Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: WZLEN32xr6fv2x9PDIMSobd5oB9xb99dAN+LZ4sSfPE=
Subject key identifier: 85:BF:82:0C:F3:23:CE:A0:9A:BC:18:94:E4:FA:A7:A8:B9:D9:B1:59
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019FAE2D1BE7BC7B97B8D33E6B1213DBE82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 16E1
Signing time: Wed 29 Jul 2026 14:00:19 +0000
Manifest this update: Wed 29 Jul 2026 14:00:19 +0000
Manifest next update: Thu 30 Jul 2026 14:00:19 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: rKY4D33ioctLHgOliiv68Q0QWHUpDE+DFRkujpMnSYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:1b:e7:bc:7b:97:b8:d3:3e:6b:12:13:db:e8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jul 29 14:00:19 2026 GMT
Not After : Jul 30 14:00:19 2026 GMT
Subject: CN=85bf820cf323cea09abc1894e4faa7a8b9d9b159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:19:ff:e7:cb:1e:28:49:80:2a:92:67:1a:ff:
40:b0:39:09:2e:35:76:e2:9f:be:02:04:8c:bc:99:
7f:8c:69:7d:d3:a5:8d:ec:a9:df:c8:52:3b:ed:94:
11:51:17:15:54:ba:07:54:77:e4:7d:98:07:73:ec:
09:6a:43:1e:ea:a7:4d:97:97:0a:b0:4b:60:50:44:
10:64:03:f0:ab:8d:53:1f:bf:78:3a:d8:35:d8:a9:
8a:c6:8f:bc:11:2a:57:f8:f1:88:98:b1:2d:8b:8c:
fc:2d:4d:22:fb:05:cb:fb:13:cc:5d:62:97:2f:a3:
74:19:c0:5f:3c:53:63:7e:64:c1:bf:f5:51:bd:f2:
b3:14:20:dc:70:53:1b:5d:52:81:a8:b4:ef:3a:50:
1a:82:c5:dc:dc:e2:8c:fb:8c:0f:d4:4f:57:e4:be:
51:d5:a7:aa:73:38:06:33:94:5f:96:51:89:15:ce:
bf:5f:d9:ca:b2:e2:fc:cd:1f:ee:61:df:b8:ca:0a:
ec:f8:9e:77:0d:c8:bd:12:75:02:6b:84:58:b9:23:
40:b9:7e:07:d4:c1:74:f3:0f:e8:2b:82:a9:a4:79:
35:f2:e2:c0:d5:06:59:e8:6a:bc:b1:d4:21:5b:db:
42:36:a1:c2:fd:d5:09:56:6b:40:b7:6f:22:2b:fc:
99:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BF:82:0C:F3:23:CE:A0:9A:BC:18:94:E4:FA:A7:A8:B9:D9:B1:59
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cd:23:24:6b:20:9f:74:44:d9:b1:f4:d1:65:fb:a9:21:a1:
79:78:bb:de:5b:ee:d9:9e:39:88:b1:a8:b4:7b:af:cb:4c:e5:
c1:85:5f:b8:50:9d:e5:63:57:64:c6:08:d5:3d:94:ea:18:e8:
e3:e1:cc:98:69:b2:d5:e7:e4:d8:86:c4:32:9d:ea:f6:cf:90:
69:ef:df:f8:5c:c7:e7:af:a7:8f:51:5d:5a:9c:1e:bc:a8:66:
98:74:8d:52:e1:ef:ad:05:a6:48:54:30:77:9e:7c:de:cd:84:
97:6e:f6:f0:38:55:18:29:eb:7f:cc:f0:9d:a2:7a:bb:b4:50:
32:00:78:ef:12:d0:1d:19:8f:15:1b:68:9d:85:4b:bc:27:1b:
32:e3:03:90:b5:68:b3:a7:74:02:92:60:50:b2:60:64:42:01:
ce:46:bc:b2:11:1d:1c:b2:39:fe:1c:95:35:50:81:aa:2e:7a:
ad:6b:36:84:7e:ad:75:f9:bb:57:50:5d:05:f4:f7:82:fc:17:
cf:be:f1:98:ab:fd:ee:10:f5:67:ec:4f:83:48:dd:9b:85:d9:
47:1e:60:c5:e2:6b:b7:6d:4c:ca:7e:aa:d5:8d:a2:0a:47:8f:
db:27:af:98:56:56:a6:6a:83:e5:0e:cd:44:de:97:82:f1:ec:
03:ed:4c:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+uLRvnvHuXuNM+axIT2+gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4Mzg3ZjAzNWIwOWQyYmMzOTNmN2Y2MGQ3NjIxZDMwMGNj
OTc3ZDgwHhcNMjYwNzI5MTQwMDE5WhcNMjYwNzMwMTQwMDE5WjAzMTEwLwYDVQQD
Eyg4NWJmODIwY2YzMjNjZWEwOWFiYzE4OTRlNGZhYTdhOGI5ZDliMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bn/58seKEmAKpJnGv9AsDkJLjV2
4p++AgSMvJl/jGl906WN7KnfyFI77ZQRURcVVLoHVHfkfZgHc+wJakMe6qdNl5cK
sEtgUEQQZAPwq41TH794Otg12KmKxo+8ESpX+PGImLEti4z8LU0i+wXL+xPMXWKX
L6N0GcBfPFNjfmTBv/VRvfKzFCDccFMbXVKBqLTvOlAagsXc3OKM+4wP1E9X5L5R
1aeqczgGM5RfllGJFc6/X9nKsuL8zR/uYd+4ygrs+J53Dci9EnUCa4RYuSNAuX4H
1MF08w/oK4KppHk18uLA1QZZ6Gq8sdQhW9tCNqHC/dUJVmtAt28iK/yZRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIW/ggzzI86gmrwYlOT6p6i52bFZMB8GA1UdIwQY
MBaAFMg4fwNbCdK8OT9/YNdiHTAMyXfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEt
YzFjM2M4NDg5MTJiLzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mYjA5MGQtNjg1ZS00MTEwLWIxNzEtYzFjM2M4NDg5MTJi
LzEveURoX0Exc0owcnc1UDM5ZzEySWRNQXpKZDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg80jJGsg
n3RE2bH00WX7qSGheXi73lvu2Z45iLGotHuvy0zlwYVfuFCd5WNXZMYI1T2U6hjo
4+HMmGmy1efk2IbEMp3q9s+Qae/f+FzH56+nj1FdWpwevKhmmHSNUuHvrQWmSFQw
d5583s2El2728DhVGCnrf8zwnaJ6u7RQMgB47xLQHRmPFRtonYVLvCcbMuMDkLVo
s6d0ApJgULJgZEIBzka8shEdHLI5/hyVNVCBqi56rWs2hH6tdfm7V1BdBfT3gvwX
z77xmKv97hD1Z+xPg0jdm4XZRx5gxeJrt21Myn6q1Y2iCkeP2yevmFZWpmqD5Q7N
RN6XgvHsA+1M8A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:48:07 2026 by rpki-client