Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: 56Rruwb8k6BhDeGuAC02T7fevwh2GteL6Sv9/q/8I6E=
Subject key identifier: BE:E3:CC:20:99:F8:31:A7:E7:0A:06:C1:56:A5:AA:E3:05:2C:F1:27
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019F9F5F89A1D57A14B3029FF4F3EAE1CB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 1242
Signing time: Sun 26 Jul 2026 17:01:06 +0000
Manifest this update: Sun 26 Jul 2026 17:01:06 +0000
Manifest next update: Mon 27 Jul 2026 17:01:06 +0000
Files and hashes: 1: BV_wbDPbUT8cQpcSNghKFwGtfvA.roa (hash: ICfuWyqr7El/ZDMz8MEEp0z3PKwy83J5F2WdPeRDG0A=)
2: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: mzL9m5tAr5HteV+Hqx8mzxu/bfJz4scx/M1Gi8hl4bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5f:89:a1:d5:7a:14:b3:02:9f:f4:f3:ea:e1:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Jul 26 17:01:06 2026 GMT
Not After : Jul 27 17:01:06 2026 GMT
Subject: CN=bee3cc2099f831a7e70a06c156a5aae3052cf127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:dd:fb:94:b5:76:b5:73:f2:c7:ef:38:cc:
c6:2c:9d:6a:40:7e:ac:cb:1f:8d:69:1c:ce:9b:d3:
19:f8:ed:72:59:14:de:f2:a1:f8:2a:4a:ad:6f:a2:
47:5f:2e:dd:f2:df:5c:c8:4e:5f:d8:47:b4:c4:50:
f3:c7:44:28:2e:13:ac:17:7a:c7:2b:a4:ff:3d:28:
7a:e5:21:89:98:0b:55:26:fd:12:a3:1e:70:23:84:
8c:85:0a:e2:ee:bb:10:59:d0:54:da:3b:9e:4b:9b:
70:79:27:1a:89:b6:9e:99:2d:5e:b3:7a:db:77:71:
34:4f:27:45:40:ed:a3:97:b3:f9:dd:ab:67:fe:b5:
a1:45:07:c5:af:10:50:f9:33:36:56:b8:63:f5:3a:
8c:a2:96:27:be:f3:5c:bb:89:b2:f0:57:27:53:a9:
40:c2:99:a8:f5:1d:49:e1:c9:91:df:60:cc:d2:cc:
76:ad:09:1b:27:f1:5e:25:50:92:79:61:67:52:13:
cc:f5:44:b6:14:61:d4:82:20:7c:3c:30:65:7b:8a:
95:e5:7b:82:ea:75:2d:0c:e4:a1:0c:2d:5c:56:d7:
7e:db:8a:84:15:38:ea:03:83:8a:cc:ed:13:b2:4f:
23:59:45:ac:b8:95:5c:4e:af:4b:4e:dd:aa:de:fe:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:CC:20:99:F8:31:A7:E7:0A:06:C1:56:A5:AA:E3:05:2C:F1:27
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:1b:8a:a2:9c:f7:4b:2e:f0:35:5e:e7:92:61:8b:62:30:
2e:7b:53:6d:f1:b0:91:4b:2a:7b:b9:58:ea:dd:93:35:05:2d:
d1:c4:8a:1b:aa:c0:02:e8:be:72:56:e5:1f:cb:e3:24:a0:06:
e9:8e:05:1a:6c:e7:e6:7c:dd:d9:38:79:cb:3b:39:bc:2e:d0:
fc:39:c0:f4:b0:d8:fa:49:90:ae:a5:6b:3a:e3:5e:83:cf:e0:
a0:b9:72:4f:6a:7c:c6:44:d6:1f:be:13:c4:d3:99:e8:dd:f5:
32:5b:66:85:78:a3:be:0d:70:58:09:3c:48:cc:a6:2d:fe:6d:
81:f8:bf:ff:bb:ad:b7:85:d0:0a:2f:29:de:97:db:46:8a:1d:
58:67:b2:91:85:0f:2a:a9:a6:b0:c9:1b:c6:82:13:eb:1e:be:
2a:a8:39:49:6a:37:05:22:8e:c8:73:83:ee:72:85:48:0a:55:
78:bc:33:52:28:09:ff:0f:53:9f:0c:3a:6a:8b:9c:0d:1d:a8:
3e:e7:df:d8:64:29:0a:3a:7c:d5:42:fd:ef:b7:3b:e9:32:f4:
3f:4c:b4:b6:aa:86:40:d5:6a:ca:60:c5:95:7f:d8:28:54:45:
b0:1c:23:46:45:0f:e8:e2:18:c5:24:5e:8a:d0:de:71:9f:0e:
60:23:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:03:58 2026 by rpki-client