Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
File: ywyjSKyJHDNtjHlFpb1bMyXrXws.mft (raw, json)
Hash identifier: fCXDokCde2snjhcoLU6aFOqYd/38S5J34vm4Xerkhxc=
Subject key identifier: C2:1A:39:5E:31:F8:67:E4:99:88:E5:BD:95:26:E7:E2:FA:AE:64:D5
Authority key identifier: CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
Certificate issuer: /CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Certificate serial: 019F83B0FBBA1680BEDCCDF6DE5BB247D04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
Manifest number: 088E
Signing time: Tue 21 Jul 2026 08:00:41 +0000
Manifest this update: Tue 21 Jul 2026 08:00:41 +0000
Manifest next update: Wed 22 Jul 2026 08:00:41 +0000
Files and hashes: 1: 1-Y3ijndscKqraUdYHPlGlvPiaww.roa (hash: xxGKvHWQXGb9FbfED6D0G6e4DrQ9E36ESQZN/cdfGxs=)
2: Xh_VSPJKOjJ808dZZ9cjw-Qe3R8.roa (hash: zFLbAkvTVFDLeRppM8t2hdy6uhNcDWH0+KfQkEKnBWc=)
3: h1rJ_5IwT6r9srNzb0xH-naB6tI.roa (hash: 1/JRSZ3nsnOwZgC6F3kqzm5Oq+Y/WO+2ye58dNCreY4=)
4: ywyjSKyJHDNtjHlFpb1bMyXrXws.crl (hash: 2MFERUzFHKbPov2dc/4hx2/YzoSa8f6PMfccJIjU5Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:b0:fb:ba:16:80:be:dc:cd:f6:de:5b:b2:47:d0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0ca348ac891c336d8c7945a5bd5b3325eb5f0b
Validity
Not Before: Jul 21 08:00:41 2026 GMT
Not After : Jul 22 08:00:41 2026 GMT
Subject: CN=c21a395e31f867e49988e5bd9526e7e2faae64d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:f1:e7:6c:a1:ff:94:49:cf:85:bf:da:1b:
c9:63:6f:0a:12:a8:5a:1a:ce:c4:a5:ea:33:31:67:
b1:3f:c6:8c:14:bf:eb:71:77:32:7c:5a:dd:66:b5:
82:10:82:3f:3e:52:d4:f4:a7:4b:7c:34:27:74:b6:
19:07:24:cb:07:89:d2:48:42:e2:ed:dd:8b:37:70:
2b:75:fc:b5:b1:b5:33:72:a0:b2:77:31:c4:f2:92:
ab:55:2e:33:5b:23:64:f6:ee:23:b2:53:68:b0:5e:
b5:e9:4a:4f:0d:6b:e7:1f:84:53:dc:2e:ac:70:1f:
2c:79:56:35:19:cb:59:ba:71:b0:b6:33:eb:d3:9a:
19:a1:51:a4:72:bf:8e:1f:39:52:e2:52:cf:d7:de:
5c:7e:3d:4c:37:7b:bc:06:cc:01:34:da:a5:9d:5b:
cd:b5:22:e5:9e:b7:2c:b8:21:19:31:7f:21:c0:94:
18:62:44:f9:27:33:9a:1c:6e:2c:cb:f4:14:48:22:
59:e1:ee:8a:8c:fd:01:67:8a:6f:3e:e0:83:bf:40:
19:20:92:8c:d7:7d:f5:3b:c1:28:1f:e5:e3:4f:a5:
a2:b8:de:55:33:72:95:fe:dc:a5:33:6a:9f:54:00:
3e:6e:c5:96:9a:ab:14:50:61:78:75:e9:2a:17:03:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:39:5E:31:F8:67:E4:99:88:E5:BD:95:26:E7:E2:FA:AE:64:D5
X509v3 Authority Key Identifier:
keyid:CB:0C:A3:48:AC:89:1C:33:6D:8C:79:45:A5:BD:5B:33:25:EB:5F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ywyjSKyJHDNtjHlFpb1bMyXrXws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ef61d6-05d1-4fb2-a6ea-425232fd5643/1/ywyjSKyJHDNtjHlFpb1bMyXrXws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:27:7f:b5:95:62:d2:3b:1c:58:93:18:d3:47:eb:99:6d:bf:
a6:c8:08:b7:6c:24:65:67:89:ba:4a:bb:73:95:f1:b7:39:8e:
de:73:ee:59:50:dd:9c:cb:52:83:e9:ce:9a:04:89:29:78:0d:
96:59:e6:0c:a4:82:e5:e2:e4:73:88:c4:8c:6b:75:bf:e6:6c:
d6:90:f5:e0:9d:57:61:ae:5c:cc:d0:ff:2d:de:1d:69:b7:12:
79:5c:d2:78:3e:50:1c:83:b9:dd:19:7b:4b:97:2b:59:25:67:
2d:a8:8d:d8:ad:82:20:4b:94:d1:40:e4:29:26:0b:db:b4:b7:
01:0f:1c:95:18:40:0b:db:ea:b5:2e:09:f9:19:53:c3:6e:cc:
ac:c3:3a:4f:eb:48:ed:95:db:bc:eb:72:4c:81:5e:8d:73:fb:
44:26:8d:58:bd:69:65:a9:be:a3:f2:90:4d:58:a0:4d:55:a3:
7a:8b:7e:5f:13:45:3e:7f:10:b1:63:81:b5:59:67:5a:cc:dd:
b8:81:6b:5e:75:65:c9:51:54:af:92:9d:fe:1c:68:d2:5e:b6:
97:55:f4:31:85:51:38:95:90:d5:67:0b:10:eb:c6:6d:a1:0e:
1b:68:f8:02:f5:2f:91:48:01:68:a3:ba:a2:ea:97:a1:1e:ae:
07:4b:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:56 2026 by rpki-client