Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: Q1gJJtJNUt2gCWr9XPpmIUb67NIsVculPVhey1qO0nc=
Subject key identifier: 8A:5A:1F:3F:AA:C7:EB:49:2C:44:87:46:7A:24:B6:0D:0E:D2:D4:9D
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019FAAF579F219C8B68B7DDE7BF9470ECD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 1248
Signing time: Tue 28 Jul 2026 23:00:41 +0000
Manifest this update: Tue 28 Jul 2026 23:00:41 +0000
Manifest next update: Wed 29 Jul 2026 23:00:41 +0000
Files and hashes: 1: BV_wbDPbUT8cQpcSNghKFwGtfvA.roa (hash: ICfuWyqr7El/ZDMz8MEEp0z3PKwy83J5F2WdPeRDG0A=)
2: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: U2oPcVJ8jr4bTRpn7c40Jmpd4hXyh2YKJy1M56+qYuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:79:f2:19:c8:b6:8b:7d:de:7b:f9:47:0e:cd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jul 28 23:00:41 2026 GMT
Not After : Jul 29 23:00:41 2026 GMT
Subject: CN=8a5a1f3faac7eb492c4487467a24b60d0ed2d49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:ed:05:ff:2d:b0:02:e6:3c:2f:b0:98:0b:
9f:6f:b5:38:1b:6d:e8:6c:ce:c7:e1:9b:df:ca:4e:
9f:91:d9:3f:db:76:94:ec:b7:c0:97:34:a0:6e:41:
dc:e6:d2:87:33:ac:ac:35:88:ba:a1:31:2e:0e:54:
1e:db:1a:13:3e:01:1e:52:be:aa:29:b3:55:ac:4e:
71:44:2d:22:fd:45:7d:0b:12:0d:b7:bb:48:55:ba:
3e:49:78:52:49:87:4c:a9:dd:e7:a4:d3:47:ef:77:
9f:04:77:c9:42:d2:48:69:31:ab:21:4c:83:15:69:
b0:80:f3:84:14:02:b9:fd:dc:18:a0:81:cf:38:33:
cf:2a:ef:72:47:7f:7d:ca:31:90:12:fd:d3:50:ea:
63:8f:52:1a:78:92:71:65:b0:99:85:61:41:b2:fd:
c7:e6:98:69:c8:60:cb:4a:cf:d4:17:17:d9:44:62:
02:63:d6:7a:30:8b:d5:a6:8f:47:8e:5e:d0:61:48:
40:c6:d4:ba:68:6c:09:47:51:5e:a9:f0:09:c9:79:
85:7e:b2:39:de:88:80:1a:a6:03:7b:43:11:3b:77:
36:83:8b:b9:f2:80:9f:d4:ff:63:5e:35:86:68:f3:
74:b8:e8:d2:7d:1a:e1:76:c3:7a:24:1d:13:72:f8:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:1F:3F:AA:C7:EB:49:2C:44:87:46:7A:24:B6:0D:0E:D2:D4:9D
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:21:27:69:29:36:ff:63:dc:d6:f3:33:3c:f8:0d:4d:e6:ad:
84:61:43:91:1e:45:cb:c3:0b:81:98:17:ea:58:b3:0e:26:4d:
d7:3e:ec:3a:79:dd:5f:df:ea:75:a7:95:54:f5:3f:29:28:b9:
dd:1d:ec:25:7e:1f:fd:14:65:de:b2:2a:1f:81:f3:f0:c3:bd:
24:cf:2a:36:13:bb:1c:e2:5e:85:11:ec:77:76:b2:ad:33:7c:
72:42:b0:15:d2:6a:7a:ea:9e:b7:79:ac:a1:48:b1:2d:c0:20:
63:41:a8:96:3d:2b:4a:2e:f4:e4:9b:e4:87:73:6c:2a:f8:fc:
05:15:82:0a:5c:2c:a0:66:9e:ff:61:48:ed:3e:69:db:32:2b:
5e:52:71:d0:4a:14:a0:44:7c:7a:c9:c3:75:5b:57:f2:46:55:
82:bb:5e:06:49:03:37:e9:bf:79:c7:a1:83:d7:33:12:53:a5:
85:bf:3e:27:42:86:13:bd:20:8f:a4:07:d6:5b:0f:85:2f:78:
06:62:e0:d3:0b:c5:eb:d4:0b:73:d5:69:35:41:73:f2:fd:e3:
18:6c:24:1a:e3:8f:85:a3:48:fd:0d:dc:a3:3a:7b:f0:c2:fa:
8d:40:03:6b:75:42:09:f8:0d:ee:20:2a:3a:52:2f:53:f4:db:
78:17:42:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:01 2026 by rpki-client