Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
File: y-tftzOrs-B9dfqA176csYE80-A.mft (raw, json)
Hash identifier: MMZz/TTk5yHDgHZjNYpKjDvd6P3FzNWHvdi4YbgCdUc=
Subject key identifier: 31:87:48:6F:B1:F7:08:9F:A4:89:E8:FB:CF:0D:D2:0C:23:A7:7F:CA
Authority key identifier: CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
Certificate issuer: /CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Certificate serial: 019FCCA6D420AE399ADBC32A4A530B1A946E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
Manifest number: 097B
Signing time: Tue 04 Aug 2026 12:01:53 +0000
Manifest this update: Tue 04 Aug 2026 12:01:53 +0000
Manifest next update: Wed 05 Aug 2026 12:01:53 +0000
Files and hashes: 1: VpnFqg4nLkv4hVZvAnrC7KmiNAU.roa (hash: 5iLmKrDX02BNsU1dvSS1ObOgIc5TS34EiCu+Rj74FUw=)
2: y-tftzOrs-B9dfqA176csYE80-A.crl (hash: CI19xyJ0jOFST8A8ZNeE5J44w21kIZfy5KhQq0IUhkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:a6:d4:20:ae:39:9a:db:c3:2a:4a:53:0b:1a:94:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbeb5fb733abb3e07d75fa80d7be9cb1813cd3e0
Validity
Not Before: Aug 4 12:01:53 2026 GMT
Not After : Aug 5 12:01:53 2026 GMT
Subject: CN=3187486fb1f7089fa489e8fbcf0dd20c23a77fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:21:f9:25:9a:2c:2d:56:a9:b4:10:59:14:
75:b9:56:19:22:39:a9:6e:62:15:bf:fd:53:00:1f:
8a:fb:18:f6:5c:d5:10:4c:f5:ca:9d:6e:21:ec:33:
ca:d6:ce:a9:ab:54:99:9b:09:b3:64:55:b5:f6:aa:
46:27:8e:ba:c3:7b:d5:83:eb:a0:91:cd:5f:43:1c:
4f:ce:f5:d4:fd:33:c5:c0:ec:37:21:8c:26:88:3a:
fa:07:9e:2d:54:55:78:05:12:94:75:78:0d:bd:43:
f9:19:52:c0:19:7e:95:4a:0f:98:5f:b9:5d:ed:00:
2d:eb:14:83:df:ac:ef:94:f2:fe:4f:db:02:5b:22:
13:9d:07:75:87:97:51:d9:05:7d:3d:72:28:17:b9:
f3:3c:08:c3:31:02:aa:13:33:35:99:0f:56:dc:2f:
4f:33:87:f6:27:3f:0f:0b:a4:7e:e7:72:61:be:46:
8f:c8:d5:c9:5d:60:e9:81:98:ab:9e:fd:f9:b9:f6:
00:ab:ff:37:a6:5d:a4:80:9b:f3:3a:85:f0:c9:27:
ff:f8:46:1c:b9:77:87:e8:84:4a:b1:8b:49:25:9e:
fe:35:66:5e:1d:7e:bb:1f:73:5e:47:cf:4e:e5:60:
f1:b0:17:98:94:62:ab:49:30:d2:15:ff:7a:c7:9b:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:48:6F:B1:F7:08:9F:A4:89:E8:FB:CF:0D:D2:0C:23:A7:7F:CA
X509v3 Authority Key Identifier:
keyid:CB:EB:5F:B7:33:AB:B3:E0:7D:75:FA:80:D7:BE:9C:B1:81:3C:D3:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-tftzOrs-B9dfqA176csYE80-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0a7c4e-95bc-456b-8f74-2ccfb3b41260/1/y-tftzOrs-B9dfqA176csYE80-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:ee:a2:6c:24:b6:0e:26:4c:8d:62:f0:d2:62:04:ec:ac:
54:b0:72:11:26:58:c5:93:d7:47:22:43:09:c0:d6:26:d3:3b:
82:46:46:14:9e:e9:7b:ce:42:f5:91:d4:81:5f:b6:9c:92:c4:
c8:98:94:7f:91:88:d0:e7:11:df:74:49:e0:4b:22:ff:59:9c:
d3:9c:94:a7:8d:56:ee:0c:d0:bd:bd:9c:ad:0d:7c:94:d6:f9:
85:77:ca:c1:60:05:8c:22:c2:fe:34:b1:a0:aa:2f:a3:e6:6a:
f3:85:b3:df:95:53:d9:12:af:91:b4:64:c7:2d:7c:dd:fd:19:
2a:fc:7c:27:d2:03:f5:ca:14:75:1e:fa:01:cb:d2:81:5b:71:
c5:1a:03:d0:98:28:c8:8d:45:24:7f:1e:e4:01:87:0e:8d:a5:
88:33:85:2a:6d:6a:84:4f:99:61:8c:1f:58:6e:71:bb:b5:da:
cd:02:12:8a:3c:4d:5f:31:85:6e:34:1b:da:84:cf:d8:a8:c8:
12:da:a5:64:30:96:f4:fc:40:4b:d5:2d:9c:15:8f:fe:25:3e:
db:cc:21:de:0f:87:9b:30:11:82:dd:4b:eb:4f:b7:27:04:b6:
d8:9e:0f:d2:b0:4c:80:46:8d:cf:a2:11:e8:24:18:98:0a:18:
2a:cd:e1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 15:17:31 2026 by rpki-client