Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: ReWqDtKVqcXQ2Z8+VI0iVPMDfah57N+O/9vT89C4Ghg=
Subject key identifier: 5A:49:F9:DA:21:8D:33:A3:69:2E:2F:C2:5B:E5:60:67:17:D2:5B:38
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019F9F27D8E62D9289C5E59AA6CCA6CDE728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0C1D
Signing time: Sun 26 Jul 2026 16:00:16 +0000
Manifest this update: Sun 26 Jul 2026 16:00:16 +0000
Manifest next update: Mon 27 Jul 2026 16:00:16 +0000
Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: vqLNAOmHxe4q37TVUlS4S//8aiJBJBsXISzmd4dsQOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 15:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:27:d8:e6:2d:92:89:c5:e5:9a:a6:cc:a6:cd:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Jul 26 16:00:16 2026 GMT
Not After : Jul 27 16:00:16 2026 GMT
Subject: CN=5a49f9da218d33a3692e2fc25be5606717d25b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:b4:96:be:e3:68:57:d3:14:4e:99:ce:26:
e3:60:64:37:e0:eb:71:40:ad:f6:27:c0:e1:e7:bf:
0d:db:02:09:6d:1d:0f:3e:18:ab:6f:ab:1e:06:aa:
bf:fb:ec:27:9f:04:5e:99:5a:e3:2b:8b:1c:7f:27:
a6:91:7c:bc:0c:53:b9:69:75:10:b7:cf:f8:af:8d:
6a:77:e7:ca:69:1b:46:f3:b8:f3:77:07:a8:27:6a:
34:6c:a9:6e:67:30:30:c0:2b:f2:32:42:dd:0e:36:
a8:70:65:29:e9:4e:07:80:de:3b:9d:cc:7b:d4:5d:
4d:e6:1f:01:76:65:61:b9:52:53:a3:cd:96:1f:5a:
97:28:52:7c:8a:5e:bc:fe:28:e9:5d:16:b8:76:0b:
5f:3b:15:f6:48:49:09:b9:f8:0b:cf:7f:f8:97:03:
10:d4:b8:d6:6d:fc:7e:e8:9b:7c:07:2a:8a:6b:d3:
92:c1:ca:70:e3:2f:73:4f:c4:77:42:0e:c6:2e:f0:
66:5f:a9:2d:cc:86:14:1d:77:0b:c7:a1:f0:ea:d5:
fe:cb:d2:2f:93:24:d2:8c:b1:f2:31:00:35:88:3b:
26:f3:99:07:0b:f6:0d:90:fb:08:29:2a:85:20:62:
17:8e:34:ab:5d:57:5d:89:3e:c8:6b:ae:7c:ec:c6:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:49:F9:DA:21:8D:33:A3:69:2E:2F:C2:5B:E5:60:67:17:D2:5B:38
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:53:59:4b:f7:f8:7f:72:26:2d:67:12:23:b9:f7:f4:0c:95:
15:5f:aa:e4:9c:19:7f:d3:21:90:f4:47:0b:b8:be:06:a6:12:
65:e0:90:69:b8:e4:07:65:8a:9f:69:0b:95:44:bb:27:45:df:
5f:a9:69:e6:3b:e0:7d:e1:a0:54:a2:e3:60:d2:a8:c9:aa:88:
b5:a5:5d:77:94:5f:c0:20:53:99:3f:fc:bd:84:30:c9:8c:83:
73:e3:d7:f9:9b:7e:95:ea:ef:8b:68:ec:7e:d7:7b:93:96:4f:
de:14:a0:67:99:94:9e:4e:aa:63:1c:90:cf:b6:e0:3c:b0:f6:
90:47:61:06:91:6f:fd:10:31:ae:c1:7e:04:57:57:d0:04:09:
9f:89:f6:c3:d0:44:1d:94:be:a2:14:38:f1:c8:a9:d7:9a:5d:
33:3e:1b:a8:41:29:65:4d:29:93:8c:d3:e4:b5:09:83:9d:f5:
f6:50:19:f1:20:de:fb:ca:bc:82:95:a0:a5:76:c2:66:11:dd:
43:db:91:73:fe:2d:2a:31:ca:51:34:fa:34:67:0d:5f:54:b8:
9a:9f:3e:d0:4e:ca:92:89:ba:ff:a9:5b:39:1d:15:99:75:f4:
20:cd:f4:79:7c:0d:19:c7:5a:fd:77:f2:b9:f2:9a:00:b5:8a:
99:ed:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:17:48 2026 by rpki-client