Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: qodSdv3ez6yya1Z9lCtXZiuuapXKmbY1BsN7sP3xZmg=
Subject key identifier: 82:CA:BA:F2:C0:A2:3C:65:D2:07:4C:87:E8:EF:B2:9E:EF:87:A9:AC
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 01A0024AF6DCAC8DFE7094E3D8D8E2AFB790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 16B8
Signing time: Fri 14 Aug 2026 22:01:02 +0000
Manifest this update: Fri 14 Aug 2026 22:01:02 +0000
Manifest next update: Sat 15 Aug 2026 22:01:02 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: KSoOtAFmZuBuKBk/R4m2Q4S0SdiGNxzuiCDB1i3tUEc=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:f6:dc:ac:8d:fe:70:94:e3:d8:d8:e2:af:b7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Aug 14 22:01:02 2026 GMT
Not After : Aug 15 22:01:02 2026 GMT
Subject: CN=82cabaf2c0a23c65d2074c87e8efb29eef87a9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:4d:30:5e:d2:51:13:0e:82:be:f5:24:0f:
79:0d:b1:52:80:cb:6e:be:78:e1:41:99:51:1c:81:
ff:58:87:7f:94:eb:1c:a8:a2:7e:fb:3b:7e:c7:32:
3e:84:c1:78:63:4d:63:3f:cf:78:71:34:4d:7e:2c:
76:a8:21:c6:b1:2e:f8:73:45:b1:5d:00:72:c7:d6:
1b:0d:fb:c3:86:64:9e:39:5d:97:42:9d:66:3a:50:
98:f9:8a:13:88:db:7a:90:3b:6b:47:87:29:6a:7c:
21:d5:bf:e5:2c:a1:1a:39:04:d9:a0:35:a5:6d:21:
4d:a3:20:e3:6a:2c:9e:01:4f:0a:b1:d5:9f:ae:54:
07:20:13:7d:c3:4f:b4:60:7e:32:5e:6a:ac:c7:c3:
18:b9:22:c4:75:14:e7:3e:1c:89:15:5c:17:c8:b0:
5c:33:5d:0c:1a:0a:ed:c8:26:28:a4:51:07:6a:41:
5a:26:25:1b:2b:1c:2c:4f:32:fa:c6:9a:7c:2e:10:
f9:89:7b:02:7e:6a:a7:f9:fd:ca:21:ff:8e:21:46:
72:ce:f1:45:1c:e7:e9:c2:e2:02:cb:5a:1e:ed:b8:
f0:c9:da:60:d5:a3:53:44:e0:8e:42:23:0a:1f:e1:
ab:2a:ef:9a:a5:5d:a9:b0:38:e9:d9:55:b4:02:88:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:BA:F2:C0:A2:3C:65:D2:07:4C:87:E8:EF:B2:9E:EF:87:A9:AC
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9e:83:67:5e:df:ba:1d:1d:96:52:c3:65:3f:7a:a3:3c:bf:
f0:1f:40:21:5c:20:03:01:8f:2f:60:2a:5a:cb:2f:e9:65:16:
17:a4:b7:f9:bc:47:20:83:f9:20:94:68:47:fd:1f:fe:08:8f:
e6:5f:59:14:22:4e:ee:e5:45:2a:09:f9:44:58:69:47:a8:03:
6e:53:05:5a:50:ba:d9:cc:75:38:22:1c:98:9d:28:ae:6c:5e:
3e:d0:23:a1:96:bc:7c:a1:da:23:1e:55:f3:1e:38:73:14:2c:
a4:20:1b:43:6c:26:2c:f2:df:19:0c:7f:4f:6b:ad:24:f7:04:
4f:2d:a7:67:44:aa:eb:e1:0a:9a:38:cd:15:4b:2e:fe:25:76:
d3:8c:3c:74:59:dc:a3:e9:28:93:ba:68:b2:4e:70:0b:3f:22:
80:71:3b:9c:f8:de:67:b1:8f:cc:09:80:fc:33:c5:59:fd:e0:
98:67:5a:b4:9a:47:1b:d8:33:b7:05:af:6d:77:55:c1:40:a1:
0e:c4:4f:d6:63:88:cf:87:35:bc:29:96:98:9d:9f:25:56:32:
35:46:e1:42:90:28:97:96:43:43:e5:f1:6f:bf:9c:0a:25:a2:
e6:4f:5a:d4:83:85:bb:23:42:00:94:de:e7:cf:f1:53:89:e5:
39:ee:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:02:34 2026 by rpki-client