Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: sWbcW/gDeh8BPjz1lSr4fheAQ56/62t60cBzMoHSZbo=
Subject key identifier: 1E:2E:25:F4:35:AB:8B:33:96:C8:56:35:82:20:8C:50:46:21:3F:9E
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019F94DB2ACC6587965F9F09B8E3DA082F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 16B0
Signing time: Fri 24 Jul 2026 16:00:18 +0000
Manifest this update: Fri 24 Jul 2026 16:00:18 +0000
Manifest next update: Sat 25 Jul 2026 16:00:18 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: V9YTbsdXeWBtI9b8RgNoOBnpNqgttwSECiTaJSnSKJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:2a:cc:65:87:96:5f:9f:09:b8:e3:da:08:2f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jul 24 16:00:18 2026 GMT
Not After : Jul 25 16:00:18 2026 GMT
Subject: CN=1e2e25f435ab8b3396c8563582208c5046213f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:12:d1:e1:19:61:cd:68:ae:48:15:04:8d:df:
ec:b8:1b:73:a9:9c:25:8b:e6:84:92:90:03:f2:2b:
28:80:30:ae:d7:d5:35:7e:08:e7:95:6b:0f:a6:0e:
c5:44:9c:9b:f6:45:f0:4d:20:80:89:ae:11:3a:ee:
1d:f1:9b:7f:df:2d:d5:ab:a8:13:d6:ff:02:b2:8c:
61:1f:67:ad:35:12:4a:37:f2:b1:7c:5b:c0:c4:6e:
58:51:20:d7:8b:32:b9:5f:3b:4a:57:36:cc:a0:9f:
0c:a6:45:4e:05:6a:ed:e2:f6:8f:56:cd:7f:b5:49:
29:bf:bf:87:c7:25:20:11:e8:d2:4c:be:84:e7:4d:
c8:6b:ba:2f:5a:6f:4f:19:07:b4:23:84:ec:4b:98:
41:d5:75:b4:5e:2e:5e:65:6d:f3:22:a9:84:58:31:
92:f8:53:9f:26:e8:67:8b:b5:ea:0b:50:6a:be:59:
49:3b:51:25:b8:a4:a8:53:68:d6:ad:4b:86:43:e0:
f6:7d:8a:20:06:7d:6c:a4:23:55:e4:ec:6b:d2:0a:
32:6b:a2:0b:d4:0a:32:b1:46:de:58:1f:82:76:c1:
43:16:ff:96:fc:51:a4:82:19:c8:0b:bc:b3:b2:2b:
a3:d0:ab:72:e7:65:4b:8f:79:f0:df:99:04:99:54:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:25:F4:35:AB:8B:33:96:C8:56:35:82:20:8C:50:46:21:3F:9E
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f3:f3:a2:01:7a:06:bb:10:ce:4c:87:21:00:1d:8c:56:19:
2b:e5:59:d8:4a:bc:fb:eb:d4:89:fd:e8:f6:3e:a0:21:1f:04:
01:02:1e:60:8e:82:b3:ea:ff:e4:05:2e:14:cd:52:73:9c:35:
36:d7:42:30:35:0b:2b:9c:94:7a:84:21:6f:3a:8e:55:86:4d:
64:f6:03:78:a0:d2:fa:2d:81:37:79:a5:34:16:09:90:c3:82:
62:20:1c:a4:28:78:d8:5c:98:0d:c6:b3:ef:29:2e:ff:a9:aa:
78:77:ab:66:99:31:91:f2:d7:6d:e3:16:d1:c7:41:bc:3d:d4:
11:13:8f:a2:b4:2d:bb:cb:92:ce:5e:d2:52:dd:33:6f:7b:d6:
d1:40:b2:12:96:76:ba:ab:c5:8a:62:64:96:b6:bf:5c:fb:b5:
09:b6:4a:3e:75:95:33:f9:2a:4d:ff:bc:ca:59:a2:19:51:c7:
45:45:8c:ac:9c:e5:f3:61:f7:f8:0f:98:64:ca:9a:06:20:cc:
3d:44:e5:9d:3e:5d:5b:d5:99:2f:e2:d0:e2:d7:51:f8:cd:84:
fe:2d:53:66:a1:e8:5f:ca:46:2f:c0:e2:33:7a:90:23:50:38:
d1:9a:9b:9a:1a:6b:d5:2f:8e:6f:b1:a1:3c:29:13:11:89:c4:
41:f0:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:47:00 2026 by rpki-client