Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: mh91oFgJMTKGT7MC/cjY0xMa8eRSsoCUAFxPdzqtRug=
Subject key identifier: 2A:52:C0:23:66:C0:43:A2:06:62:E5:17:02:5A:82:A4:D1:28:CD:CA
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019F92B6AB08B223CA465FB9622472325A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 092B
Signing time: Fri 24 Jul 2026 06:01:12 +0000
Manifest this update: Fri 24 Jul 2026 06:01:12 +0000
Manifest next update: Sat 25 Jul 2026 06:01:12 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: KF5/3NqXUkTU4I4XEXoQTVi1sUqwDJHXDO6NQBI3TMc=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:ab:08:b2:23:ca:46:5f:b9:62:24:72:32:5a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Jul 24 06:01:12 2026 GMT
Not After : Jul 25 06:01:12 2026 GMT
Subject: CN=2a52c02366c043a20662e517025a82a4d128cdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:03:8d:20:c1:15:7d:eb:8c:bf:2d:2b:41:
76:3d:eb:a3:89:4a:df:3b:f9:92:e0:d0:99:24:79:
57:36:03:23:e3:f6:dd:03:c6:9b:d1:db:bf:e4:51:
52:05:33:41:b8:28:2c:bc:8c:46:5f:11:15:ed:4c:
61:bc:bc:ad:89:83:84:85:1a:21:cb:9a:22:bc:93:
68:10:1e:90:a6:e0:85:f3:4b:3d:54:ce:25:f5:d3:
0a:71:3d:98:a5:37:af:53:ff:c3:43:4b:04:a4:df:
95:5e:0c:03:d4:51:2a:e6:42:9d:d6:72:68:38:aa:
0d:77:50:a0:03:f4:f9:50:23:0b:b9:55:e2:fc:bd:
c9:e8:40:5b:9e:92:c5:ab:6d:8d:e8:0d:86:c0:90:
92:e4:fc:e2:13:b2:c0:9f:63:3a:08:b7:bc:bb:fc:
dc:8a:18:96:82:be:74:4e:f7:53:97:9f:30:99:fc:
c8:7b:d7:fc:f2:8c:02:06:5e:ed:5b:4a:6b:f5:36:
b4:e7:11:15:b4:45:b1:9a:da:9c:ea:3e:f3:1f:e9:
62:e3:e5:ea:34:aa:74:95:33:12:02:13:f1:08:d7:
0d:2d:6e:1d:8c:35:5d:06:db:4d:9f:dc:db:66:1c:
5e:c4:3c:1c:6e:06:18:df:2b:82:9a:20:0d:30:46:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:52:C0:23:66:C0:43:A2:06:62:E5:17:02:5A:82:A4:D1:28:CD:CA
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ca:d1:6c:6e:0f:63:09:eb:fa:31:a6:b3:84:7e:b7:6e:ba:
20:af:0d:52:e6:b2:d9:3b:ec:52:23:52:9f:98:f9:d2:9b:0d:
f9:6f:c5:22:3c:c7:6c:cb:bc:f3:45:bb:ff:9d:0a:3b:7b:45:
c4:5c:aa:69:1f:54:c3:2d:20:bf:26:13:b4:d1:63:a2:2f:d1:
b8:29:41:66:30:8c:76:54:a3:96:fe:09:19:f5:6e:a0:3e:3e:
c9:1b:6b:13:ea:de:c5:eb:d2:e8:ff:43:9d:a1:17:5c:e5:4f:
52:29:b9:eb:1b:aa:92:11:14:88:cc:68:f0:e3:eb:1e:cd:af:
58:be:58:14:69:bb:08:46:12:e6:30:9e:4e:34:3b:15:cd:29:
cb:8b:1c:62:b9:d5:39:26:35:67:f3:e9:34:a4:24:6c:50:e0:
32:d0:96:c1:88:4c:44:58:af:18:99:d3:3d:37:d9:98:07:e2:
13:3c:87:68:5f:e0:7c:7a:64:51:02:3b:11:3f:a1:25:6d:bf:
2a:8e:aa:a7:b5:d2:c1:fe:69:82:f7:bd:09:89:89:67:5e:e8:
e7:2b:eb:3d:4d:5d:06:46:fa:46:fd:62:20:1b:85:55:7e:38:
f6:04:76:5a:7b:4d:ac:e1:6b:88:25:35:e7:86:38:ca:91:09:
a5:d0:4e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:02 2026 by rpki-client