Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: 2YFJciUwzysB2wambxgsBHFXFBe3XRC/hEIrtufrdsI=
Subject key identifier: B7:27:08:48:63:AC:CE:1F:D3:6B:07:8A:19:C3:AE:50:54:05:AF:8A
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 019F9F283A6EB7D9EF521E2F74677BE4590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 1007
Signing time: Sun 26 Jul 2026 16:00:41 +0000
Manifest this update: Sun 26 Jul 2026 16:00:41 +0000
Manifest next update: Mon 27 Jul 2026 16:00:41 +0000
Files and hashes: 1: H7NifDoSU6PPqAYGiGzy4_-XfNw.roa (hash: sk5Lex95/S0IAQQhow818tnsCZwdWLab0EALvw3QhYw=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: qUG/P0b90lqAxSi/TaM1hVq/708QsbdZeWH826vxxik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:3a:6e:b7:d9:ef:52:1e:2f:74:67:7b:e4:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Jul 26 16:00:41 2026 GMT
Not After : Jul 27 16:00:41 2026 GMT
Subject: CN=b727084863acce1fd36b078a19c3ae505405af8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:20:fe:06:1d:fd:18:4d:63:7c:36:f0:f8:
c4:c1:ce:8d:61:5c:79:cd:70:99:b1:4a:d9:df:22:
7e:3e:af:86:3f:22:b3:59:1e:00:ad:f6:bf:5c:6d:
d6:35:0c:d7:74:45:c6:0c:b8:ac:cb:bb:6f:51:8b:
2c:60:a7:71:36:f6:31:11:f9:f5:13:f7:ad:7a:1d:
50:a2:fd:2d:71:e6:c2:a5:be:f0:29:ac:39:ca:05:
53:4f:e9:a9:ed:5a:b6:00:08:c7:a1:a7:a8:ab:87:
c3:b8:be:d9:00:7c:be:2d:72:4c:b7:8e:bd:4c:f2:
3f:ff:33:32:32:74:da:3a:29:48:44:dd:f2:64:a9:
44:54:85:23:34:37:58:27:68:d6:d3:7c:6a:ed:47:
2c:4f:53:11:6a:99:0b:44:93:5a:b6:7c:36:01:7e:
e1:73:2c:b5:f3:a6:55:7e:5c:14:3f:14:5b:28:4e:
e7:0c:aa:31:af:26:e3:9a:28:98:2a:00:18:f1:29:
73:40:da:8b:3d:d6:a3:db:84:6b:61:3a:a2:b1:63:
f5:9b:19:b4:12:48:df:de:7a:63:ad:ff:8a:e5:1f:
7f:6b:fd:9a:03:e7:d7:fc:e6:fa:bc:b5:10:f6:a3:
1a:d6:d5:3e:4e:63:bc:8a:ab:08:99:47:30:f4:6c:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:08:48:63:AC:CE:1F:D3:6B:07:8A:19:C3:AE:50:54:05:AF:8A
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:97:b4:cd:47:45:a0:c8:e7:7c:9a:1f:70:93:36:f4:e6:e6:
47:10:ef:aa:dd:09:4c:65:b1:74:20:b6:5f:06:0d:55:ef:cf:
90:15:ee:d4:68:dc:ae:ef:16:04:5f:27:8a:6a:3a:3e:de:40:
e3:9f:f6:2b:c8:23:8b:6a:b2:66:b7:30:0e:4c:c1:9b:79:30:
db:32:04:26:e8:b7:f6:4b:f3:60:ff:40:71:6a:a9:3e:3c:99:
fd:f9:eb:2b:02:b2:60:26:8e:7c:08:2c:cc:17:33:5d:6b:99:
21:0a:8b:d6:89:91:c7:fc:82:c9:a8:6e:05:d6:97:05:64:0d:
70:6c:b3:9b:1d:43:9b:50:66:60:f2:b4:2c:92:d9:31:00:2c:
72:c4:61:ea:4b:59:83:b5:1f:02:b2:0c:5e:76:92:f9:46:71:
41:7b:fd:31:30:15:d5:34:d4:63:f6:46:9c:f8:fb:42:d7:f2:
22:bd:14:a8:21:85:84:98:8d:80:64:82:07:19:2e:cb:c3:fe:
90:a7:8d:f3:c9:70:2f:cc:63:8d:98:76:85:50:f8:98:65:7c:
6f:d2:0f:21:f0:ff:c2:ee:63:f5:ae:83:67:7d:f7:8f:c4:82:
4a:c9:b8:6a:ba:7f:ef:a7:b3:ce:80:93:e6:b6:b3:1f:b4:6d:
0b:c7:5f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:37:43 2026 by rpki-client