Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: fLsNyD+ZYcrEKddit7YG1Os5Iv2WFVwbOBgeJEvnR5A=
Subject key identifier: B7:EA:F3:AD:6A:9D:F2:84:0F:DF:6F:8A:DC:2A:3D:4E:53:96:24:F0
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019FAE2D77A7294C9D71966A364D35F8AB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 0825
Signing time: Wed 29 Jul 2026 14:00:42 +0000
Manifest this update: Wed 29 Jul 2026 14:00:42 +0000
Manifest next update: Thu 30 Jul 2026 14:00:42 +0000
Files and hashes: 1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: g3AXLquUCjjjH4617/cRVN2/HeJrxJFUtPHykrfHxbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:77:a7:29:4c:9d:71:96:6a:36:4d:35:f8:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Jul 29 14:00:42 2026 GMT
Not After : Jul 30 14:00:42 2026 GMT
Subject: CN=b7eaf3ad6a9df2840fdf6f8adc2a3d4e539624f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:00:16:30:38:31:64:73:49:2e:57:65:2c:
f8:2b:c6:b9:d6:01:6a:25:a2:46:15:5d:b4:21:20:
97:f8:8d:d1:77:9d:19:4b:54:2a:6c:de:b8:49:ae:
2c:46:a7:b2:71:fb:52:fa:22:c5:2f:0f:35:2c:5a:
33:f2:2c:bb:8a:61:c3:39:18:bf:85:25:fb:90:33:
75:4b:e7:00:3e:a7:f0:f3:9e:ba:f3:7d:77:ce:74:
f9:3d:3e:a2:68:94:27:d8:fa:89:6c:54:3f:d0:6b:
d7:3f:96:e1:af:eb:64:9b:49:ef:b2:07:e8:bc:7f:
7a:8d:1c:a2:6e:34:3c:b0:a0:9a:2a:64:ec:00:66:
f2:b0:b1:25:ed:15:49:a5:e7:cd:a0:b7:c9:c0:77:
d8:9f:cc:50:91:34:17:ff:75:76:5e:e8:e1:05:9a:
81:b7:a1:30:da:1d:0d:8a:ac:f8:30:76:2a:9d:60:
f6:f8:91:d5:da:60:f0:08:93:0e:97:00:69:05:b3:
32:1c:58:10:f2:49:c5:66:98:d2:99:3a:33:05:f4:
ea:2d:9b:a5:4b:b9:de:9f:02:78:69:16:c1:f3:be:
08:26:f2:15:1b:3f:ac:a5:e0:20:22:14:e2:b5:24:
5d:f9:1e:34:45:f6:a4:db:0f:4c:30:01:54:06:0a:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EA:F3:AD:6A:9D:F2:84:0F:DF:6F:8A:DC:2A:3D:4E:53:96:24:F0
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0d:09:20:0f:a0:1d:47:c7:f4:e3:89:b8:27:86:cb:35:de:
cf:fa:9c:12:9c:11:27:6b:59:b3:3a:41:61:b8:72:21:8a:02:
33:62:ed:d3:11:6a:f9:cb:00:de:0b:2c:01:45:7f:ec:4f:48:
42:46:fd:c3:26:db:80:58:7e:b0:7e:e0:95:b9:72:47:aa:67:
4f:5a:f0:8c:2c:fb:9a:2f:d1:1e:c5:42:62:96:bd:0a:36:d0:
d8:96:ca:e8:11:fc:12:d3:ac:4f:c6:61:b6:27:28:e0:b5:83:
6a:6b:fd:a1:37:c9:ee:c1:0e:2f:aa:ff:5f:f6:20:cf:eb:e6:
ed:99:b5:e7:96:62:f9:09:99:bb:75:b3:69:41:18:9c:4f:fb:
18:d3:0f:9f:12:b6:53:02:60:5a:7c:4a:93:8c:a3:f5:24:6b:
73:3a:d0:e2:d5:ed:1b:9b:02:4b:5d:c3:2d:07:f9:46:3d:a3:
a9:2b:e4:ca:1e:6a:e7:6e:fe:1c:bf:d0:36:6a:2d:ab:07:0f:
e8:d9:b3:e7:92:f7:c6:d5:fb:4c:d5:bc:02:77:47:a4:3a:22:
c6:8b:81:f9:ca:65:10:05:ba:5b:54:3e:8c:11:3f:3d:8f:47:
3a:b3:6d:ae:57:b6:1f:39:55:49:b5:01:75:8e:da:b1:98:e0:
5b:44:39:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:24:44 2026 by rpki-client