Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
File: yCnhDha8eb_FbFNVflsapVnMdDU.mft (raw, json)
Hash identifier: E7pPLzFSnVQw7qJXmpOGCeWNPh93pJeJpOHrkb3uYEQ=
Subject key identifier: D4:F4:F5:A1:87:55:73:A4:CB:16:A2:DF:9B:B3:19:42:BB:44:35:02
Authority key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Certificate issuer: /CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Certificate serial: 019F92B64B97E852E51064B0353C1EBF714D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
Manifest number: 0C95
Signing time: Fri 24 Jul 2026 06:00:48 +0000
Manifest this update: Fri 24 Jul 2026 06:00:48 +0000
Manifest next update: Sat 25 Jul 2026 06:00:48 +0000
Files and hashes: 1: 4AjGjVkO2tVBx0Eie_ffAJbIoko.roa (hash: HDPfPT6f6mvgy7P34ZeKqbqyBJoxXjtENIEEg/9aLlo=)
2: yCnhDha8eb_FbFNVflsapVnMdDU.crl (hash: OEvN37ou7syljMBm6Sl1c14E8iwy6j3DHaBuFs5nw3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:4b:97:e8:52:e5:10:64:b0:35:3c:1e:bf:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Validity
Not Before: Jul 24 06:00:48 2026 GMT
Not After : Jul 25 06:00:48 2026 GMT
Subject: CN=d4f4f5a1875573a4cb16a2df9bb31942bb443502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:3a:ef:21:df:d5:a7:75:eb:4c:43:3d:55:
45:82:e3:ed:d2:da:dd:b1:4a:91:fc:1e:23:9a:16:
1c:00:4e:c3:5c:7c:50:ea:73:b6:41:73:26:bd:21:
c8:ca:ec:9e:92:ae:26:1e:a5:7e:89:79:41:c9:52:
46:48:d6:58:6b:3e:6f:78:fa:4a:b8:b4:61:8c:3d:
0e:4d:19:1b:ef:29:84:03:26:31:f8:a3:05:11:87:
99:83:dd:cb:27:bc:0f:41:f4:aa:63:47:c1:4f:5c:
5c:98:3d:71:5f:bd:1f:09:48:8b:f9:08:21:62:4b:
40:6b:95:ee:f4:69:48:fd:b2:ad:46:c9:7f:3a:00:
26:73:1d:78:a4:03:a4:d2:2d:25:05:2f:84:33:6f:
e2:3d:47:7b:ad:09:43:dd:a5:b6:88:13:de:e9:c9:
25:b1:32:e8:d1:32:a1:b0:d3:c5:ec:c2:20:c9:1a:
32:7b:35:b0:73:10:32:ca:16:fe:a8:97:f6:c1:31:
04:0a:15:78:2d:4a:e3:d5:d9:dd:4c:89:8b:bb:d2:
e8:e0:e1:0a:41:4b:e4:5a:1f:b7:f4:4d:ab:98:c8:
4b:cd:94:1a:3a:89:b7:e8:97:be:49:c9:a1:39:22:
68:d1:00:2b:23:8b:21:67:03:8f:bc:74:e4:42:e1:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:F5:A1:87:55:73:A4:CB:16:A2:DF:9B:B3:19:42:BB:44:35:02
X509v3 Authority Key Identifier:
keyid:C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:40:df:05:73:39:67:6e:af:eb:eb:06:dd:b0:f4:99:84:73:
1e:25:d8:a7:db:ea:30:c6:a3:ea:b9:6a:5e:5a:79:07:7e:45:
cd:d0:4d:9a:73:e7:ad:6a:89:81:fd:e2:d0:38:62:37:da:c7:
2b:85:c6:71:f2:4f:1d:59:a7:ed:87:6a:8c:fb:92:05:eb:ab:
58:fa:df:b2:fd:50:0f:e3:e6:dd:a9:4b:42:c3:51:f7:51:61:
81:3b:6c:14:00:25:55:30:99:87:17:68:5d:43:bd:3f:e0:a1:
85:c4:48:8e:e5:d4:c6:24:ed:e8:17:12:1e:ae:ec:83:d8:c6:
70:e9:0f:f9:aa:1b:2e:78:ae:0b:26:7a:50:f7:af:48:cb:dc:
51:3d:a6:1b:52:95:e4:1b:ef:c8:6c:30:2a:9a:47:d7:5f:5f:
57:d9:5d:08:fd:de:31:68:e8:00:67:69:e7:26:bc:87:b2:0d:
d0:78:35:cd:d5:a2:3b:26:0f:87:c4:51:3d:74:5f:91:75:44:
d1:55:69:a6:4e:30:a4:10:0c:cc:fd:ad:72:6d:08:bf:9c:f4:
b6:dd:31:02:fe:78:4b:ac:18:bc:db:d1:dd:e3:3d:0f:19:8e:
a6:69:63:2c:de:8b:0f:2a:ed:c1:f3:f6:ce:d8:bd:21:35:f7:
3d:a8:db:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:08 2026 by rpki-client