Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: AnHcxWCKe2Os+0Tu0SJvv5SInys4N3IIzqqOAy048JQ=
Subject key identifier: 07:A7:35:2F:C9:F1:DC:A3:92:3E:42:96:15:7E:B2:3F:6F:14:58:95
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 01A0CE5A2C41D756A917DB7451CDF8EBC7F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 09EF
Signing time: Wed 23 Sep 2026 13:00:10 +0000
Manifest this update: Wed 23 Sep 2026 13:00:10 +0000
Manifest next update: Thu 24 Sep 2026 13:00:10 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: VgN3r+3gh8LKtrBTM3NmwEfc1dnXJDF2BbukMjUP71M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:2c:41:d7:56:a9:17:db:74:51:cd:f8:eb:c7:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Sep 23 13:00:10 2026 GMT
Not After : Sep 24 13:00:10 2026 GMT
Subject: CN=07a7352fc9f1dca3923e4296157eb23f6f145895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8f:11:3f:be:ca:6d:24:88:66:e3:ba:9a:8a:
3d:db:29:1f:21:e4:15:41:97:c2:02:4b:1f:ec:32:
4b:02:95:9a:83:d0:92:14:84:84:d4:98:26:c6:1c:
bc:99:fe:6b:b2:56:92:d5:9c:b0:6e:9d:38:bd:aa:
b5:fc:06:a0:1f:bf:f7:6e:dc:75:f0:78:c6:79:56:
10:d7:a2:36:47:8a:b5:db:db:b1:a4:92:05:a6:34:
c9:36:48:d2:fc:19:b7:77:89:e6:84:80:96:c8:14:
a2:40:0c:e8:6d:91:d5:f2:55:3c:e3:e2:cf:2f:36:
92:b2:7e:a1:53:f2:5a:68:e3:5e:30:0a:8b:3a:73:
94:3f:85:54:c9:a7:7f:ee:bf:40:00:5f:1d:59:18:
12:b6:ed:f5:0d:dc:4e:06:3a:f2:39:8b:f5:44:b0:
6f:ae:f6:2e:88:64:97:9d:db:1c:5c:a5:54:13:5e:
89:36:be:73:f6:9f:1f:1d:37:64:3f:56:8a:91:8a:
fa:dc:5a:4b:15:ad:41:8f:fb:a2:1c:34:de:e0:eb:
32:6f:84:a8:6a:94:70:a8:e1:13:3c:61:ad:fe:ed:
45:a7:45:27:f3:c7:56:99:44:fc:b4:0b:31:39:f1:
5b:e1:a7:01:ed:f2:2d:98:3f:85:15:15:fc:9e:66:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:35:2F:C9:F1:DC:A3:92:3E:42:96:15:7E:B2:3F:6F:14:58:95
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:18:01:42:17:c7:e4:48:28:89:db:a3:d9:a9:b2:4c:15:52:
5a:90:f4:2d:ed:c8:22:b5:d1:fd:0b:e4:38:35:a0:7a:29:b5:
83:c8:5e:53:4d:f4:b4:ab:2b:5d:16:5c:14:b4:d3:14:40:eb:
d8:5e:be:a3:2b:b1:15:e0:b7:8a:3e:ad:42:ca:d8:df:58:71:
37:0e:46:16:0a:60:63:df:28:df:7f:b5:c4:f1:69:37:01:f8:
d5:f2:fa:4f:08:e3:f1:3e:88:b9:08:00:a1:79:d5:cc:10:40:
c9:99:3b:7c:b8:f0:67:db:0a:e1:89:9e:61:01:6e:5e:b7:ad:
c9:f3:6e:e0:9c:d5:7d:f1:15:2f:12:17:c9:49:a9:5d:62:19:
c7:b6:14:1c:54:6c:65:ec:f7:7b:e0:90:8d:c2:08:89:e9:17:
39:6e:8c:75:1c:54:f0:9c:ee:7f:1d:ef:60:5f:9b:43:55:fb:
ee:c8:82:3f:1e:ae:3e:92:3b:99:ee:96:a1:ad:88:19:36:1a:
f8:81:ea:f7:28:09:2c:81:af:64:eb:de:4c:83:cd:2f:02:15:
62:7f:5e:f7:9b:1e:4c:99:ee:79:35:6a:bd:12:de:ed:15:86:
e9:a7:49:ee:fc:83:40:b7:91:bf:eb:27:28:72:10:3c:3c:fb:
aa:6f:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:15 2026 by rpki-client