Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: CnuHZRVpCmgdDuBoYLvzbgLBGkCxbY4dCf0gsrlxWEk=
Subject key identifier: 98:A3:03:30:5D:C7:BA:0A:AE:AB:25:17:AE:8F:DC:4C:03:0F:4D:6C
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 019FAAF574096E1BB1D30C4F0003316ED62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 080A
Signing time: Tue 28 Jul 2026 23:00:40 +0000
Manifest this update: Tue 28 Jul 2026 23:00:40 +0000
Manifest next update: Wed 29 Jul 2026 23:00:40 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: lmlMnPRmDq36PuNXi1GcOBzjRUnWJGvr1jSjs7BW0H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:74:09:6e:1b:b1:d3:0c:4f:00:03:31:6e:d6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Jul 28 23:00:40 2026 GMT
Not After : Jul 29 23:00:40 2026 GMT
Subject: CN=98a303305dc7ba0aaeab2517ae8fdc4c030f4d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:03:b0:44:8c:9e:76:ef:86:19:5e:05:dd:87:
a6:96:3c:a3:d2:e5:c8:a5:7f:4f:f8:2c:3a:41:43:
13:e1:6c:32:9d:d8:82:45:3d:cc:7d:b1:1f:f6:b0:
37:5a:26:45:8a:ea:6e:f0:9f:77:7e:6d:aa:df:8b:
df:50:b4:9e:5a:3e:2f:27:45:d1:b1:67:4c:aa:b4:
0e:b0:7b:9e:19:33:45:02:79:c4:48:c1:3c:f0:2c:
04:c6:10:46:8a:9d:12:65:1a:5b:dd:e6:9c:61:4d:
03:ff:0e:55:ae:35:69:ea:cb:7f:88:b9:8c:2f:9b:
0c:2a:5d:27:fe:c3:7e:4a:8f:22:4c:84:37:76:d6:
07:09:3f:21:7f:a5:48:d3:3a:fa:b5:56:57:7f:93:
61:af:cc:6b:52:d3:60:2c:36:ec:e6:b0:9f:ff:94:
7f:97:82:e6:92:d5:d1:63:de:b0:48:c6:4f:01:80:
85:1a:57:a6:94:b3:bb:45:41:18:b9:81:4f:37:52:
a7:fe:87:dc:71:1d:25:e2:c0:5d:b3:71:0f:c5:16:
f0:07:7f:9a:06:3c:b8:59:9e:01:8f:cf:b8:2f:ad:
d9:fc:66:c2:58:6e:58:b0:f1:c8:84:86:28:f7:5c:
70:23:bc:cd:3a:f2:77:17:43:de:d6:a3:be:94:a5:
ff:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A3:03:30:5D:C7:BA:0A:AE:AB:25:17:AE:8F:DC:4C:03:0F:4D:6C
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:34:5e:a1:f1:68:35:f0:05:e7:b1:46:07:ef:06:32:f9:65:
cd:b8:bf:74:1e:9d:fd:82:bd:48:3d:43:3a:81:9e:98:4b:c4:
e6:3b:ce:6f:de:1f:78:eb:40:90:79:f2:32:ca:33:42:3a:af:
9e:9a:bd:ea:14:74:96:40:1d:84:be:c2:a1:4d:28:12:1d:68:
26:29:ec:1a:6a:1c:b3:9f:52:e2:af:a5:73:d8:d6:2b:fb:05:
41:4c:17:23:71:aa:e0:56:32:1b:73:ff:c4:21:3c:b2:b3:2d:
bd:9e:7f:5a:4a:21:af:5a:eb:81:e6:58:87:05:e9:f6:1a:0f:
08:9e:5e:97:6f:ae:7d:4d:b4:20:d5:88:cb:13:00:38:49:67:
16:9d:98:4e:53:df:f6:32:67:a6:68:9f:28:22:32:95:67:cd:
9e:cb:97:13:6d:e2:61:c5:30:78:1d:1c:a9:2c:48:27:3c:9f:
fc:f2:cc:91:47:b9:eb:c1:58:a8:62:7e:29:6e:f8:83:b9:f8:
85:b8:22:de:4e:22:ea:98:e7:fb:e8:83:ed:fe:28:ac:bb:6c:
5c:84:e0:73:b9:90:7b:3c:d4:dc:7a:3a:66:9a:5d:9c:3f:0b:
7c:2c:47:89:4e:51:53:c7:2a:3e:2d:a1:59:e4:94:ed:25:2c:
71:c8:30:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:52 2026 by rpki-client