Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: tIFfV0CSEJlyTiGcdez7GjJCEds5oVf4PXGtElwIIg4=
Subject key identifier: 3F:06:01:65:79:CB:3D:35:38:76:6F:AD:F7:46:FA:D3:CB:72:8F:74
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019FF4585A7C8F666D86EB1826FDF9EB95E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1A05
Signing time: Wed 12 Aug 2026 05:00:58 +0000
Manifest this update: Wed 12 Aug 2026 05:00:58 +0000
Manifest next update: Thu 13 Aug 2026 05:00:58 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: sWtiGKTm4Tar9jFX6hYSm9B9RIRkJQjI8MEck8I7bhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:58:5a:7c:8f:66:6d:86:eb:18:26:fd:f9:eb:95:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Aug 12 05:00:58 2026 GMT
Not After : Aug 13 05:00:58 2026 GMT
Subject: CN=3f06016579cb3d3538766fadf746fad3cb728f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:64:26:cf:1b:a8:0e:a1:3b:05:1e:1e:41:
4e:94:58:73:de:c1:3e:6c:13:f0:3d:c3:ef:8c:7b:
ec:12:24:e9:ab:00:f3:50:4c:65:e0:aa:c6:40:b0:
12:15:41:e6:50:30:f8:1a:29:24:4b:4b:63:73:f8:
6f:32:c1:ec:0c:7a:c2:c6:cb:d0:36:59:ad:3e:af:
de:c6:69:d6:2e:92:0f:f0:ad:67:5e:af:f4:a2:ad:
c0:66:35:79:c4:c6:42:a8:43:cd:e6:9c:df:35:1e:
34:5f:bb:2a:05:6e:d2:b2:cf:90:50:ea:d7:c3:db:
64:97:af:14:1e:d7:ef:69:04:d5:9f:2d:27:c6:82:
e6:70:52:2f:ba:1c:f3:9f:75:b6:f7:6f:a1:f3:1c:
4c:60:e4:e0:ba:7c:c7:0b:55:6e:88:0e:b4:04:93:
b4:64:9b:e6:54:99:a0:d9:bb:4e:4d:1e:5f:5b:46:
aa:c7:7a:ad:25:0d:b2:49:16:0a:6a:c4:e6:52:f4:
07:79:b4:1c:01:d2:87:83:72:bf:05:0b:54:51:54:
f1:f9:a1:a9:4b:22:a0:fa:c5:0c:de:48:17:28:d5:
c0:24:57:2e:af:62:95:ea:4e:3c:6c:c9:0a:89:ff:
de:70:92:21:da:7b:85:97:55:8a:1f:70:07:c6:98:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:01:65:79:CB:3D:35:38:76:6F:AD:F7:46:FA:D3:CB:72:8F:74
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:a5:00:e7:a0:f3:16:d0:c1:87:fb:d6:ab:43:89:da:b2:
56:46:e7:83:24:ca:28:a2:03:10:6c:7f:98:6c:f7:f0:88:09:
3c:e2:d6:ba:82:75:76:79:26:6f:60:b1:ea:34:f4:20:4a:73:
05:83:11:b0:b7:d6:e1:cc:3c:dc:10:73:1b:8b:11:82:83:f4:
82:f4:e4:04:43:0a:90:4b:d3:0f:32:9b:1a:97:7d:27:86:ef:
c6:a1:5b:a6:e4:22:74:6b:9d:5e:9a:ee:25:c0:98:67:7e:2a:
1a:de:0d:e3:27:ba:0d:44:e8:f7:67:49:f1:a8:51:f4:5d:9d:
f2:79:c6:75:53:3c:a2:a7:06:26:a4:a5:42:fb:63:f3:37:ef:
6c:d0:cc:f4:6e:d4:f2:b7:6e:4f:c7:b4:2e:60:ee:b8:79:ef:
cc:b5:a4:27:cc:0f:58:98:a5:27:b8:58:24:65:9d:43:be:d7:
18:94:bc:50:2d:73:a6:42:ab:7c:db:8d:66:77:f6:3d:e8:a0:
d6:bc:96:6e:bc:24:fc:f2:67:8e:f5:9d:d9:4b:6f:84:a8:fe:
8a:51:b0:8c:8e:50:be:65:a3:b6:8a:7f:a4:eb:ab:c5:79:df:
2e:bb:9a:5c:f1:b3:92:11:d5:20:4a:ce:ea:92:03:90:3f:49:
ee:12:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:34:41 2026 by rpki-client