Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: tgph66+SJB0AsOCxUUrvFlyb8thVRuyU0Er2F3LX/sU=
Subject key identifier: 42:CE:B0:D1:93:ED:20:D9:EB:FD:8E:EC:41:4C:C4:E2:A4:47:F7:97
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019F932455567F46FAD1CA7C171CB6FDB6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 07A4
Signing time: Fri 24 Jul 2026 08:00:59 +0000
Manifest this update: Fri 24 Jul 2026 08:00:59 +0000
Manifest next update: Sat 25 Jul 2026 08:00:59 +0000
Files and hashes: 1: AWu_WHM93JRneofXM1YLkcteG3U.roa (hash: qBRtmYIkSAD5sUFWA8So9jT67pkquNgEz925+bd/SZE=)
2: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
3: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: X2CZXgtWGvr7QlXmL93cgb1LM3lrxBPUEJshHXQp1Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:55:56:7f:46:fa:d1:ca:7c:17:1c:b6:fd:b6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jul 24 08:00:59 2026 GMT
Not After : Jul 25 08:00:59 2026 GMT
Subject: CN=42ceb0d193ed20d9ebfd8eec414cc4e2a447f797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:1b:24:9f:b7:8d:51:d4:74:32:38:8e:66:
4c:73:c3:eb:6c:21:20:ca:e9:86:9d:2c:28:7c:cb:
0e:e8:46:36:c2:61:46:c3:86:63:d3:95:87:43:a7:
89:cc:91:06:fa:38:ef:2b:89:13:63:91:95:7e:8b:
33:44:41:e5:d2:31:9d:c9:34:85:85:79:03:bf:5c:
4f:bb:34:b4:7f:63:bb:e4:85:b7:1a:f2:26:e8:31:
87:9d:69:38:93:5d:66:20:df:07:1d:cf:69:cb:5c:
ed:1a:3a:9b:ea:0c:0c:b2:19:95:bd:7f:6c:2f:ae:
4d:be:4f:77:69:16:be:53:1a:f6:a8:14:ab:b4:01:
11:df:89:6d:61:64:6c:f4:9f:05:b3:1a:6b:ae:6b:
76:3e:a2:82:c8:a6:6b:03:5d:07:62:84:17:2d:f2:
07:01:1c:45:ba:b8:dd:33:66:d8:b0:71:63:5d:9b:
bd:1c:61:7a:0e:d5:7b:02:10:61:28:51:cd:17:4f:
bc:d4:f1:9b:c9:c4:07:71:24:31:69:56:5b:19:17:
06:56:5e:9e:dc:81:cf:8a:eb:75:a5:12:da:c9:e1:
f6:f8:67:48:d3:01:73:8b:38:13:76:43:aa:8d:64:
46:cf:0b:85:6a:4a:f1:87:1b:4c:c5:f8:52:10:9d:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:B0:D1:93:ED:20:D9:EB:FD:8E:EC:41:4C:C4:E2:A4:47:F7:97
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c0:21:4f:40:8c:ab:8c:f7:09:c9:91:96:85:e9:15:2c:b7:
04:e7:b1:41:b4:00:d3:85:98:90:d5:ae:21:8d:40:14:88:12:
8f:74:13:da:49:95:9f:ff:9c:ee:31:f2:ab:2b:e5:36:a0:dd:
b4:b9:4f:98:28:d2:86:ee:ea:2b:4a:1e:79:db:12:07:03:09:
ce:73:06:00:c0:f7:e1:f5:7a:27:a5:8f:49:7a:a6:96:54:ab:
d7:c1:fa:59:8c:86:96:e0:c3:9e:51:7a:df:15:47:c7:56:ea:
d9:d3:60:27:52:6d:51:a4:63:66:43:58:b2:1d:f0:1a:4e:ba:
73:87:b9:14:0f:90:75:d7:4b:17:57:38:db:b5:44:92:0f:e7:
19:88:4e:9e:3e:34:30:b7:fa:09:31:d1:c5:8a:ed:f7:0e:21:
03:8c:e5:c4:ea:48:b6:55:81:8e:41:e0:34:8e:24:48:26:69:
8f:53:42:e8:79:76:be:44:a4:d0:ab:d7:5c:80:ec:4e:bb:99:
02:2a:a0:36:fe:16:bd:04:8b:4d:70:bf:2f:9b:ca:ee:56:2d:
b4:f8:cb:a3:a5:d2:6d:00:fc:a8:22:cf:f3:ff:4e:83:8d:b3:
37:7d:18:2d:6d:2f:d9:a7:ec:b4:71:67:75:5b:e4:23:42:aa:
73:cd:93:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:29 2026 by rpki-client