Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
File: yAYJ8hhRvff3TtGPDwnfku23U1U.mft (raw, json)
Hash identifier: vi+ABG4DsSGhu5a2CUVAx3NGVL/9N75pa7LM0SxviEk=
Subject key identifier: 92:B6:26:DC:8C:99:F8:45:52:11:ED:23:94:EC:20:6A:ED:14:01:82
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Certificate issuer: /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial: 019FA2600BED24DACA6C4EC0C789B88B0D79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
Manifest number: 1194
Signing time: Mon 27 Jul 2026 07:00:31 +0000
Manifest this update: Mon 27 Jul 2026 07:00:31 +0000
Manifest next update: Tue 28 Jul 2026 07:00:31 +0000
Files and hashes: 1: 7dhm2Zcd4Yp-TNCgcfPEdG07eU0.roa (hash: Ku59KYA/bpOTiSrNCRzEUdSrtiwxD1BQ8G4rzI5+xwk=)
2: yAYJ8hhRvff3TtGPDwnfku23U1U.crl (hash: mj33oJkWpv+pf7HzbPQ4wpZ/0mcVruZnDtkG+7RzmC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:0b:ed:24:da:ca:6c:4e:c0:c7:89:b8:8b:0d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Validity
Not Before: Jul 27 07:00:31 2026 GMT
Not After : Jul 28 07:00:31 2026 GMT
Subject: CN=92b626dc8c99f8455211ed2394ec206aed140182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:e6:a9:70:ae:35:82:db:de:ec:11:d9:cd:
51:d7:35:a7:9f:4c:97:10:95:06:22:30:91:eb:4f:
29:a0:85:d4:31:3d:d5:31:0f:f0:b2:da:13:a0:a0:
0b:cb:eb:ab:6a:ba:32:c2:6b:97:52:6e:6f:a0:fa:
7c:42:3e:2d:94:9c:82:d4:af:77:c8:d2:3e:db:21:
31:3e:06:f1:b0:ba:77:f7:53:72:f5:e9:a9:1a:1f:
9b:da:2a:aa:bf:46:3a:48:f6:5d:e7:bc:d2:26:e4:
2c:f7:a3:0a:1a:8a:ee:ea:aa:5a:ac:53:bb:bc:1c:
75:64:bb:06:54:cb:82:f8:d2:4c:58:a7:0d:43:cd:
51:68:7c:ca:e5:89:8b:9d:ff:7f:4f:47:2c:7f:77:
fd:9c:93:eb:d6:01:bd:07:1f:27:55:35:92:20:6f:
f3:16:a2:80:9c:f7:25:80:b4:c6:04:da:64:55:76:
01:ce:14:77:27:cd:9a:69:50:86:f4:54:dc:d7:8b:
9f:ce:fc:cc:a2:73:04:87:02:6d:c0:3a:83:7a:e6:
09:b9:7c:f0:05:63:9e:34:67:db:fd:e9:47:6e:8e:
ef:04:c8:e2:d2:7b:fc:10:2c:79:d6:94:57:53:08:
3e:2f:2a:6a:80:60:5b:8e:9e:94:c8:98:c1:8f:23:
43:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B6:26:DC:8C:99:F8:45:52:11:ED:23:94:EC:20:6A:ED:14:01:82
X509v3 Authority Key Identifier:
keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2b:e0:85:ed:9d:10:95:24:1a:df:db:b3:29:c0:ed:9a:d2:
3b:8b:e1:3d:16:14:95:80:d4:b4:9b:e2:fa:85:7f:10:3c:2c:
61:91:27:37:e3:05:d7:97:5b:44:73:b6:61:d4:8b:16:87:1a:
c3:e8:86:1f:a7:5b:32:02:61:db:be:7e:ea:9f:99:92:18:e1:
e3:ba:6f:84:02:60:89:fb:c2:22:15:64:07:70:89:18:68:4a:
d9:5c:54:94:15:6d:27:ec:0b:08:9f:71:c4:55:99:ff:90:c0:
1a:ba:02:67:ce:bb:72:e7:22:5c:7c:f6:13:bb:6c:ae:8a:f6:
42:73:98:21:ed:c2:24:99:46:f1:9f:85:a1:54:23:a8:d2:3d:
7b:d8:79:fe:c7:f9:d7:34:7d:8c:26:fd:b9:6c:f9:ed:cd:95:
08:2f:c9:4d:f0:99:52:5d:34:5e:12:02:dd:ae:f7:e0:db:5d:
e7:c3:63:6f:f5:2f:f3:b4:af:76:06:1d:e0:b3:c0:db:a0:78:
25:52:2e:33:03:82:0a:d0:09:31:6f:cf:56:db:48:8c:95:bb:
a3:e6:4b:ba:89:36:31:bf:9d:d4:28:65:a0:a0:d8:1e:0f:70:
79:48:a2:8a:19:66:23:a5:df:43:1c:8d:75:57:de:b5:06:bb:
25:b5:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:11:14 2026 by rpki-client