Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: Uyg2zGs02ceM6JNk69qisS7Dde7MTmvrcwZSl7nxuLo=
Subject key identifier: BE:84:EF:C8:5B:D4:99:52:C9:69:4F:FB:83:6A:6D:60:2F:31:9F:F0
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019FACACCDD1BE6A5CF9B459A342FB9A7407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 100E
Signing time: Wed 29 Jul 2026 07:00:33 +0000
Manifest this update: Wed 29 Jul 2026 07:00:33 +0000
Manifest next update: Thu 30 Jul 2026 07:00:33 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: Q+2kZTMisLDsNymMmk2XYZBR8vc8FEGE8RIEM1a+I1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ac:cd:d1:be:6a:5c:f9:b4:59:a3:42:fb:9a:74:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Jul 29 07:00:33 2026 GMT
Not After : Jul 30 07:00:33 2026 GMT
Subject: CN=be84efc85bd49952c9694ffb836a6d602f319ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6b:2f:19:ae:97:3f:ce:fa:dd:cc:30:d0:03:
91:c0:83:0f:01:d6:15:b1:67:4c:c9:d7:b1:3f:95:
68:09:2b:69:6c:d0:82:37:78:84:41:a3:0d:a5:08:
dd:a3:5e:98:3c:1e:f7:47:d8:b7:49:aa:57:9b:6f:
1d:15:de:ec:64:08:7f:99:e7:4b:2d:16:4f:cc:b2:
41:30:ae:0c:7c:28:57:d4:02:69:a0:f5:1d:e1:eb:
09:5f:ee:ea:ff:ee:15:d1:3a:c4:4e:c8:55:c6:b2:
61:93:d4:56:72:7b:a3:6d:58:5d:5f:2c:4e:ef:e7:
90:7c:67:a4:8d:0c:5a:27:1c:83:18:58:4b:64:d4:
ec:e4:8d:63:e3:fb:1b:44:b0:69:1a:75:55:a6:57:
a2:91:81:4f:15:d9:08:87:0b:fc:c4:96:16:84:82:
a7:96:1d:d0:1c:df:b6:7c:d6:d2:eb:82:f2:f3:3b:
0f:c5:b1:aa:35:9c:03:2f:3e:4b:7d:8d:49:08:a1:
81:e2:e7:5c:b4:b8:bf:6c:a2:0c:ec:9a:ad:ed:f9:
c1:a0:f9:22:ce:28:3d:cb:30:40:cc:a5:11:2e:8a:
22:c9:ad:9b:81:08:88:81:48:0c:dc:52:5d:03:3a:
62:37:ec:98:38:16:f8:b8:2e:db:ac:60:4c:f0:2d:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:84:EF:C8:5B:D4:99:52:C9:69:4F:FB:83:6A:6D:60:2F:31:9F:F0
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:fc:05:2f:1b:c0:13:81:01:2a:4e:9d:6b:e7:17:d7:31:
8f:2b:f0:ad:24:e7:df:0e:3f:8c:f4:21:51:3f:f1:00:0e:cc:
a7:22:01:98:58:de:70:14:5f:02:39:7c:9a:0a:95:75:5a:da:
84:3d:19:50:bb:9b:0f:b3:82:93:15:50:f4:fe:7a:84:87:7f:
9b:3d:79:5e:19:97:8f:2b:92:04:2c:a7:dd:86:a8:2d:d3:ba:
92:41:78:9c:ce:10:f6:db:86:a5:12:95:4c:2f:15:29:49:59:
b6:e8:c8:29:57:87:6c:72:ad:8b:b7:c2:2d:6c:64:d3:38:ee:
2b:a4:94:f3:07:d2:39:4d:7f:46:14:7d:11:dd:5a:7c:8d:61:
32:db:94:6a:44:d0:c9:08:9c:4c:7f:35:54:5f:fc:a6:af:e6:
f2:6e:f5:e3:f8:e0:8b:3d:d1:07:eb:44:7a:a9:66:50:cf:b9:
bd:e9:5e:7e:8d:ba:53:0b:db:1f:71:3c:19:9a:2c:1b:4e:f4:
7b:78:03:7b:4a:14:57:80:bb:da:99:3b:7e:1c:a8:79:b0:d2:
0a:04:5d:ff:6e:f6:64:4b:20:0a:29:cb:ed:b8:cf:2a:60:80:
13:7f:9d:24:c4:c5:a0:ac:45:42:40:74:b0:4b:0a:9f:7b:f2:
aa:0d:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:14:06 2026 by rpki-client