Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: 0iUIhXZoQt/zhF7IF334WG28mV3mMFE2FWozM33R9As=
Subject key identifier: 86:08:4B:03:89:F7:71:BA:1A:0E:A5:A3:B0:D2:CE:2E:07:BB:25:25
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019F91A3D9B12D4A917FFB8C582A8E12B810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 094B
Signing time: Fri 24 Jul 2026 01:01:02 +0000
Manifest this update: Fri 24 Jul 2026 01:01:02 +0000
Manifest next update: Sat 25 Jul 2026 01:01:02 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: p3hnokTssG9GZKCDWAgebUzceYzoFCqFv3nN0wiW0B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:d9:b1:2d:4a:91:7f:fb:8c:58:2a:8e:12:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Jul 24 01:01:02 2026 GMT
Not After : Jul 25 01:01:02 2026 GMT
Subject: CN=86084b0389f771ba1a0ea5a3b0d2ce2e07bb2525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:e1:c1:41:19:1d:d4:e5:78:e5:86:20:bb:
6c:1f:4a:2d:b9:a2:2d:95:1d:d6:c2:5a:4f:cb:d1:
b3:ef:6d:13:9d:92:d1:ad:56:12:23:82:d0:e0:a0:
eb:e9:1e:42:76:82:92:4b:fe:7b:3d:c2:12:2e:ce:
e8:7c:61:b6:44:c9:3a:fb:e5:41:09:37:66:17:dd:
87:14:eb:b6:05:ce:3c:6b:a8:e7:d0:fb:da:ab:2d:
6a:cc:4d:68:2b:f4:26:92:34:f2:a1:50:0f:ad:cb:
12:09:c3:a7:1e:71:db:b8:a2:e8:a5:86:96:b5:08:
82:5b:15:a7:cc:02:2e:7c:79:09:21:36:31:cc:dc:
10:e3:5b:94:a3:e2:be:3a:53:c0:bd:2a:07:13:b7:
97:05:19:29:e1:22:33:21:8a:90:00:cf:3e:a3:39:
5a:24:df:e1:d9:81:ab:04:6b:0d:7d:03:69:f8:4d:
9b:cb:b8:03:b4:09:dd:c8:80:f5:4f:dd:f5:33:8f:
01:9b:e6:a8:a7:76:00:25:63:c0:29:22:c2:1d:0e:
48:d4:35:42:d3:4e:7f:2d:af:d2:5f:59:d1:01:16:
4c:6c:ab:89:95:bd:4c:0f:a7:97:72:ae:e0:09:57:
c2:ed:bb:f5:23:ed:a9:d3:4e:96:cf:85:41:59:14:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:4B:03:89:F7:71:BA:1A:0E:A5:A3:B0:D2:CE:2E:07:BB:25:25
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3a:ba:5d:82:f2:be:26:c2:ff:33:5d:1f:3e:82:e3:22:1e:
e7:27:1c:cf:4a:7c:2d:90:61:b4:1a:1e:b3:7f:b7:69:21:5d:
dd:cb:ef:a7:b9:f3:b3:8a:b6:9b:af:75:ba:3c:a0:66:50:6c:
15:f8:ef:46:90:cf:63:49:fd:4c:83:04:2c:74:9a:34:d6:e1:
4d:96:11:8a:d8:3d:70:47:d4:45:14:33:a8:f9:8f:ea:ee:7e:
ee:0e:f8:17:82:4e:8c:28:5b:51:50:8b:0b:0b:e9:87:cd:c0:
62:ab:51:28:04:ab:ce:4d:e6:fd:74:86:df:8f:65:8b:d6:8c:
57:2e:5f:91:61:9b:0b:3e:7a:bf:3b:03:0f:73:1c:76:b8:9c:
57:28:55:1a:75:a1:6d:28:05:31:cd:70:82:27:1d:a2:0c:30:
b0:df:db:9c:fb:3e:b4:84:8a:09:ca:9d:d0:9b:f3:47:85:9a:
c1:ba:96:c4:67:90:ae:ad:54:a0:54:0c:4b:97:6c:b7:9e:84:
9c:b3:61:5b:bc:50:2c:3a:f9:6e:0e:d7:b6:e0:79:6f:69:7d:
69:ba:9e:9c:8a:60:cc:78:57:04:8d:60:5d:9a:ea:7f:f3:06:
5d:ab:ee:2b:b8:02:0c:45:df:c0:8c:25:f6:c9:ae:a1:d1:14:
a1:5a:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:50 2026 by rpki-client