Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier: Au6b6e5954jBl+/spzZaVhHwkZp8FOeJ29Vw+QY6c9s=
Subject key identifier: C7:44:0D:DE:D9:6C:B6:43:BE:DE:92:5C:94:73:4F:F6:F9:A4:00:1A
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 01A0208C7EE68A2E9C9D9E5B40E811EE0C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number: 191E
Signing time: Thu 20 Aug 2026 19:01:13 +0000
Manifest this update: Thu 20 Aug 2026 19:01:13 +0000
Manifest next update: Fri 21 Aug 2026 19:01:13 +0000
Files and hashes: 1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: Xt+Bt2EXBANfQfnX/g/xY/T2v0kaMcz4kX+ff7PvIdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:8c:7e:e6:8a:2e:9c:9d:9e:5b:40:e8:11:ee:0c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Aug 20 19:01:13 2026 GMT
Not After : Aug 21 19:01:13 2026 GMT
Subject: CN=c7440dded96cb643bede925c94734ff6f9a4001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:f4:bf:54:93:c7:d3:a3:55:fd:af:a9:68:
2f:f2:78:03:0a:45:38:ec:9d:b5:c6:64:61:4c:d2:
41:66:ae:66:ae:84:b6:c8:9c:15:bc:6b:92:05:82:
e7:cc:cb:90:d4:58:4c:3e:91:13:1f:93:5c:e0:90:
42:69:4a:14:c6:d8:9b:e7:b1:88:15:1b:02:a0:a1:
bb:f6:87:b9:75:af:35:3f:3c:c4:67:3e:76:8b:5b:
35:12:04:a4:f7:fd:7f:ce:c4:47:40:45:cd:ca:5b:
c4:d9:79:75:80:fb:2b:7d:a5:23:54:4c:c3:62:3a:
91:e2:90:d2:53:4d:d3:cb:41:76:ba:af:77:51:e5:
a4:8b:51:4a:71:5a:be:e1:6e:1a:39:1b:4a:92:ce:
bb:61:80:b9:a0:01:4b:2b:38:7a:ed:a9:ac:b7:ab:
58:ea:46:fd:30:58:5e:e5:e7:03:b2:56:4b:5f:5d:
69:82:ad:3a:ab:de:b0:c8:b1:4e:34:bf:9c:1c:b5:
a4:4b:f2:3a:08:d8:08:0b:b4:34:56:98:c1:31:39:
8c:38:a5:c7:e2:1f:5d:11:c7:30:cf:fe:e0:12:3b:
0b:92:d4:01:c4:48:35:f9:32:bb:39:c0:02:bd:52:
9c:b2:49:2c:ce:3a:c1:9e:b7:82:8f:60:8f:1c:5a:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:44:0D:DE:D9:6C:B6:43:BE:DE:92:5C:94:73:4F:F6:F9:A4:00:1A
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:35:a3:e8:4f:6d:ba:01:84:32:2c:04:8f:e5:6f:d2:08:bc:
c2:4a:f6:3d:62:1a:92:0c:6f:93:4a:73:15:31:9d:91:91:3b:
3d:36:4d:ee:92:74:13:5e:04:83:72:61:1e:fa:ae:38:3d:5c:
d8:57:ab:e2:8e:ba:60:04:1d:c7:a9:fc:d3:96:f3:dd:fe:fb:
b4:3d:80:c0:4b:af:f2:88:11:17:b2:c0:be:92:e1:0f:ef:58:
8f:43:f4:ec:33:5f:c6:49:b7:d0:78:32:59:57:16:00:5c:7a:
15:10:a9:5e:9b:da:1b:75:b7:a2:4d:7a:9e:f0:3c:1a:fa:8d:
85:4a:c6:9b:ed:b2:98:96:dd:12:5d:68:04:df:35:f1:7e:d0:
5f:26:5f:47:86:e3:08:52:de:51:fa:81:8b:55:54:0a:27:fa:
cd:ee:74:1a:e6:b1:51:dd:1c:f2:83:7a:a4:d4:5d:f6:ee:0c:
d3:06:e4:9a:09:31:00:66:aa:29:67:e9:b3:86:e9:91:92:62:
75:ee:14:e7:c8:9e:e0:ab:c2:ce:a2:74:e4:00:74:c8:87:05:
ae:90:41:3f:84:1e:a6:9b:69:ae:58:a6:a6:d5:98:b0:40:de:
9e:9b:f1:47:25:0f:3a:06:20:f6:4f:ec:b0:85:fe:19:0c:27:
d7:42:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:33 2026 by rpki-client