Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: YzGf77oEKpH9S0VGjs5+ua5ttbZ6JySpXg1S8vByCCk=
Subject key identifier: 90:B7:B6:84:F3:B1:BA:9F:FF:1A:3F:B1:C6:42:17:2C:AA:9B:20:65
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019F927FA84AFA5A616D3E672C61B878EB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0DEA
Signing time: Fri 24 Jul 2026 05:01:07 +0000
Manifest this update: Fri 24 Jul 2026 05:01:07 +0000
Manifest next update: Sat 25 Jul 2026 05:01:07 +0000
Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: UXCmb4F6qTlii0aAf9fXuWcrdVdPW8zh1sQNm5E5Fj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:a8:4a:fa:5a:61:6d:3e:67:2c:61:b8:78:eb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Jul 24 05:01:07 2026 GMT
Not After : Jul 25 05:01:07 2026 GMT
Subject: CN=90b7b684f3b1ba9fff1a3fb1c642172caa9b2065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:6f:f7:46:71:f2:e1:49:0a:8d:fe:9c:c2:
5e:5d:c0:8c:8f:3b:d4:8c:72:3f:75:86:b0:22:82:
da:4a:77:81:6b:05:8e:d7:42:50:09:7e:2c:35:9f:
e7:a5:d3:15:e3:a2:f7:d4:b9:70:b5:06:77:59:41:
fe:cb:41:bf:e9:61:ae:27:b2:59:94:d3:ba:c9:d8:
6c:4a:d0:25:43:97:30:f0:2d:6c:b0:5a:c8:d9:63:
7b:e7:bb:67:b8:f8:60:ca:3f:e1:fd:88:ae:7e:8f:
64:bf:ef:c8:b1:d6:49:cc:a9:a1:58:90:61:34:87:
7e:d8:99:a4:3e:2a:50:a9:5d:92:b2:1e:e7:44:76:
15:3b:ef:3e:5f:76:e3:aa:c0:0e:83:ef:73:5b:2b:
cb:b8:6c:04:a7:79:93:ca:81:93:d8:ff:3a:65:45:
1d:b4:0e:c7:14:f7:c2:d4:65:a4:27:42:17:4c:ee:
9d:b0:5c:3f:c1:91:7c:e2:01:24:5a:4d:c7:72:08:
1f:9d:2b:ca:70:a7:ad:41:c7:cc:0c:5b:39:95:62:
27:81:d8:e7:70:16:78:4e:67:a2:75:33:d8:6f:03:
d4:bf:2b:86:a7:98:bf:bb:4e:c9:5e:27:ae:fd:82:
e5:c4:ce:90:87:47:a1:c9:a7:69:a5:47:ee:b3:0e:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:B6:84:F3:B1:BA:9F:FF:1A:3F:B1:C6:42:17:2C:AA:9B:20:65
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1a:01:3b:22:c5:47:02:bd:1e:67:dd:03:a9:1b:db:f7:eb:
76:3d:17:ef:1b:8f:33:a6:9d:8b:10:de:52:e0:57:b4:b3:80:
50:37:93:41:e6:4b:f4:2b:4e:67:e7:a5:9b:0a:d2:89:16:f9:
ba:4c:05:12:c5:aa:73:08:9a:b8:07:90:ed:85:ff:76:d9:5c:
63:aa:f1:47:c1:af:da:cd:e8:01:41:46:b1:a3:f4:3f:32:9f:
e9:b1:34:14:48:6a:5f:a1:cd:df:5a:45:02:ea:9f:40:a0:a6:
b8:27:60:c1:aa:d7:35:a8:e6:7b:2c:45:4c:89:af:4e:b2:d3:
02:df:f3:d9:59:72:31:fb:c2:07:cb:ca:dc:b6:2f:28:54:b3:
fb:33:89:91:47:69:29:c8:49:24:10:52:cd:21:de:ca:e4:b1:
2b:b0:31:36:c0:ad:0c:d0:f5:aa:4f:48:e4:b6:ce:72:b7:c3:
fb:50:11:0d:18:e6:c4:2c:cd:18:83:2f:49:81:1d:14:1b:fa:
28:c1:04:d3:ae:79:f1:c4:97:76:71:8f:af:65:30:cf:4a:cb:
0c:3a:15:50:d0:56:5e:b8:95:12:78:28:ae:52:da:1e:7c:4a:
0e:7a:df:15:06:63:1c:9b:b3:33:66:71:22:e7:6b:3c:ed:cf:
6f:82:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:10 2026 by rpki-client