Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
File: _yXZxSk7p7_lIHSsJ_x9-aZJshs.mft (raw, json)
Hash identifier: t8oaruKU9iIt+nIG9qEHxWGOUn6OkaqJamMJ4CfBlro=
Subject key identifier: 1A:2D:85:32:07:5F:EE:45:2F:DE:43:1A:2C:3E:93:D1:07:0D:9A:F7
Authority key identifier: FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
Certificate issuer: /CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Certificate serial: 019FAC7687CCC4C41871FA6F2A2FE4003AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:16 +0000
Manifest this update: Wed 29 Jul 2026 06:01:16 +0000
Manifest next update: Thu 30 Jul 2026 06:01:16 +0000
Files and hashes: 1: VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa (hash: 07v8p+Qbq8NkDFnmR77Sitj/ACMVAdh3jZDXmBPQOXA=)
2: _yXZxSk7p7_lIHSsJ_x9-aZJshs.crl (hash: B9+8BSmaDHJXISow7DJg8VSzV/msMxV7LDK6M5FUO5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:87:cc:c4:c4:18:71:fa:6f:2a:2f:e4:00:3a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Validity
Not Before: Jul 29 06:01:16 2026 GMT
Not After : Jul 30 06:01:16 2026 GMT
Subject: CN=1a2d8532075fee452fde431a2c3e93d1070d9af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:0a:dc:44:b7:80:d3:cf:78:69:6c:e1:3a:
5e:7a:63:79:8d:bb:d9:fb:4c:e4:1b:cb:e6:e6:6d:
e0:4e:a0:e8:35:f5:52:38:4b:84:38:e1:f8:70:82:
4c:11:94:72:70:6a:ec:6a:95:ff:3d:ed:49:e8:b1:
0b:3e:70:44:21:73:39:ed:14:8c:2e:b7:ba:fa:f5:
39:3d:f1:4a:60:fa:f4:5e:2a:a2:fa:31:39:7c:6a:
68:2e:cc:6a:53:b1:c3:ef:4b:2e:5e:88:77:8d:7f:
42:55:fc:bb:49:6b:91:77:dd:df:88:cd:f2:c5:a9:
4f:37:e4:b1:5e:d8:65:b3:f6:14:45:7e:b7:a0:ac:
87:62:c6:5a:b6:31:62:66:3a:84:9f:68:04:56:a0:
8d:26:e3:87:50:a5:f7:83:43:94:32:64:1b:bd:cb:
eb:9f:7e:de:84:9e:72:48:70:e8:8b:eb:71:85:60:
f4:81:f4:ab:35:48:c8:ab:50:af:fb:6d:5c:40:cf:
5c:99:61:9f:9e:02:d7:fd:ed:ac:ce:2b:1a:27:f3:
45:7a:95:72:21:e4:83:b4:78:ee:46:60:24:21:46:
96:04:7b:b5:0b:2a:f2:c9:4d:55:d1:bb:92:c6:16:
70:de:0e:27:c3:43:7d:e5:38:f7:ed:f6:15:7e:10:
eb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2D:85:32:07:5F:EE:45:2F:DE:43:1A:2C:3E:93:D1:07:0D:9A:F7
X509v3 Authority Key Identifier:
keyid:FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:f9:cd:b5:8e:31:41:e6:a3:31:e3:37:ad:07:69:fe:36:
03:d6:bf:d0:3b:8a:65:2b:69:53:a8:9b:ee:cc:00:9a:fd:b4:
a6:9b:50:2b:e9:45:db:47:de:fc:f8:01:d9:e3:ba:9d:8d:9d:
cd:25:ff:0e:28:48:b3:48:d2:b7:8f:53:6f:a5:83:39:bd:55:
bd:22:d9:1e:68:fe:1b:10:7d:60:0c:b7:82:81:cb:98:1e:2a:
14:0c:a0:30:b7:89:50:3d:8c:b4:bb:c2:be:37:00:a1:34:cb:
53:f4:d3:a3:ee:21:57:42:32:f8:f1:51:0c:30:31:36:07:e4:
0e:89:1f:27:a9:ae:ab:80:9f:32:68:e0:7c:75:ad:d7:a2:50:
79:83:d0:fd:01:e9:14:fa:37:65:68:f1:b1:43:89:6f:c5:52:
49:38:0b:46:f3:ea:89:9f:35:21:f6:18:47:97:18:6a:a3:d1:
c4:97:be:25:14:c6:ec:92:bf:ec:67:8e:fe:5d:31:97:d7:30:
d2:89:ab:18:82:a2:22:2e:a0:d2:72:1f:04:e7:a7:35:34:92:
4c:8c:69:e0:08:c9:1d:c6:43:fc:cb:3a:79:eb:0c:6b:35:a3:
37:28:b4:28:31:1d:48:ed:9b:f0:5d:ea:bb:e1:3e:ee:14:b4:
16:11:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:44 2026 by rpki-client