Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
File: yPGA3UiWddR5NSX-5s__Rpcv8zw.mft (raw, json)
Hash identifier: StA9OVaoJzxT36CkHPxXcgiCoM8ChTIeVcJGrEHTnfc=
Subject key identifier: 1B:8A:6B:77:53:BB:57:06:01:68:08:DE:8D:ED:82:B2:40:3C:DE:EA
Authority key identifier: C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
Certificate issuer: /CN=c8f180dd489675d4793525fee6cfff46972ff33c
Certificate serial: 019FA0E09605701CF41ABDA6B435463F03E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
Manifest number: 19CB
Signing time: Mon 27 Jul 2026 00:01:40 +0000
Manifest this update: Mon 27 Jul 2026 00:01:40 +0000
Manifest next update: Tue 28 Jul 2026 00:01:40 +0000
Files and hashes: 1: yPGA3UiWddR5NSX-5s__Rpcv8zw.crl (hash: VqifQsNZVwmSSxSeyGK+wqaM7+gOULSHIN36/QLNCU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:96:05:70:1c:f4:1a:bd:a6:b4:35:46:3f:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f180dd489675d4793525fee6cfff46972ff33c
Validity
Not Before: Jul 27 00:01:40 2026 GMT
Not After : Jul 28 00:01:40 2026 GMT
Subject: CN=1b8a6b7753bb5706016808de8ded82b2403cdeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:b1:b2:04:86:18:09:2e:55:2e:df:ca:2c:
b3:4f:6b:92:6c:c3:74:70:b4:1b:ac:1f:89:28:fc:
6a:d3:50:8e:1f:e2:bb:2c:6b:fc:eb:ad:dc:18:5e:
f9:d6:eb:d3:37:a0:62:6a:54:23:50:1f:da:5c:a4:
5c:a2:d2:b0:4a:6e:c3:95:87:de:fc:5e:65:2c:a4:
3e:ca:d1:04:6e:d1:a2:d1:ac:cd:1d:95:c6:db:0f:
26:3f:61:7b:9d:aa:e4:89:cb:db:d9:de:4b:fe:f7:
7c:92:8e:f9:83:d6:99:08:b7:f3:97:dc:89:91:d7:
d3:2e:54:68:54:f0:66:5a:ca:d9:ab:2a:1c:0a:dd:
b0:38:62:95:49:fd:63:61:69:e5:f0:5c:6a:fb:80:
ae:98:46:dd:14:8b:78:63:f6:31:2d:ba:e5:d5:85:
a0:f5:7b:e4:63:dc:20:39:f4:7e:bd:34:11:2d:33:
29:05:7f:d6:a5:64:19:f4:ad:a4:e7:60:d6:e2:d1:
3f:f0:54:ff:e2:dc:12:b7:fb:60:ba:fc:7a:28:ed:
63:60:c9:ba:c3:04:74:5e:33:00:4b:7c:33:34:67:
0c:37:03:f8:54:40:cc:43:cb:a3:2e:96:ee:40:64:
7a:97:fa:01:7c:19:1e:c9:62:38:6e:f8:88:df:b4:
3c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8A:6B:77:53:BB:57:06:01:68:08:DE:8D:ED:82:B2:40:3C:DE:EA
X509v3 Authority Key Identifier:
keyid:C8:F1:80:DD:48:96:75:D4:79:35:25:FE:E6:CF:FF:46:97:2F:F3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPGA3UiWddR5NSX-5s__Rpcv8zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/67f1c5-8229-4173-99c1-dbd760045eb7/1/yPGA3UiWddR5NSX-5s__Rpcv8zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ea:3a:97:48:57:f2:51:ce:a7:b8:73:bc:46:e3:d8:b2:97:
12:9f:d3:e7:dc:43:95:54:ff:b8:c0:43:b2:16:90:1e:8a:6f:
56:14:ef:a5:2f:99:77:b5:f0:c8:17:d4:c0:01:5b:f0:8e:e8:
47:24:a0:9a:62:5b:02:e7:30:ce:f7:a7:7d:1e:25:be:52:7c:
6f:15:0e:76:6d:78:17:a7:3b:d6:a7:2d:7a:18:d0:85:c0:fb:
49:a4:55:b8:ae:ca:34:73:5f:4d:3e:c5:a9:44:5d:32:3b:82:
09:e9:00:16:90:33:45:79:2a:39:37:06:c1:98:3c:28:37:ea:
c5:54:93:da:0e:ea:58:6d:76:e5:5c:ea:bd:bf:6a:4f:4c:0d:
62:db:d3:9f:8d:19:78:bf:dd:06:da:39:c1:df:d8:72:82:68:
e7:c3:2b:81:c5:f3:5f:52:8c:20:5a:e4:33:61:57:b2:80:be:
a9:ae:d9:5e:5f:bf:af:33:d7:84:83:37:7e:c0:58:62:00:a0:
3a:ba:56:50:2c:16:4d:81:cb:0d:de:37:eb:59:4d:ba:8a:50:
ca:6a:e5:cd:7e:44:41:34:cd:36:c4:c3:3e:d3:9c:71:80:01:
e2:7d:b1:cf:d7:02:d0:92:24:56:b9:79:77:86:ab:1f:95:88:
1a:86:3d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:41:36 2026 by rpki-client