:82:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:24:AF:1D:E5:A2:02:15:29:3C:3F:E6:3E:50:EB:ED:DF:C7:FA
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cc:17:65:76:d3:27:d3:dc:25:3a:f3:a1:9c:57:4a:93:1a:
87:f3:57:13:e0:98:7d:11:7b:ba:65:f0:1f:67:a5:f7:9f:31:
ed:91:f4:3e:58:c2:d1:7f:55:62:ec:37:4f:94:00:44:b8:70:
a0:a6:67:00:00:a3:1b:f2:6a:5c:54:f8:71:da:cb:b5:29:25:
01:52:6b:88:9f:2d:21:84:c1:e9:12:42:8c:2c:26:53:c2:57:
a3:b9:0b:8a:fd:ca:6c:bd:24:67:35:8f:f9:b4:b1:36:b3:74:
94:f3:9c:02:11:e4:a0:6b:6d:ff:01:86:c3:17:4c:c5:23:7d:
f0:1b:d8:92:ab:8f:56:12:a1:6a:bf:0d:70:7b:a4:e3:7d:e3:
94:83:99:08:b3:8e:58:ae:dc:b8:2f:43:96:42:6b:22:33:36:
70:15:c1:63:63:62:b6:16:ff:7d:73:da:39:54:63:1d:69:c5:
69:89:93:c8:95:50:1c:7a:68:6d:d0:7c:35:bd:64:5a:a7:6d:
9c:ee:a1:bd:2f:10:bb:0f:2a:01:50:b7:23:9f:7c:85:f0:ed:
5e:94:60:6a:33:92:af:b6:ba:c8:77:34:3b:4e:68:db:21:71:
ec:6b:2d:cd:83:76:66:45:38:96:6d:06:73:c9:0f:b0:f1:fb:
db:6d:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:45 2026 by rpki-client