Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
File: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft (raw, json)
Hash identifier: e+8GFwQYnTiVAmAum/LbKhslig8bDjcldjxvhUpqVE4=
Subject key identifier: C3:24:1C:CB:F4:7A:C2:CB:9A:B0:63:6E:94:1A:8A:7C:5B:7D:03:F1
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Certificate issuer: /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial: 019FF86CC57A279BA6A4435F5EEEA7F6716A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
Manifest number: D1
Signing time: Thu 13 Aug 2026 00:01:45 +0000
Manifest this update: Thu 13 Aug 2026 00:01:45 +0000
Manifest next update: Fri 14 Aug 2026 00:01:45 +0000
Files and hashes: 1: GhcMjny1TXWebHNpG3nX8AJ_o6M.roa (hash: 01RJ2qPd/9qIbm6XQe9IYI6taQh/cgn9v6zBF39c34w=)
2: KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (hash: 0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=)
3: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl (hash: XSIG8B4Fg6lBQ143Pns6y+ufoo7MyO483QAi8owzKwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:c5:7a:27:9b:a6:a4:43:5f:5e:ee:a7:f6:71:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Validity
Not Before: Aug 13 00:01:45 2026 GMT
Not After : Aug 14 00:01:45 2026 GMT
Subject: CN=c3241ccbf47ac2cb9ab0636e941a8a7c5b7d03f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:23:94:40:24:c9:e0:da:96:d5:2c:02:4c:
b0:a5:00:a3:2d:6e:ca:58:68:5d:32:4e:3e:5a:a8:
5c:27:c3:fb:c2:1e:14:30:ac:a2:40:ca:42:4f:0d:
1c:e8:56:87:d1:ce:1b:9d:e2:b2:52:1b:6c:e2:f7:
d8:3c:30:5f:ac:b7:6c:1e:a3:2e:e5:da:6d:67:3b:
26:bf:dd:92:f6:44:6a:5a:66:7c:90:ef:20:55:9c:
b3:f6:9b:d9:9c:73:98:fb:00:9f:e9:98:b4:48:3d:
00:30:17:b0:5f:20:c1:21:b5:a8:44:61:b1:48:74:
fd:29:78:25:0c:4e:19:2b:3f:1e:b7:93:2d:47:a7:
1f:60:51:c5:06:e1:66:9f:75:db:dc:d6:b2:2e:53:
2c:aa:4b:38:fe:0b:d8:88:96:1f:63:11:dc:2f:db:
e9:c8:35:a5:cd:d3:03:56:96:55:4a:88:f2:97:bd:
ec:ad:0e:ec:20:cd:a8:fb:28:3d:77:f7:5e:3f:64:
5f:0f:0f:f2:ab:6e:eb:ca:4c:e3:59:ae:b7:4b:f7:
31:b8:b4:50:c4:21:b9:34:74:1c:42:42:25:87:dd:
db:5b:25:01:92:19:3d:b8:5b:bd:03:3c:77:48:c6:
d5:3d:6f:a7:05:83:8b:ce:da:67:ac:d1:59:79:a6:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:24:1C:CB:F4:7A:C2:CB:9A:B0:63:6E:94:1A:8A:7C:5B:7D:03:F1
X509v3 Authority Key Identifier:
keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:55:57:51:ce:14:dc:3a:bb:21:13:84:48:c1:4c:2c:ef:ce:
21:a0:fc:00:52:09:86:42:4f:b8:14:0a:d4:24:24:be:2a:ad:
c2:0e:32:f5:96:99:0b:90:99:1f:d7:1f:aa:5b:a5:05:81:9c:
5e:93:32:f3:5e:c0:a4:22:1a:bb:4a:d1:75:89:2a:c0:39:a3:
e9:a3:c6:21:61:d7:21:f0:b3:61:ac:27:45:c5:25:ac:de:a8:
53:7c:85:ad:ed:c3:fc:41:c3:09:2f:55:06:07:2c:48:ab:39:
07:5c:b1:2c:6e:aa:65:a9:dc:66:71:00:ea:85:7b:79:69:4b:
36:a8:48:7c:4d:0b:4e:4b:bb:49:58:c6:6a:c2:ef:a1:4b:5c:
4e:08:67:0d:9f:54:91:60:5d:71:42:d6:b4:0f:b5:3b:ab:03:
51:a9:6f:4a:e4:f9:8a:b0:33:31:7c:85:77:d2:3d:3a:9f:7d:
b9:89:d3:d5:f1:01:9d:85:c0:0f:19:7e:40:97:46:1d:48:ae:
65:69:44:d2:e3:1a:70:2b:fd:4e:46:aa:d8:ce:c2:ce:44:17:
9a:da:a3:98:65:d4:21:b3:8c:69:3e:e6:7b:2c:fb:5d:a1:48:
a2:ec:3a:a2:a6:58:c8:40:25:c7:5d:4b:2c:8f:f5:8b:e0:87:
9c:88:51:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:49 2026 by rpki-client