Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: aeJnT9FfmZeygoZ1HAxjhXV7RcnWyoMg+xWnMb9TOik=
Subject key identifier: 58:56:68:91:DA:DD:82:75:B6:04:28:00:70:94:45:53:27:6C:76:BF
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019FEEC47AF38690C32CF60F3D00FA1223AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 107B
Signing time: Tue 11 Aug 2026 03:01:21 +0000
Manifest this update: Tue 11 Aug 2026 03:01:21 +0000
Manifest next update: Wed 12 Aug 2026 03:01:21 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: kXI/nYG31nHl9Pi+RNth5NUw8ffe3Crdj0jvkBhc3S4=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Aug 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ee:c4:7a:f3:86:90:c3:2c:f6:0f:3d:00:fa:12:23:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Aug 11 03:01:21 2026 GMT
Not After : Aug 12 03:01:21 2026 GMT
Subject: CN=58566891dadd8275b604280070944553276c76bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:fd:ca:48:a7:e0:68:33:3d:7d:08:bf:fc:
7c:f2:8c:a7:00:ba:99:37:08:1c:75:d0:c1:8c:50:
3d:f3:15:2f:cf:b6:d9:be:94:9f:c3:4e:7b:09:c3:
6e:fb:98:14:43:c4:2e:e2:a1:29:bb:8b:42:cd:72:
43:a6:aa:7e:a5:89:90:1d:15:42:02:6e:9d:fb:a6:
6e:08:57:30:dd:76:f6:f8:67:ee:51:da:6e:c8:61:
c0:77:7b:17:51:be:26:25:77:f9:fd:fc:e4:a3:20:
a9:45:e1:ac:9b:a1:fc:52:aa:4d:81:80:eb:97:1c:
2b:87:a5:7e:f2:ee:ff:42:41:99:9f:0d:76:95:99:
47:a1:db:b2:ce:2e:8b:25:9e:bb:d8:7b:4c:44:46:
6f:62:77:81:09:78:a2:ae:25:72:f2:b6:af:bc:27:
54:64:32:82:2b:42:01:79:d1:94:d4:c8:c0:52:29:
71:2a:4c:e3:ba:ee:4b:c0:88:a3:39:d5:83:72:5f:
53:4b:bd:48:81:9d:dc:8d:20:df:9e:a8:8a:b1:0d:
91:96:1a:fb:9a:49:c9:15:37:00:3a:29:6e:50:9b:
88:52:a5:f2:5c:2d:d7:2a:55:e6:6e:b5:8c:6e:4d:
5c:b1:b8:b7:b9:53:07:07:c4:b0:83:75:00:30:44:
f1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:68:91:DA:DD:82:75:B6:04:28:00:70:94:45:53:27:6C:76:BF
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bf:72:65:e3:72:f9:29:af:0a:be:8c:7b:41:96:11:c1:06:
f9:ba:0b:29:45:18:7b:15:b0:2f:78:72:37:ba:59:25:85:25:
b6:70:99:ec:25:ac:65:1a:c5:b6:5e:6a:9e:ec:1b:b1:6c:45:
0b:cc:62:fc:8b:bb:90:19:95:50:0d:fa:83:73:55:9b:45:1b:
4b:53:e7:da:f8:45:f0:e4:4d:29:62:ee:2f:17:36:1f:7e:cb:
cf:f0:5a:51:a1:62:d1:4f:86:1e:a1:29:a2:5d:51:cf:87:8b:
23:b8:82:c2:b4:60:65:1d:4a:e5:4b:c1:36:bf:60:02:22:b4:
f9:31:2d:a6:49:b8:29:27:87:61:24:ee:4c:21:39:70:ce:29:
6c:b5:d7:d3:92:4d:84:28:9a:7e:22:f7:fa:a9:3b:79:67:8f:
a1:11:cf:9c:d5:dc:eb:69:c2:da:1e:e7:70:50:fc:f7:d2:ee:
9e:39:00:70:04:d1:0d:1a:d8:ee:41:af:a7:e4:07:6b:3c:b3:
47:41:7f:39:4f:98:b7:1e:32:c4:46:13:24:36:21:7e:7d:e6:
6e:31:b8:c6:79:85:f8:a9:c4:b9:99:f2:c1:f4:6a:af:ae:f7:
b3:7e:ad:e6:7a:4d:18:8b:7b:76:49:67:3f:b6:b1:86:42:51:
44:0e:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 04:28:30 2026 by rpki-client