Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: yN5BxdeZWLrbJRLzIQ1QDwo0FhTFGsNjT3yL6nr3oiY=
Subject key identifier: 60:1F:7C:1E:F0:F7:B7:9F:B2:0B:FC:96:A6:E4:35:31:70:C8:3F:A1
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019FAABE599CD729F9D6B2A92F6DCEA26123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 1208
Signing time: Tue 28 Jul 2026 22:00:29 +0000
Manifest this update: Tue 28 Jul 2026 22:00:29 +0000
Manifest next update: Wed 29 Jul 2026 22:00:29 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: Ow6QRNk4M14qEH4lsZmKnyGgPAbHGAxEhGixXkxDrTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:59:9c:d7:29:f9:d6:b2:a9:2f:6d:ce:a2:61:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jul 28 22:00:29 2026 GMT
Not After : Jul 29 22:00:29 2026 GMT
Subject: CN=601f7c1ef0f7b79fb20bfc96a6e4353170c83fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7b:79:37:2e:01:57:8e:02:f8:59:3b:97:e1:
51:aa:79:7b:20:e6:52:65:f2:fa:09:a1:d5:cc:b0:
e4:de:52:15:22:e5:14:64:25:73:de:97:01:ae:c2:
76:97:e9:40:d6:bc:db:e6:3a:91:6d:f6:0b:89:0b:
70:ea:75:71:9c:fc:6e:d5:bb:d7:b0:c6:5e:a4:ef:
67:c4:31:e0:5f:27:90:39:fe:11:61:d0:89:c5:0f:
93:cf:1b:b7:ee:de:65:4a:19:b0:1b:11:5a:23:9e:
ef:63:7f:6b:13:83:3c:af:15:4d:1a:17:a6:ae:54:
f3:c5:c3:5d:f1:16:03:ec:91:d2:74:40:3c:50:32:
5b:ff:73:82:44:ed:5a:39:4b:aa:06:b3:df:b3:3b:
26:45:f5:32:38:0c:95:58:5d:6e:04:a2:ae:90:5a:
d3:59:cf:4c:6b:c5:e1:45:33:85:b7:0c:79:4a:e3:
64:32:c3:5e:01:b5:78:62:91:c9:73:cb:e2:48:c9:
77:9f:58:e1:2b:74:82:d5:eb:4a:2c:14:06:b0:58:
11:39:7d:f8:98:04:b6:89:66:71:c4:5c:ff:74:96:
a4:40:28:28:5d:eb:51:b3:fa:51:33:7e:ef:b4:41:
af:16:76:e8:20:f0:a0:ca:45:c0:69:0b:e5:2f:d0:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:7C:1E:F0:F7:B7:9F:B2:0B:FC:96:A6:E4:35:31:70:C8:3F:A1
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1b:5b:a8:8e:3f:08:f1:ec:45:f6:b0:f2:6d:8a:df:e4:7f:
30:5a:b4:8b:bb:63:67:85:5e:8c:a6:d4:99:85:d2:43:d5:aa:
85:5e:5f:1e:0e:91:ee:a1:68:5d:af:21:01:f3:c9:69:e6:af:
af:3d:a7:75:1d:61:3b:bf:ba:9e:36:a9:3e:56:ed:0c:7e:dc:
94:71:ae:8e:19:f0:18:ce:f1:43:1e:ab:9c:71:40:1b:be:c2:
22:e0:42:45:0e:a6:0f:54:0a:29:7f:7f:cf:9d:f6:80:8a:e0:
c0:ea:32:ee:71:03:b0:f8:d4:41:22:5f:87:7e:a6:b3:3a:fc:
b7:a7:a7:f9:93:3f:4a:89:01:7b:e6:43:5a:26:9d:56:f2:a2:
26:b9:93:0a:f0:e9:4e:00:91:03:a7:c5:43:86:30:51:8c:d7:
ed:62:2f:94:0f:66:53:08:64:37:a7:a2:f0:c3:39:19:b7:1c:
3b:78:ae:bc:cc:f1:a2:da:af:d8:be:26:ec:e8:df:9b:68:34:
ee:33:6c:07:43:cf:06:b0:0d:0b:42:12:97:8a:d5:09:df:41:
78:16:e1:9c:57:ab:a8:5f:cd:5f:a1:85:99:7d:78:c3:49:75:
8f:ef:d1:c4:62:a5:17:e5:3e:e1:0c:e5:5d:2c:5e:82:92:e5:
83:cb:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:13:55 2026 by rpki-client