Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: O7Z3O1gGBvEuuIiJkicco01T9TXQv757onjdDhW+/QM=
Subject key identifier: 31:18:19:50:FA:C2:77:6F:6E:B5:98:B6:EC:A8:6C:68:0F:BE:DC:E5
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 01A0890BD9BEF05EB7BED1C4FB75F1EC24E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 1527
Signing time: Thu 10 Sep 2026 02:00:50 +0000
Manifest this update: Thu 10 Sep 2026 02:00:50 +0000
Manifest next update: Fri 11 Sep 2026 02:00:50 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: nt7Aw55/doO9ziBDGaE5hAxRpPQgZocy8H8CiTzjhns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:d9:be:f0:5e:b7:be:d1:c4:fb:75:f1:ec:24:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Sep 10 02:00:50 2026 GMT
Not After : Sep 11 02:00:50 2026 GMT
Subject: CN=31181950fac2776f6eb598b6eca86c680fbedce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:ad:ed:5d:11:91:18:47:f5:b4:c0:ab:93:
bc:25:02:cd:c6:40:27:46:c1:7f:50:ee:a0:50:de:
7b:80:61:2f:cb:ee:e2:8e:4a:e0:a3:99:e3:a4:8a:
91:2c:d2:ef:c8:a1:59:42:1b:9c:be:74:dd:d3:fc:
86:7b:2a:cd:49:61:11:04:91:17:da:0b:2d:14:69:
7a:e0:78:47:a0:7f:49:10:10:c6:60:a8:37:be:87:
eb:f5:c3:ee:36:4c:fc:ad:e4:b7:55:2d:8f:3a:2d:
77:66:b6:bf:81:6a:a1:4b:b4:9c:3b:dc:85:f6:f6:
69:a8:99:4a:62:c5:55:d0:cb:b4:00:8d:28:03:7c:
94:79:ae:79:c6:82:62:f2:7a:3a:d1:20:07:24:f0:
76:e8:8e:d8:4b:63:36:55:1b:ab:a8:4f:ce:ab:8e:
48:1f:9f:c1:ff:46:df:4f:41:ea:12:2e:b4:06:5a:
b9:2c:cb:e9:01:28:87:fa:9a:3e:c9:0e:47:75:37:
cb:4f:54:79:c1:86:72:ee:24:22:95:b4:00:44:69:
9b:8c:84:38:f2:e9:35:d8:fc:97:eb:34:0e:39:34:
5d:4a:41:4d:0d:96:1a:1c:b1:c4:b0:b5:e5:28:7c:
3b:2a:09:ae:38:c6:9f:05:e6:27:ce:29:29:b1:08:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:19:50:FA:C2:77:6F:6E:B5:98:B6:EC:A8:6C:68:0F:BE:DC:E5
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c0:20:26:70:75:85:63:00:0f:d3:bd:3a:55:01:58:63:a7:
0d:d9:b2:59:9f:e3:2f:23:ab:26:01:32:21:47:af:61:31:58:
af:92:d6:7e:7b:f4:4d:43:cb:5d:ff:3e:9d:ec:42:b0:af:20:
9a:dd:d3:0c:48:1f:7f:93:28:ed:4d:d1:84:c2:d8:22:90:4c:
18:dc:73:0f:82:ac:25:b2:a5:73:b3:5d:cf:ad:43:83:8b:40:
51:8d:b2:58:db:17:9f:06:7a:f3:1f:71:12:28:e4:da:64:ec:
48:45:9a:79:5c:ef:27:f8:d2:bd:3a:33:85:e3:81:7c:81:95:
05:20:48:c4:43:fc:d5:a4:9e:cc:0a:47:58:95:59:f5:cf:b1:
90:f1:c1:f2:81:8c:73:18:6c:ad:8a:a5:61:8a:17:95:da:43:
a8:23:d5:91:5f:0e:ee:b5:68:90:07:d6:5a:a6:17:35:60:73:
b9:c0:4d:58:fe:2f:67:b3:de:27:aa:0d:d0:3b:fc:0a:90:e7:
70:72:8d:4f:70:62:38:d6:9b:db:ec:f1:c8:f8:58:ac:4b:a7:
8b:f5:6f:b7:e6:03:cb:c3:43:83:36:95:ef:eb:5c:08:64:ac:
20:99:48:99:d4:ee:41:96:e4:32:8e:9c:65:a0:35:9d:0a:9b:
a9:be:7e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:16:44 2026 by rpki-client