Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: YEwD4yLk0d/7NSxnq4hw652TmfbY9iYUWjfm3PEkAho=
Subject key identifier: E4:8B:15:E6:F4:CC:BF:61:17:CC:1B:A4:8A:5C:84:9F:2A:DF:BA:75
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019FAC08DA7CEDBDB8275E064846BAAED59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0A80
Signing time: Wed 29 Jul 2026 04:01:29 +0000
Manifest this update: Wed 29 Jul 2026 04:01:29 +0000
Manifest next update: Thu 30 Jul 2026 04:01:29 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: 3SMkoHmew28E/XELySXmLOzxo/NsXH9SVjpG9Ic7pdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:da:7c:ed:bd:b8:27:5e:06:48:46:ba:ae:d5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jul 29 04:01:29 2026 GMT
Not After : Jul 30 04:01:29 2026 GMT
Subject: CN=e48b15e6f4ccbf6117cc1ba48a5c849f2adfba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:35:e9:38:ee:73:94:be:97:59:27:7b:d1:
c2:72:db:5a:d6:d9:9a:fc:d8:43:6c:a3:ca:83:78:
6d:b8:fd:04:2a:d2:5c:52:10:9a:17:45:ab:78:05:
f9:30:1b:ed:3f:07:4c:ab:16:c5:ee:b3:b7:da:53:
aa:b3:f7:b5:bf:96:d6:80:94:a8:1b:97:07:f8:53:
5e:e3:0d:dd:86:48:c7:41:dd:e1:eb:52:83:00:80:
7b:53:38:b8:1e:06:65:0f:0e:cc:1d:4c:7a:87:2b:
a3:15:6b:da:3f:6e:7d:d8:9d:80:05:b5:a5:f4:db:
4e:64:60:13:a1:91:70:59:bc:c8:ab:11:90:57:db:
f2:1d:0c:48:d5:7d:ca:38:ed:fd:ce:5c:b1:90:cb:
22:ba:3d:19:20:40:28:d6:5c:04:ac:ba:9c:d3:98:
a4:13:1e:75:4f:ce:64:df:62:ef:97:55:e3:6d:53:
50:43:89:d5:42:98:2c:52:15:3e:74:10:9d:f4:e6:
90:2a:d8:41:7a:16:7b:57:d6:75:dc:d3:ec:bb:23:
79:93:7f:bb:08:60:e7:c1:06:b6:b0:5d:2a:94:61:
e6:e7:8f:64:70:a1:26:d3:46:c1:59:02:bf:24:72:
7c:86:24:e1:5c:5e:bd:7a:ca:ce:f5:38:a3:f0:43:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:15:E6:F4:CC:BF:61:17:CC:1B:A4:8A:5C:84:9F:2A:DF:BA:75
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:66:1b:8c:b7:9a:97:f8:ab:92:64:ce:a4:d5:3f:0c:d8:35:
2f:2e:3d:45:15:47:7c:ce:7f:1f:29:3c:eb:c1:cc:34:a8:a5:
03:cc:3b:07:8a:5e:eb:a6:6c:a5:88:56:58:11:2b:0b:ff:4b:
ed:de:ed:fe:22:4e:35:7f:77:d3:d0:1f:cd:0a:1d:ce:fd:02:
39:67:10:e4:cb:10:60:48:98:4c:c5:38:20:99:fc:25:58:19:
25:c4:14:4b:29:d9:79:94:7e:8c:bc:33:8c:c7:4b:8c:ab:f9:
f8:d9:c2:c8:cf:72:50:e8:8c:fc:02:48:79:92:5d:b8:8c:48:
56:8b:b6:e9:d9:5c:89:c2:a2:5f:cc:6b:5b:7c:88:0f:1f:5c:
2a:ec:87:4f:90:9d:1d:03:f0:27:45:f1:c5:54:34:5c:05:3f:
90:b8:65:aa:67:3b:01:06:69:15:65:64:a0:7f:3b:d5:b4:e7:
54:35:8e:29:81:c4:9a:53:5c:9b:71:65:d5:ae:07:b8:25:a7:
15:ce:ad:e8:6e:64:82:c0:83:05:c4:cf:f3:94:fe:5b:33:a4:
f3:55:cb:34:72:45:84:20:20:83:35:c2:76:27:97:44:9d:c3:
82:61:e4:1e:39:af:a8:ad:bf:22:7d:a1:09:06:be:68:d1:11:
37:7b:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:37 2026 by rpki-client