Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: TxcsXERuoK74ElD3Uc1xGcflqak1fErIrqGa8fwmuSQ=
Subject key identifier: 4A:B9:C0:24:AD:A8:D8:07:E9:99:55:05:76:53:D0:CC:80:25:72:67
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 01A0CF6D226F9BA8BB5934C70ECD96B3ECB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 09CF
Signing time: Wed 23 Sep 2026 18:00:30 +0000
Manifest this update: Wed 23 Sep 2026 18:00:30 +0000
Manifest next update: Thu 24 Sep 2026 18:00:30 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: YDkv1IlmbLid/aK31sHzcNZ9vQOD2+D2Jk08fL1kdr4=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:22:6f:9b:a8:bb:59:34:c7:0e:cd:96:b3:ec:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Sep 23 18:00:30 2026 GMT
Not After : Sep 24 18:00:30 2026 GMT
Subject: CN=4ab9c024ada8d807e99955057653d0cc80257267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:bb:65:30:9e:c1:0c:9c:74:70:7d:02:cd:
89:10:02:c4:76:c0:9b:54:b8:0c:18:73:38:6b:36:
85:88:84:e9:3f:c6:1c:cc:a1:6f:2a:45:fc:35:4d:
7e:a9:c8:de:8d:73:30:f7:dc:ca:31:59:3b:8b:86:
71:52:92:f8:ca:2c:65:68:49:96:dc:c3:7d:6e:6d:
7d:f1:6e:24:cf:05:c4:3a:3c:b1:37:b2:67:ab:2e:
21:c0:72:21:b9:59:e7:6d:65:71:3e:7c:87:d3:42:
c0:c4:9b:45:e5:6c:5f:df:b4:7e:03:5e:00:ff:6f:
a0:70:f1:3e:9c:a4:90:3d:64:60:a5:07:6d:9b:6b:
9c:28:2d:08:0a:ab:77:b3:c2:95:00:55:7c:f1:56:
5b:07:6a:0e:2c:21:30:79:0c:57:e3:cd:e8:da:b0:
6e:b5:66:79:bb:25:cd:79:a1:9e:85:8b:9f:54:af:
45:a0:3e:34:55:77:43:90:f4:ca:fb:d1:7e:54:9a:
07:0c:28:e8:4f:e1:30:b2:e4:08:68:51:54:26:9c:
80:0d:9d:12:3f:e4:37:3d:e4:5e:be:93:79:da:ea:
84:ff:e5:82:cf:e1:41:e6:e1:1f:a1:d0:45:de:b4:
c1:a2:30:4f:1c:5a:de:a2:f6:9f:86:d7:c7:23:72:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:C0:24:AD:A8:D8:07:E9:99:55:05:76:53:D0:CC:80:25:72:67
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:37:cb:e0:05:40:ca:7b:f8:4f:36:96:ed:fa:e7:f5:65:
b2:1b:7d:6c:01:f7:f3:a7:10:ed:e8:d3:65:98:3c:18:4c:a3:
98:51:c6:1e:f1:70:c1:58:9b:b3:51:86:82:c1:59:d3:7b:43:
f2:39:b7:9b:95:e4:bc:cf:9a:14:23:19:de:ef:e6:8d:40:ea:
e6:68:c9:97:91:3d:18:cd:de:12:96:1b:cf:c2:0b:40:30:a3:
69:66:f5:66:5d:09:c0:f3:57:15:36:30:fd:84:e2:63:95:87:
78:9e:76:88:3c:d8:35:7b:32:45:cc:7d:78:eb:1b:be:ff:26:
3b:ae:76:66:60:89:25:8f:af:85:21:31:7c:77:c5:e0:f6:ee:
a3:88:4b:fc:16:a3:84:6f:1f:44:c1:7c:21:f4:bc:90:2a:33:
e2:f9:58:7a:e7:1a:b5:bb:66:e4:15:b9:56:2f:27:0b:3c:b8:
f5:8b:5c:1e:0d:02:84:74:fa:c5:62:43:96:ee:19:ab:22:78:
45:8e:6f:57:0e:3e:57:4e:f0:c8:9a:5c:4f:c7:59:00:d9:ec:
3b:4f:b9:21:66:1b:ae:ab:7b:cb:cc:d7:91:27:ab:f6:c0:56:
e0:cc:d9:22:94:55:26:06:ae:48:c7:a1:78:ba:80:47:ba:b7:
31:96:0d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:55:12 2026 by rpki-client