
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
File: yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft (raw, json)
Hash identifier: Yhy1+pQcGpNazgUqzfeaRmZ4Tgczv4s7G9brxt1QBmU=
Subject key identifier: FF:69:26:C5:C4:86:2D:B3:BF:D1:A7:83:94:3F:4B:7E:6F:F7:DA:98
Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Certificate serial: 019F853169FC1696BFD89A833B4EBA5AF795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
Manifest number: 0355
Signing time: Tue 21 Jul 2026 15:00:35 +0000
Manifest this update: Tue 21 Jul 2026 15:00:35 +0000
Manifest next update: Wed 22 Jul 2026 15:00:35 +0000
Files and hashes: 1: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (hash: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk=)
2: yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl (hash: Lz9WdK8QOJ5vGMLYgcv3/OJwUqnb5Sp4RDVa/afspaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:69:fc:16:96:bf:d8:9a:83:3b:4e:ba:5a:f7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8
Validity
Not Before: Jul 21 15:00:35 2026 GMT
Not After : Jul 22 15:00:35 2026 GMT
Subject: CN=ff6926c5c4862db3bfd1a783943f4b7e6ff7da98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:44:94:19:0b:8c:67:8e:46:f7:9f:f3:41:
6b:c6:18:ae:52:03:46:51:8a:5b:c8:2f:9f:cf:52:
d4:2e:84:c2:97:1d:39:fa:0d:62:32:de:99:a5:38:
9c:d1:75:a7:a6:f3:c8:b1:fa:d6:64:4e:17:26:2a:
15:39:da:8d:09:7d:d8:99:81:ff:fb:ae:e7:2f:b9:
99:aa:43:b1:3a:ac:2a:07:7e:ad:3a:c0:1d:75:96:
c3:7d:a6:79:52:3f:7d:bd:8b:06:bd:c8:ba:35:dd:
19:e7:e0:77:a8:c6:06:64:14:53:99:56:35:2a:e5:
d4:7a:e0:ee:c9:93:33:2c:c8:7f:ec:f7:19:21:03:
11:b4:3f:14:c7:ef:98:5e:57:48:c2:c9:bb:10:98:
2f:d3:e4:f5:55:ce:c5:1b:8d:58:6a:0c:63:e0:3b:
ec:27:73:08:9b:8d:35:a8:7d:30:95:1d:05:3d:e2:
9a:2e:5b:bc:0a:a7:48:b4:0d:c4:4f:80:ff:49:b7:
cc:f9:6e:b2:96:56:46:49:ea:c6:36:c5:88:86:3e:
07:c2:9d:2b:31:65:61:41:32:b0:26:d3:c7:c1:70:
81:76:b3:b1:fd:22:5a:57:e5:4b:a0:05:df:9c:02:
2a:4e:2c:1e:b1:74:de:fd:03:b5:85:4c:74:99:bd:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:69:26:C5:C4:86:2D:B3:BF:D1:A7:83:94:3F:4B:7E:6F:F7:DA:98
X509v3 Authority Key Identifier:
keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6c:db:3d:dc:4e:c7:8c:87:e3:5a:b8:05:e1:84:1a:19:df:
86:6c:36:74:70:57:69:d8:79:e3:6a:c3:94:98:52:d9:28:c3:
32:e2:ab:c3:5e:c9:47:1c:42:ff:5e:47:51:70:e2:3e:df:a7:
ba:59:41:5a:82:50:30:a9:ec:c1:d3:a9:23:ca:bc:c2:ff:75:
c2:0d:01:99:9f:46:b1:63:e4:d5:db:b8:a6:d2:26:d3:79:af:
21:ae:24:c0:a1:d5:ce:7d:d8:ab:23:0c:cd:a9:38:d6:b4:e8:
65:b8:3a:4b:f1:81:e9:08:85:cf:fb:71:e9:ae:ea:96:86:17:
74:5d:9e:43:a7:89:e3:de:07:ee:b1:9f:51:08:b1:a2:d3:df:
dc:39:88:0d:b2:50:dd:9a:96:d1:72:62:f8:63:bc:14:c3:4c:
c1:5f:fd:97:9d:04:97:0d:4a:f3:a6:e0:2d:12:76:b1:f7:45:
b6:91:56:c7:a8:54:8b:65:17:0e:23:2e:69:f0:f2:cc:82:c3:
21:31:65:bd:e8:58:08:37:0d:48:33:b2:bf:c2:26:54:9a:24:
e1:05:e9:0a:52:ac:00:c5:65:c4:98:7a:1f:10:02:fb:ef:bc:
fa:d6:4d:ad:44:e9:f2:df:6b:5f:da:41:9a:5b:56:6c:a7:b0:
ef:4d:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:48:41 2026 by rpki-client