Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
File: yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft (raw, json)
Hash identifier: NJwAaB9oguUYv4E8uZWyj1B+hNymEJP55V6n/ZMAYUU=
Subject key identifier: 71:0E:76:B8:B4:35:BC:71:E7:04:CB:6A:1E:82:B0:C6:E7:05:65:94
Authority key identifier: C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
Certificate issuer: /CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Certificate serial: 019E8835C13C1B114A6DDB0F54E9DB5AB315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
Manifest number: 0EF7
Signing time: Tue 02 Jun 2026 12:01:24 +0000
Manifest this update: Tue 02 Jun 2026 12:01:24 +0000
Manifest next update: Wed 03 Jun 2026 12:01:24 +0000
Files and hashes: 1: cN4RDtGLM5l2DvX_T4i1shDStCU.roa (hash: yvuehCFR0SYwl9RZeEUmpN0/FZZPNS0ZYV+AhmYhkto=)
2: yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl (hash: 9Ffymuv+05mERLFVK+k9O94f9Y70Q0b516E3hW97AEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:35:c1:3c:1b:11:4a:6d:db:0f:54:e9:db:5a:b3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8c1dcf4c023467db3bf2eef3dd15b2efeeb2bd7
Validity
Not Before: Jun 2 12:01:24 2026 GMT
Not After : Jun 3 12:01:24 2026 GMT
Subject: CN=710e76b8b435bc71e704cb6a1e82b0c6e7056594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:c9:54:34:49:15:69:ec:49:dd:24:26:9e:
b2:34:de:3b:9c:1a:de:bd:a6:6f:cd:38:dc:2e:75:
7b:06:4a:d3:73:1c:a8:4a:38:b4:97:c1:9a:85:80:
2d:32:cb:6d:ff:b1:5d:2c:89:4a:49:b3:51:08:5a:
f9:f7:ce:80:b7:8b:e5:c1:bb:f1:c5:ab:da:e3:1d:
84:30:fd:f5:44:3e:cc:3e:e3:69:11:cf:89:65:40:
4b:0b:c6:f4:75:66:47:8e:54:24:73:3d:80:91:34:
80:e6:56:4e:65:61:5e:47:da:c8:90:a6:2b:36:9c:
11:bc:52:0f:7d:77:1e:0c:4d:56:df:d0:cb:82:6b:
6b:f9:24:a9:db:af:6a:8d:c5:c6:70:e9:2b:15:47:
61:ff:bf:6e:86:38:95:71:69:8d:0c:33:3b:00:01:
0d:4b:5c:dd:25:0e:ac:b0:71:38:61:71:6c:5a:83:
bd:0d:88:9d:1b:88:43:59:57:32:5e:3a:b5:a1:18:
a8:01:fe:ce:8c:d9:28:fe:09:b4:ed:e5:3d:96:db:
cf:73:58:5d:79:fa:af:17:16:e3:8f:54:c4:cb:b2:
69:69:0b:51:86:55:52:bc:36:9c:c5:b2:c7:f5:ba:
46:40:a9:d9:83:2a:a4:90:c4:fe:bf:e1:9a:0e:65:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:76:B8:B4:35:BC:71:E7:04:CB:6A:1E:82:B0:C6:E7:05:65:94
X509v3 Authority Key Identifier:
keyid:C8:C1:DC:F4:C0:23:46:7D:B3:BF:2E:EF:3D:D1:5B:2E:FE:EB:2B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMHc9MAjRn2zvy7vPdFbLv7rK9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ffd4-2382-4ca2-8603-44d92de438c9/1/yMHc9MAjRn2zvy7vPdFbLv7rK9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b7:ca:f4:4a:16:8f:8d:ac:b4:a6:e3:01:08:b3:bb:db:15:
5f:29:93:96:b1:13:92:f1:25:c9:af:bd:8a:53:4c:af:cf:13:
89:ed:ad:f9:6f:b7:cb:f9:cf:f4:d3:79:09:ff:87:a8:ea:10:
f7:5d:a2:0f:71:4f:89:69:10:e4:d9:0d:4a:9f:f8:bc:85:3f:
84:dc:f7:b5:42:42:df:90:89:02:af:5a:6b:14:08:3e:80:80:
94:16:ba:00:ba:47:44:a9:ca:69:4a:e3:cc:d0:f8:15:6f:fe:
fd:42:44:68:a0:50:5d:7a:f5:92:a0:60:0a:a0:89:31:a5:d9:
86:10:91:9a:2f:e6:71:93:e9:37:18:1a:fa:be:b4:ac:a8:9d:
c4:5d:0f:27:df:9b:c7:2b:db:9c:8d:a3:32:7b:db:16:fc:8c:
cb:e4:69:ac:70:5a:07:92:5b:5b:bc:f9:41:90:e7:e8:a9:ff:
e4:4d:7d:08:0a:70:cd:01:c5:b9:37:af:da:3c:ad:37:78:44:
32:cf:d7:0e:21:85:62:e0:99:cf:9e:58:ec:66:43:30:67:a9:
16:b3:cd:e9:79:9f:f8:1f:28:7f:51:9a:32:89:99:0e:00:c5:
9d:86:1e:27:89:42:58:6a:43:a3:29:14:ef:f7:38:df:7f:a4:
b1:ab:cd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:22 2026 by rpki-client