Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: uYVpH/jVTbbyV+jSiSW9+jAdTXgcVCO4Ga+ySwOC9vs=
Subject key identifier: 66:2A:FF:9A:6D:60:D4:86:20:49:B1:BD:E6:10:BA:EC:0B:83:12:83
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 019F86444D4391CCD2BC45DFFE9C5B71D3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 07F7
Signing time: Tue 21 Jul 2026 20:00:50 +0000
Manifest this update: Tue 21 Jul 2026 20:00:50 +0000
Manifest next update: Wed 22 Jul 2026 20:00:50 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: vpiIpRb9ytRgW5fheLaq7SmIjR/EdN57wtEjiqqWoO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:4d:43:91:cc:d2:bc:45:df:fe:9c:5b:71:d3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Jul 21 20:00:50 2026 GMT
Not After : Jul 22 20:00:50 2026 GMT
Subject: CN=662aff9a6d60d4862049b1bde610baec0b831283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:a8:93:28:97:55:4c:9f:56:d0:4e:6c:a9:
6c:38:e8:a2:05:62:fe:d4:22:b3:e9:3b:ef:f2:59:
21:9a:d2:f9:2c:fb:1e:e9:7f:4e:05:d6:e5:35:dc:
48:3a:a9:93:15:a1:32:24:79:6f:1e:d9:db:d6:22:
da:c9:71:80:9b:cf:ae:9e:d4:c2:56:f9:67:40:f4:
a9:0e:6a:8f:9b:33:9a:2b:47:56:93:b4:e2:5e:58:
57:c5:fe:cb:24:5d:7c:e0:12:23:55:28:2c:b1:9e:
84:aa:07:9f:d2:07:7c:b5:ab:55:2c:28:0b:18:62:
22:8b:4d:4e:24:bf:35:13:ca:a4:21:af:6d:06:05:
66:c0:9f:49:b9:8d:10:36:52:b7:04:9a:81:58:f2:
74:69:a4:42:9d:9e:93:67:77:88:17:02:dc:37:74:
bf:dd:47:c9:af:f0:30:7f:ec:24:0e:71:81:a1:a0:
d4:80:61:70:88:be:2c:a3:ad:4d:f8:1d:97:2d:dd:
f7:85:28:a4:4f:40:d5:dc:bd:b5:7c:a4:40:ea:ae:
01:8c:be:d6:d3:98:89:3f:10:9c:6b:10:84:1c:94:
97:e0:2e:76:63:99:50:4a:79:91:d5:25:42:84:95:
28:bf:52:5a:7e:a0:57:24:0f:4f:22:d5:01:29:f8:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:FF:9A:6D:60:D4:86:20:49:B1:BD:E6:10:BA:EC:0B:83:12:83
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:7d:64:7d:1b:07:1f:24:f8:c6:27:1e:c4:5a:c3:ed:2e:
5f:38:d2:87:18:6f:d8:91:be:92:08:58:eb:ff:aa:a0:14:4b:
8b:1f:92:55:e2:b0:fd:87:75:0b:a0:4e:88:f8:fa:53:2c:21:
d7:35:50:c1:fb:88:ec:00:d8:4e:bc:bb:88:26:c9:d7:72:f8:
1f:61:21:6b:f5:ec:20:c9:b9:b6:66:2b:d5:c0:3e:0e:a6:67:
b8:a1:b8:f7:44:d8:d7:f6:1f:21:ba:1c:fb:bb:e7:23:9a:bc:
a4:34:bb:bb:da:b0:cb:73:0e:e3:0c:73:52:a5:bb:4f:6f:6c:
44:ce:08:c1:e2:b4:56:75:ea:9b:c1:80:12:bf:36:25:b6:dd:
f7:c1:c0:1b:2e:a1:eb:9c:53:15:ba:fb:15:70:38:d8:6b:64:
62:23:ef:c4:ad:70:c0:c7:88:78:6e:9f:3a:ce:ec:fd:7b:92:
5c:9f:a8:d9:02:67:30:56:83:8f:dc:d5:81:fd:08:4e:f3:13:
2a:36:36:7e:23:01:48:0c:00:da:66:3d:fe:29:c0:27:60:ef:
67:38:76:56:f4:55:56:1b:77:57:a9:97:e1:4e:60:e6:9e:9a:
50:c9:02:d5:cb:da:0c:0d:56:af:9f:38:c2:10:1c:98:18:1b:
01:8d:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:45:25 2026 by rpki-client