Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: opOdi3PLSklTS4O9iqv0b4qoRD8N78d9Galdyr6heoI=
Subject key identifier: B6:6C:22:99:AD:88:B1:4E:64:2B:90:DF:13:3B:D9:89:CE:C6:9B:4D
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019F92ECE85046D8B849E0F8428C6EB0C80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0AFB
Signing time: Fri 24 Jul 2026 07:00:27 +0000
Manifest this update: Fri 24 Jul 2026 07:00:27 +0000
Manifest next update: Sat 25 Jul 2026 07:00:27 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: vbjHRKNvRh8jeW5dPoCpOITwN0EKgxzzFR7SXNMeQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ec:e8:50:46:d8:b8:49:e0:f8:42:8c:6e:b0:c8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jul 24 07:00:27 2026 GMT
Not After : Jul 25 07:00:27 2026 GMT
Subject: CN=b66c2299ad88b14e642b90df133bd989cec69b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:00:7c:4a:94:8a:34:e6:e3:15:f2:8d:bb:
b5:a1:1a:a3:07:96:2f:38:9e:19:ec:34:77:86:9f:
8f:e7:16:41:45:2a:d3:a4:12:73:d9:8f:b3:46:db:
66:a5:b7:f4:7a:e3:b2:db:d1:e8:20:1d:52:5f:65:
07:d7:c5:b1:1c:c5:fc:f4:d6:9a:84:2a:c5:31:a0:
58:fb:d5:de:59:6d:d2:64:8e:ea:71:21:c0:ee:35:
b8:9c:91:22:54:24:8f:7b:cc:33:01:97:55:42:cb:
85:92:f6:18:c8:d2:e5:f2:e3:8b:36:3b:39:65:94:
ba:bd:28:8f:13:e1:db:b1:7d:80:f3:39:d9:82:19:
c8:d2:f6:0e:ce:3b:cf:21:0f:29:0a:d3:91:7f:1b:
3a:27:96:dd:07:94:50:a1:8c:d7:e3:2f:bb:b7:c2:
ef:60:0f:82:00:da:c1:ec:32:4b:d2:2f:bf:7c:dc:
d9:96:04:56:dc:95:4d:3d:6b:5f:2d:9f:f0:c3:6d:
11:71:a6:53:64:c2:a1:1a:6a:37:6f:6e:2a:3a:be:
c3:29:49:0d:91:00:5c:6c:cc:01:3e:00:22:c8:98:
42:32:fc:8c:0f:07:f6:fc:ad:82:a2:fa:d7:97:a5:
8e:cc:34:95:57:6f:82:f4:83:e6:0d:6a:e8:13:4b:
32:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6C:22:99:AD:88:B1:4E:64:2B:90:DF:13:3B:D9:89:CE:C6:9B:4D
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:42:1b:bd:7a:14:4f:6a:41:15:ef:aa:28:6e:03:d9:ab:3e:
80:55:a7:02:34:3e:65:a2:de:19:3e:65:38:10:f3:0b:16:89:
f9:36:a4:87:2e:b4:7b:03:43:80:fd:1f:6d:91:a6:ba:ce:d2:
56:ad:d7:33:f5:52:8e:9d:b3:19:84:fe:dc:18:9f:e5:40:75:
f9:52:89:9d:b0:59:19:e6:eb:4e:82:3a:03:9c:02:e1:61:3c:
8e:f3:6f:83:14:9c:78:6b:6b:ce:c4:fe:77:0e:6c:e8:0f:a6:
58:cf:87:59:71:88:fa:c4:a7:ab:bc:98:c1:62:64:98:f5:f5:
bf:51:f6:44:b8:8e:2d:b3:a2:bb:77:25:12:e2:f8:87:ee:d2:
00:a8:3a:31:96:72:cc:ac:58:12:19:75:9b:bd:26:06:97:81:
0d:db:50:52:f4:40:e0:e1:bf:a4:04:92:e9:de:54:a3:e1:2e:
4f:45:85:47:88:41:b6:a7:d4:dc:ba:82:72:a8:99:e9:8c:c0:
12:f1:52:7f:11:c2:31:68:d6:f3:e2:64:a3:e7:0c:87:34:c1:
0a:0a:f0:95:54:45:c0:1b:e0:45:82:3c:58:dd:d3:57:83:c6:
18:bb:d9:f8:4d:0a:10:d2:a6:03:ea:11:1e:5b:9c:f2:64:f2:
aa:96:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:54:37 2026 by rpki-client