Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
File: yeDkyay_cB-TAUmzJc4ELPn5Klk.mft (raw, json)
Hash identifier: bAiLkQuFH1GImDzzEPLVRMGhxAIPvNcxynXHwgvtWbg=
Subject key identifier: CA:8B:C1:13:F3:FB:46:A1:40:FA:21:A4:6B:EC:DD:D6:6F:5C:DF:C7
Authority key identifier: C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
Certificate issuer: /CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Certificate serial: 019FA9ABA2328AD6DF72329C0A4CD7DEC9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
Manifest number: 1281
Signing time: Tue 28 Jul 2026 17:00:25 +0000
Manifest this update: Tue 28 Jul 2026 17:00:25 +0000
Manifest next update: Wed 29 Jul 2026 17:00:25 +0000
Files and hashes: 1: 0Lwj5i1c4Zxo9S7reLT043tZQto.roa (hash: YQ43Pzm8kIwiUn3utvGc8HdrkEgRWVgYKvbGV3IgZ04=)
2: yeDkyay_cB-TAUmzJc4ELPn5Klk.crl (hash: D3ZEHnyVSVIsc2KxROVimFhMEhMSZ/i8tfZa1dQ5yv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:a2:32:8a:d6:df:72:32:9c:0a:4c:d7:de:c9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9e0e4c9acbf701f930149b325ce042cf9f92a59
Validity
Not Before: Jul 28 17:00:25 2026 GMT
Not After : Jul 29 17:00:25 2026 GMT
Subject: CN=ca8bc113f3fb46a140fa21a46becddd66f5cdfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:45:03:57:c9:c6:57:03:6a:2a:27:ec:ed:
53:58:65:c9:81:08:8b:0d:d2:a9:d6:99:43:68:51:
73:bf:25:3c:84:fc:bd:bd:30:4b:c2:01:a7:11:d7:
db:e1:5e:d4:e4:0b:06:0b:94:67:d9:2b:29:39:e7:
6b:ce:b5:3a:78:29:b8:ed:b7:58:f0:c7:03:7f:aa:
ba:54:68:b6:35:8c:a7:33:c2:1c:4d:1f:44:80:54:
51:d3:5c:f9:a8:b9:da:99:b6:77:b6:20:31:cd:08:
e1:03:bf:f4:56:65:f2:2d:57:07:8d:06:5e:96:e8:
cf:67:6a:7a:2c:6d:91:44:40:01:da:80:49:3f:db:
47:08:1b:e2:c1:89:fb:0d:f3:f4:96:a7:c6:43:c5:
a0:7d:64:e3:8c:b8:d1:60:bd:1e:e2:41:e1:80:2c:
0a:a5:f2:fe:58:ef:cc:82:f2:7f:1b:22:5b:6f:18:
4a:06:c9:7f:cd:cf:86:df:74:a5:8e:72:db:62:df:
df:42:9b:51:a6:90:d3:e1:a3:dc:16:25:dc:6e:e1:
dd:96:4b:39:97:f8:b1:26:40:df:0f:21:a3:f3:cd:
24:f7:99:36:27:a4:d3:32:c4:42:69:f6:07:43:08:
94:80:c1:cf:c7:a1:17:b3:f4:b3:87:96:55:96:7b:
c6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8B:C1:13:F3:FB:46:A1:40:FA:21:A4:6B:EC:DD:D6:6F:5C:DF:C7
X509v3 Authority Key Identifier:
keyid:C9:E0:E4:C9:AC:BF:70:1F:93:01:49:B3:25:CE:04:2C:F9:F9:2A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeDkyay_cB-TAUmzJc4ELPn5Klk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fdb641-d1a3-4dda-bf91-be7c828c3693/1/yeDkyay_cB-TAUmzJc4ELPn5Klk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:66:d5:4a:93:97:f9:56:de:35:ab:6e:7f:80:be:c5:a6:db:
ff:d1:fd:de:48:5f:73:e7:16:0a:50:d5:95:39:c4:e0:75:62:
3c:1c:8f:4e:5b:85:0b:20:27:71:65:9b:e5:41:61:bd:e5:a5:
4a:2e:e1:2d:34:ab:54:e2:bf:35:98:39:e8:51:c6:d2:ce:18:
2b:2d:d7:77:4f:28:1b:c4:d0:ee:af:eb:ac:35:ac:16:76:1d:
6b:88:0c:47:1f:87:31:8c:5c:c9:e2:da:77:7b:f5:c5:b3:dc:
9d:00:4d:d9:ed:00:93:6e:4b:5d:49:b2:ce:b9:02:84:b2:a5:
e2:3a:54:2f:4e:54:03:dd:28:56:b3:c1:26:86:62:70:96:30:
6c:a0:6b:08:7b:4d:21:2b:b9:96:97:cb:85:cb:c4:52:15:80:
3a:42:5f:c3:ae:61:c4:f7:22:63:0b:a4:4a:ea:68:18:3a:47:
4a:e4:73:f4:af:b1:5b:b6:c5:e0:df:79:bb:69:61:14:4d:cf:
c4:2d:40:6d:8e:91:fd:9a:ad:b3:13:cf:ab:24:46:5d:5a:60:
b4:6a:77:26:b6:8f:0c:59:7d:74:9a:8d:02:2d:5a:18:59:5b:
06:ac:25:ab:54:39:02:5b:87:cd:18:3b:13:5f:ad:d2:88:7b:
e8:b7:85:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq6IyitbfcjKcCkzX3smtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZTBlNGM5YWNiZjcwMWY5MzAxNDliMzI1Y2UwNDJjZjlm
OTJhNTkwHhcNMjYwNzI4MTcwMDI1WhcNMjYwNzI5MTcwMDI1WjAzMTEwLwYDVQQD
EyhjYThiYzExM2YzZmI0NmExNDBmYTIxYTQ2YmVjZGRkNjZmNWNkZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4hFA1fJxlcDaion7O1TWGXJgQiL
DdKp1plDaFFzvyU8hPy9vTBLwgGnEdfb4V7U5AsGC5Rn2SspOedrzrU6eCm47bdY
8McDf6q6VGi2NYynM8IcTR9EgFRR01z5qLnambZ3tiAxzQjhA7/0VmXyLVcHjQZe
lujPZ2p6LG2RREAB2oBJP9tHCBviwYn7DfP0lqfGQ8WgfWTjjLjRYL0e4kHhgCwK
pfL+WO/MgvJ/GyJbbxhKBsl/zc+G33SljnLbYt/fQptRppDT4aPcFiXcbuHdlks5
l/ixJkDfDyGj880k95k2J6TTMsRCafYHQwiUgMHPx6EXs/Szh5ZVlnvGaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqLwRPz+0ahQPohpGvs3dZvXN/HMB8GA1UdIwQY
MBaAFMng5Mmsv3AfkwFJsyXOBCz5+SpZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEt
YmU3YzgyOGMzNjkzLzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGI2NDEtZDFhMy00ZGRhLWJmOTEtYmU3YzgyOGMzNjkz
LzEveWVEa3lheV9jQi1UQVVtekpjNEVMUG41S2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmbVSpOX
+VbeNatuf4C+xabb/9H93khfc+cWClDVlTnE4HViPByPTluFCyAncWWb5UFhveWl
Si7hLTSrVOK/NZg56FHG0s4YKy3Xd08oG8TQ7q/rrDWsFnYda4gMRx+HMYxcyeLa
d3v1xbPcnQBN2e0Ak25LXUmyzrkChLKl4jpUL05UA90oVrPBJoZicJYwbKBrCHtN
ISu5lpfLhcvEUhWAOkJfw65hxPciYwukSupoGDpHSuRz9K+xW7bF4N95u2lhFE3P
xC1AbY6R/ZqtsxPPqyRGXVpgtGp3JraPDFl9dJqNAi1aGFlbBqwlq1Q5AluHzRg7
E1+t0oh76LeFEw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:17 2026 by rpki-client