Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft (raw, json)
Hash identifier: FoLPbsd5CvQvE/eM+pefs6yTpeiVo7LnRGcngaoG+ko=
Subject key identifier: 42:E9:10:6F:C3:20:8D:2D:48:F4:4F:10:25:A3:9B:30:75:9E:81:4C
Authority key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Certificate issuer: /CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Certificate serial: 019FA0E0A3F597F05AA3E319176ED3805282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 00:01:44 +0000
Manifest this update: Mon 27 Jul 2026 00:01:44 +0000
Manifest next update: Tue 28 Jul 2026 00:01:44 +0000
Files and hashes: 1: 2FrN58Szgu73eOaW5wzREjA1APU.roa (hash: eg4laZvDlSkpaWdKinkI+Xun4MLQfCIFg3SA+VvwdzM=)
2: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl (hash: l2R4jIKWmvYZEMqFBvSwVVtDoWg8VoE2+dYF8QI8Qeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:a3:f5:97:f0:5a:a3:e3:19:17:6e:d3:80:52:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Validity
Not Before: Jul 27 00:01:44 2026 GMT
Not After : Jul 28 00:01:44 2026 GMT
Subject: CN=42e9106fc3208d2d48f44f1025a39b30759e814c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:f7:e8:70:de:66:b6:8f:05:19:15:3a:10:
5d:02:02:1d:cb:3d:b4:41:55:75:f7:67:df:5e:34:
b8:33:5a:99:0b:01:32:6d:dc:6a:37:a6:cb:2a:ef:
e7:20:69:a2:0f:0e:c8:28:03:ff:26:22:10:9a:82:
72:87:e8:7e:29:0b:7d:f2:61:83:f3:10:2b:67:74:
b4:c5:f9:2e:93:71:ec:ce:d4:48:2d:03:4e:fc:48:
38:41:69:ae:75:ef:4a:fd:db:d3:a6:a4:0b:f5:96:
02:84:ac:9e:47:18:98:28:88:0b:d0:a5:ba:5d:52:
b1:62:ea:f8:36:7d:28:85:b9:b7:88:30:a0:1e:e9:
2d:57:2b:85:9b:71:33:17:a7:55:af:b3:0d:bc:05:
69:64:64:36:c0:57:10:d6:a5:53:33:8f:17:47:b5:
8c:45:ee:38:51:7d:a2:4b:75:93:75:1b:75:f8:f7:
de:ed:dc:3a:a4:0c:16:46:82:29:27:08:89:43:16:
71:7f:8e:36:8e:62:e5:3c:20:27:de:72:17:44:e1:
58:11:62:d3:d8:ee:9e:eb:ee:d6:60:f3:d7:c2:df:
bf:1e:88:a4:f3:27:3f:65:79:2d:21:c8:38:b4:1c:
f1:70:67:af:6a:ef:fb:18:ab:80:bc:34:78:dc:f9:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E9:10:6F:C3:20:8D:2D:48:F4:4F:10:25:A3:9B:30:75:9E:81:4C
X509v3 Authority Key Identifier:
keyid:C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ac:ed:75:96:e3:27:68:d8:63:95:b8:80:55:75:f5:2f:b7:
69:8f:0a:54:87:20:e1:e7:00:c7:44:f3:6c:f6:f6:68:a9:cb:
fb:02:a3:1e:09:e2:49:69:7a:a5:f2:6a:d3:33:b7:0f:2a:fb:
d8:13:6d:7b:ff:6b:43:82:7c:f2:00:b1:f3:43:b4:a9:00:fb:
e1:f6:0b:62:2e:26:b7:ce:f7:0e:3f:aa:16:12:a6:61:a7:c6:
62:09:a6:ae:eb:02:51:1f:45:bd:38:9f:68:fb:f2:82:51:e0:
f6:72:e6:68:91:83:99:09:5e:be:3a:5a:79:7c:0f:08:8d:9b:
69:45:3b:41:05:ba:95:76:e3:1b:88:ca:06:1c:aa:4a:eb:7e:
a5:d9:d5:e2:a2:92:a1:02:cc:d2:5b:54:eb:c0:f8:bd:8b:6e:
a0:5a:33:ad:34:62:70:1a:87:13:71:3a:03:29:19:0f:d2:00:
19:ec:43:e6:2c:82:fc:a7:3a:97:d4:d2:bc:90:fa:5e:d6:f3:
8d:04:06:ab:fb:07:c2:2a:23:1c:f8:77:15:af:78:55:a8:53:
da:38:0a:0a:8d:6a:04:3d:7c:58:41:a8:c5:24:28:13:c0:0b:
71:25:1a:ad:26:a4:2a:e9:49:91:0e:d7:38:ae:6e:21:5e:76:
e1:93:83:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4KP1l/Bao+MZF27TgFKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTkzOTIzMjU3YjIwZWRhNGFhNGJjM2M0YTBjMzBkODQ5
MGVhNTYwHhcNMjYwNzI3MDAwMTQ0WhcNMjYwNzI4MDAwMTQ0WjAzMTEwLwYDVQQD
Eyg0MmU5MTA2ZmMzMjA4ZDJkNDhmNDRmMTAyNWEzOWIzMDc1OWU4MTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+T36HDeZraPBRkVOhBdAgIdyz20
QVV192ffXjS4M1qZCwEybdxqN6bLKu/nIGmiDw7IKAP/JiIQmoJyh+h+KQt98mGD
8xArZ3S0xfkuk3HsztRILQNO/Eg4QWmude9K/dvTpqQL9ZYChKyeRxiYKIgL0KW6
XVKxYur4Nn0ohbm3iDCgHuktVyuFm3EzF6dVr7MNvAVpZGQ2wFcQ1qVTM48XR7WM
Re44UX2iS3WTdRt1+Pfe7dw6pAwWRoIpJwiJQxZxf442jmLlPCAn3nIXROFYEWLT
2O6e6+7WYPPXwt+/Hoik8yc/ZXktIcg4tBzxcGevau/7GKuAvDR43PnUewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELpEG/DII0tSPRPECWjmzB1noFMMB8GA1UdIwQY
MBaAFMhZOSMleyDtpKpLw8Sgww2EkOpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZrNUl5VjdJTzJrcWt2RHhLREREWVNRNmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hMDQ5NTYtNzQ2Mi00OWViLWE5ZGIt
ZGM2YmU4Y2U1ZmIyLzEveUZrNUl5VjdJTzJrcWt2RHhLREREWVNRNmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hMDQ5NTYtNzQ2Mi00OWViLWE5ZGItZGM2YmU4Y2U1ZmIy
LzEveUZrNUl5VjdJTzJrcWt2RHhLREREWVNRNmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6ztdZbj
J2jYY5W4gFV19S+3aY8KVIcg4ecAx0TzbPb2aKnL+wKjHgniSWl6pfJq0zO3Dyr7
2BNte/9rQ4J88gCx80O0qQD74fYLYi4mt873Dj+qFhKmYafGYgmmrusCUR9FvTif
aPvyglHg9nLmaJGDmQlevjpaeXwPCI2baUU7QQW6lXbjG4jKBhyqSut+pdnV4qKS
oQLM0ltU68D4vYtuoFozrTRicBqHE3E6AykZD9IAGexD5iyC/Kc6l9TSvJD6Xtbz
jQQGq/sHwiojHPh3Fa94VahT2jgKCo1qBD18WEGoxSQoE8ALcSUarSakKulJkQ7X
OK5uIV524ZOD9w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:18:44 2026 by rpki-client