Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
File: yXZVaQIejbR5y9ZKWgsrr74qjqw.mft (raw, json)
Hash identifier: pv4AsldDqdK7cCyNZeeq6A+Z5/F6DuKf9QRwmxKMY1U=
Subject key identifier: A7:67:8D:9D:EA:B9:18:DD:09:70:0F:0D:C7:62:B8:55:A6:3D:92:49
Authority key identifier: C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
Certificate issuer: /CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Certificate serial: 019F93FF67087D3D16EE26364C9F6A3522B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
Manifest number: 0A44
Signing time: Fri 24 Jul 2026 12:00:16 +0000
Manifest this update: Fri 24 Jul 2026 12:00:16 +0000
Manifest next update: Sat 25 Jul 2026 12:00:16 +0000
Files and hashes: 1: XWyAqC54PDULToqtQuYDZQ188QY.roa (hash: IxPpQQWBadj7ekB4qtQqu1qywEMiFrvG8tw5fpRStfs=)
2: yXZVaQIejbR5y9ZKWgsrr74qjqw.crl (hash: 5uGRkef3OAUCkxSZUmBjQonlp087qyhgNzIKxnK/RSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:67:08:7d:3d:16:ee:26:36:4c:9f:6a:35:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9765569021e8db479cbd64a5a0b2bafbe2a8eac
Validity
Not Before: Jul 24 12:00:16 2026 GMT
Not After : Jul 25 12:00:16 2026 GMT
Subject: CN=a7678d9deab918dd09700f0dc762b855a63d9249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:8a:9d:e0:4b:2a:4c:86:94:d8:38:8f:99:
dd:f4:fe:a8:6f:4e:6c:98:03:2e:09:7c:16:8c:df:
f9:b0:53:ae:f8:63:c9:38:7e:30:06:8a:81:05:9d:
9c:35:14:db:48:91:b3:96:cb:ab:a8:c8:dc:8b:66:
99:b8:3c:0f:1f:75:8a:63:c0:dd:aa:68:48:5a:83:
3b:c2:8e:34:5c:a6:55:f2:68:76:1b:0f:83:c4:5b:
a0:9b:72:77:e0:5c:d7:d4:5b:11:09:4a:1f:43:dd:
34:4e:e8:6d:85:12:67:86:32:37:13:47:21:66:5a:
64:fb:0a:30:bd:28:05:a2:b9:3f:d2:2e:61:ae:5a:
28:83:d7:b2:c9:82:dc:09:db:d4:49:c6:98:44:18:
c7:69:68:57:ec:4c:6f:e9:d7:c8:46:5f:de:5b:6a:
5b:88:d5:b0:6e:57:bc:68:70:d3:70:dc:51:f9:2b:
3c:13:06:3c:fa:71:1e:c1:b8:ad:7a:31:84:9a:d8:
27:f0:55:4b:9f:18:f5:d0:47:26:67:6f:98:bb:76:
2a:99:54:c3:f3:51:8f:34:ec:81:e4:bf:c2:b9:b6:
60:9c:d1:3e:6d:41:34:28:3e:ce:02:70:f7:1d:af:
b4:3d:ae:9b:0a:f5:9c:ba:27:e6:8b:ac:62:12:d7:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:8D:9D:EA:B9:18:DD:09:70:0F:0D:C7:62:B8:55:A6:3D:92:49
X509v3 Authority Key Identifier:
keyid:C9:76:55:69:02:1E:8D:B4:79:CB:D6:4A:5A:0B:2B:AF:BE:2A:8E:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXZVaQIejbR5y9ZKWgsrr74qjqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/862320-c938-4751-ad07-f484da8e67c3/1/yXZVaQIejbR5y9ZKWgsrr74qjqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3b:e7:5f:a3:bf:7e:96:02:09:08:88:c5:d9:3e:62:63:7e:
c8:90:d2:d6:a9:70:17:e5:9a:56:0b:02:8f:d8:2e:1f:f5:35:
03:3d:42:d4:a6:1c:03:b1:6f:76:dd:32:2b:b5:78:81:74:b5:
c3:d0:b3:e4:96:97:4f:cd:19:10:1f:77:e9:7f:95:30:9f:56:
55:68:db:b3:d4:c0:f2:71:83:6b:bb:1b:ce:94:25:43:d0:cf:
c6:6e:ea:08:e5:0a:b1:7e:bd:6c:9e:a7:f4:89:ea:d1:1e:80:
cd:33:18:2c:83:00:d9:a2:0d:0e:c6:70:55:c1:01:7d:e5:38:
69:e0:2a:d0:ff:5c:48:5a:f1:32:cd:66:e5:a0:eb:43:a7:7b:
77:1c:ca:12:19:ce:27:ce:a9:18:f5:9f:fe:1c:44:3e:08:83:
25:7a:85:78:4d:4a:d7:9c:b6:6e:d2:98:0b:f8:49:c9:6a:d4:
e0:6c:59:d1:5d:11:d9:d9:1a:77:c4:45:2c:35:b2:a1:4d:b6:
bb:6d:7e:3c:3b:e6:b8:6a:0f:af:71:b1:79:ac:2b:dd:16:d4:
c0:03:99:96:99:ff:3c:77:9f:20:cb:9d:c7:53:f2:91:9e:b7:
4a:1d:28:26:be:41:d1:fd:77:10:d2:64:f9:e4:9e:2f:11:d5:
00:21:c2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:21 2026 by rpki-client