Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: z3hRIxEK5RnulAU7OUsNw4yrqXGTY8quOgxm8/0b21o=
Subject key identifier: D2:35:8F:42:DE:04:64:40:E8:44:B5:3B:AF:0F:80:AB:7B:28:A8:B4
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019FCFA790C15CD83EC03D3B82775E9ADDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 0172
Signing time: Wed 05 Aug 2026 02:01:32 +0000
Manifest this update: Wed 05 Aug 2026 02:01:32 +0000
Manifest next update: Thu 06 Aug 2026 02:01:32 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: +LsfszqSG7RR337lPPtAAaY927ZZaqhA0wpJzrqAQDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cf:a7:90:c1:5c:d8:3e:c0:3d:3b:82:77:5e:9a:dd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Aug 5 02:01:32 2026 GMT
Not After : Aug 6 02:01:32 2026 GMT
Subject: CN=d2358f42de046440e844b53baf0f80ab7b28a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:9b:7c:d5:be:78:19:7d:c6:6b:ab:d7:13:
7b:8d:4c:0f:92:09:95:26:41:63:1c:f4:5c:e7:eb:
fd:f9:b5:61:9e:28:ee:7f:12:14:85:32:a8:46:04:
35:4c:e0:3b:01:21:21:c6:c0:52:d4:1d:db:bb:22:
27:6e:f0:ea:d3:4c:b2:c8:7d:bc:e1:6c:d9:a4:16:
51:09:dd:8e:91:3b:6c:55:0f:ee:a2:41:f6:aa:05:
a2:a4:92:b6:d7:1b:cd:7a:d9:c7:42:cb:df:a1:79:
0e:40:21:d4:7d:50:71:e5:2b:3e:a1:d8:06:61:f0:
06:ab:13:20:3c:f0:c6:ab:da:31:9e:21:ee:cd:36:
75:e3:a7:3d:33:d1:65:1f:7c:94:55:d4:09:2e:5c:
4b:3b:49:9f:be:c5:61:b7:e4:6e:f8:a1:36:8b:2b:
71:fe:e4:64:7b:0e:38:61:06:f1:d8:9c:cc:50:33:
46:7e:77:64:86:a0:ad:ab:13:4e:42:e2:1a:a7:1e:
9e:e6:05:7f:2c:09:af:8a:f5:27:e6:6b:87:a5:4e:
10:74:11:4e:e5:18:db:4f:5a:75:bf:8d:91:3a:13:
c3:c8:34:63:25:6b:3a:5a:a0:5e:b4:e1:de:e9:b7:
e2:26:76:1b:4a:4a:5e:00:53:61:d5:11:d6:12:47:
6d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:35:8F:42:DE:04:64:40:E8:44:B5:3B:AF:0F:80:AB:7B:28:A8:B4
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7e:c2:ce:11:f3:79:e9:49:41:18:5b:0d:64:04:87:df:20:
8e:9e:07:df:ca:16:d4:ea:d4:1f:d5:94:af:7d:51:c6:e6:62:
af:5f:70:bc:7a:b5:c2:84:ec:c9:a7:3d:86:7a:26:17:4d:92:
92:86:87:f7:4d:fe:e2:4d:9d:49:e4:89:7d:22:39:ca:3d:4c:
c4:13:ce:b2:85:54:63:cd:c5:16:a5:8c:91:e5:d8:b5:89:96:
f4:5e:5d:22:a6:d5:2d:f4:cf:ba:10:86:e6:d3:5e:f4:ec:85:
86:aa:e8:74:e9:36:aa:1e:b5:53:f8:6a:b0:90:9f:68:80:9c:
37:a6:41:e1:36:7c:a9:ab:bd:1b:5a:c6:31:ad:cb:6d:63:b2:
b3:10:ab:85:be:84:0c:68:c4:52:46:fb:bc:00:8a:30:e0:02:
b9:b7:63:df:6d:d0:13:69:00:43:6d:17:89:57:a3:26:8a:09:
05:ec:d7:c5:2a:55:bb:85:5c:40:84:e7:41:e1:a5:cb:50:e4:
9d:63:cd:b3:ec:14:1d:b3:c1:cd:dd:83:a0:53:21:15:04:5f:
21:1f:09:16:77:be:2d:ce:60:28:c3:42:6e:a4:7b:b3:bf:52:
77:29:ef:32:af:c8:ac:ab:15:8e:4b:a3:80:bd:0e:84:56:5f:
8c:2f:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 11:44:02 2026 by rpki-client