Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: /tMw8DVXUIHeCX/xzVIeq1WegMMpAW85sClLVV5wmbA=
Subject key identifier: 0D:CF:99:5E:91:7C:62:3A:C4:FC:CD:8E:75:03:4C:5E:C9:26:F6:33
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019FA9E319B92D4D8D8AF2596F92DF02F110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:01:00 +0000
Manifest this update: Tue 28 Jul 2026 18:01:00 +0000
Manifest next update: Wed 29 Jul 2026 18:01:00 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: BHP2r8sjj1oEF63tUaQKfbvrojTiDRXoxGEWI3gSmIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:19:b9:2d:4d:8d:8a:f2:59:6f:92:df:02:f1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jul 28 18:01:00 2026 GMT
Not After : Jul 29 18:01:00 2026 GMT
Subject: CN=0dcf995e917c623ac4fccd8e75034c5ec926f633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:91:3d:da:30:61:c1:12:57:0d:da:31:53:
d6:79:dd:ef:10:38:6f:14:9c:02:b4:38:33:d5:3a:
83:63:fa:3c:75:f3:8c:da:8b:28:f0:9f:12:11:3c:
12:83:4f:fb:a9:71:e9:c0:37:5f:e4:20:7b:e9:64:
86:e2:7a:6a:ec:1d:0a:cc:fb:62:e2:3a:5a:fc:a8:
5c:5d:3d:eb:fd:57:d5:6d:0f:d0:65:6f:3a:3c:6d:
5a:ea:c7:cb:4b:f9:0f:ca:56:94:69:44:de:ce:15:
b0:1a:11:50:ff:2f:aa:8c:67:0e:a6:e1:22:ab:ae:
1f:64:ec:b7:1d:bd:d5:61:2a:d9:20:5e:66:7f:6e:
60:ab:13:68:f1:9d:4a:db:d2:32:6d:d8:f1:34:48:
d7:e4:c7:f0:84:47:40:0e:e3:91:fb:5d:33:38:f3:
1c:42:50:7b:a3:06:6b:e6:5e:d2:30:1f:91:e7:a1:
d5:e0:7f:50:ee:91:e0:69:f3:87:b2:ec:6e:bc:63:
e1:ef:a6:72:24:1d:90:6a:39:73:e4:96:ed:97:fb:
5c:8c:f2:2c:77:a3:6f:1b:a0:6c:db:26:1e:53:ec:
9d:23:cc:8f:60:53:d8:f0:b1:b0:8c:fd:c6:e3:aa:
17:50:30:43:b1:ba:e3:aa:61:90:80:55:cf:99:2b:
20:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CF:99:5E:91:7C:62:3A:C4:FC:CD:8E:75:03:4C:5E:C9:26:F6:33
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:de:4a:ae:40:c4:98:9b:29:c3:79:50:aa:bc:ca:49:aa:
f4:04:84:d4:f8:e3:2e:fe:c0:98:e4:22:55:2a:82:4a:a5:00:
b5:14:c9:6a:37:39:ed:d5:a8:8d:1c:11:b2:73:a6:45:e9:f1:
74:ff:74:ba:b5:b3:8a:55:33:27:d4:f0:85:2f:df:1d:2a:f0:
e7:a0:05:a1:53:aa:59:68:8d:1e:7b:ba:f6:79:ed:94:34:1e:
0d:74:38:59:37:68:9b:cd:3e:b4:f9:f6:81:e1:85:00:ca:d2:
0c:f2:c2:ec:1f:e3:58:6e:c3:8e:37:c5:6d:6d:4a:c5:13:af:
f3:c2:cf:e0:89:c7:28:19:af:4a:45:23:e2:3d:78:df:c1:3e:
fb:d6:38:1a:f8:8a:1a:9c:da:1d:6a:8c:dc:5d:cf:58:39:8d:
2b:90:ba:74:9d:89:11:67:dd:69:a8:06:d9:f6:8b:07:81:18:
77:d2:70:e5:a5:15:8a:32:11:c6:4b:3a:3b:fb:06:f9:c6:41:
fd:f5:b1:f7:e9:6f:03:60:4e:81:1f:60:00:aa:99:1c:e0:e8:
97:71:cb:fe:f5:d9:72:e2:9d:88:cd:dd:45:33:50:aa:d5:1d:
8a:53:cc:82:1b:ae:b4:80:68:40:6e:00:0a:e3:7d:94:87:ab:
fe:87:e0:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4xm5LU2NivJZb5LfAvEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZWQ2NGM5M2RkZmRmMmY0OWI3ZWExYzIzZWFhZDA4NzAy
NDlhMzMwHhcNMjYwNzI4MTgwMTAwWhcNMjYwNzI5MTgwMTAwWjAzMTEwLwYDVQQD
EygwZGNmOTk1ZTkxN2M2MjNhYzRmY2NkOGU3NTAzNGM1ZWM5MjZmNjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyORPdowYcESVw3aMVPWed3vEDhv
FJwCtDgz1TqDY/o8dfOM2oso8J8SETwSg0/7qXHpwDdf5CB76WSG4npq7B0KzPti
4jpa/KhcXT3r/VfVbQ/QZW86PG1a6sfLS/kPylaUaUTezhWwGhFQ/y+qjGcOpuEi
q64fZOy3Hb3VYSrZIF5mf25gqxNo8Z1K29IybdjxNEjX5MfwhEdADuOR+10zOPMc
QlB7owZr5l7SMB+R56HV4H9Q7pHgafOHsuxuvGPh76ZyJB2Qajlz5Jbtl/tcjPIs
d6NvG6Bs2yYeU+ydI8yPYFPY8LGwjP3G46oXUDBDsbrjqmGQgFXPmSsgCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA3PmV6RfGI6xPzNjnUDTF7JJvYzMB8GA1UdIwQY
MBaAFMntZMk9398vSbfqHCPqrQhwJJozMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMt
MzVlZDViNTNkYTA1LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYTJhYjItMzA5OC00YTBmLTgwOWMtMzVlZDViNTNkYTA1
LzEveWUxa3lUM2YzeTlKdC1vY0ktcXRDSEFrbWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyneSq5A
xJibKcN5UKq8ykmq9ASE1PjjLv7AmOQiVSqCSqUAtRTJajc57dWojRwRsnOmRenx
dP90urWzilUzJ9TwhS/fHSrw56AFoVOqWWiNHnu69nntlDQeDXQ4WTdom80+tPn2
geGFAMrSDPLC7B/jWG7DjjfFbW1KxROv88LP4InHKBmvSkUj4j1438E++9Y4GviK
GpzaHWqM3F3PWDmNK5C6dJ2JEWfdaagG2faLB4EYd9Jw5aUVijIRxks6O/sG+cZB
/fWx9+lvA2BOgR9gAKqZHODol3HL/vXZcuKdiM3dRTNQqtUdilPMghuutIBoQG4A
CuN9lIer/ofgCQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:30:15 2026 by rpki-client