Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: CxGNYCZO4RgNcKxk/zDJPsYXeWwPEuOlgeHab4RPA7g=
Subject key identifier: 9A:B6:47:E6:52:BC:86:3B:2A:6D:1D:8B:60:6F:C2:77:21:26:DA:F2
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019E90C9FF6FAFB42A730F6B9381C87C50F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 08C6
Signing time: Thu 04 Jun 2026 04:00:17 +0000
Manifest this update: Thu 04 Jun 2026 04:00:17 +0000
Manifest next update: Fri 05 Jun 2026 04:00:17 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: Ei38qWiFvLYkhuH6ekzhy8zsrViKRgo/cCpFeO89MKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:c9:ff:6f:af:b4:2a:73:0f:6b:93:81:c8:7c:50:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Jun 4 04:00:17 2026 GMT
Not After : Jun 5 04:00:17 2026 GMT
Subject: CN=9ab647e652bc863b2a6d1d8b606fc2772126daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:b1:4e:70:70:35:56:25:c8:5a:7c:68:d3:
20:cd:8f:fb:c2:52:16:3c:b0:1b:55:59:1d:de:c4:
60:a7:67:c4:a7:08:6e:9f:76:89:0e:75:f0:49:51:
ee:6b:f0:99:32:3e:eb:c8:03:03:b4:b2:db:eb:ff:
08:92:c6:24:be:60:c9:b4:a1:80:6f:52:88:1b:fc:
f1:80:4b:4d:c1:d3:88:83:01:f9:9f:2b:c2:15:d7:
6d:fa:21:5e:2d:98:32:5a:5e:d6:6b:ca:f2:73:be:
d4:c7:a1:71:0e:09:60:fd:d1:d5:26:21:95:b1:d8:
b9:6a:dc:71:4f:d8:e9:34:4f:80:aa:a2:7e:49:b5:
cc:74:51:81:41:0d:ef:37:62:2f:79:3a:3c:70:af:
0e:d6:30:95:15:a2:53:98:3c:cc:87:e1:4f:9e:23:
b9:5f:83:81:5f:c6:a1:62:03:a5:9b:71:a3:2d:0f:
ce:09:07:59:8a:e0:31:5b:9b:52:c2:91:a5:b5:85:
9b:9e:9b:fb:23:e6:03:09:dd:99:89:cb:14:b4:9b:
45:ab:e0:bd:18:3a:95:1f:da:c1:28:a7:21:de:3a:
77:90:14:1a:60:12:77:28:19:d9:26:a4:bd:2e:1d:
46:dc:df:be:97:9b:bc:45:44:61:87:ca:5b:a1:e0:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B6:47:E6:52:BC:86:3B:2A:6D:1D:8B:60:6F:C2:77:21:26:DA:F2
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:15:df:f0:13:d3:54:5f:fe:41:f2:a4:25:74:d0:bf:ca:e4:
8c:a5:7d:07:96:a2:bc:23:44:90:f1:4f:15:49:d1:e7:63:a7:
dd:70:fc:1e:27:3e:ec:5e:58:9d:36:a3:b3:69:42:32:de:a4:
ed:f1:3e:6d:fa:50:27:28:12:6a:3f:35:d9:1f:b4:c6:b2:88:
e8:4b:a1:83:4f:c7:c7:7b:f7:26:dc:ed:97:79:01:98:f2:06:
bb:a9:d0:35:ee:d8:eb:31:c6:1f:9d:d0:5b:aa:44:1d:aa:bb:
2a:0c:89:3b:07:83:26:89:a7:be:68:1c:e2:1f:cf:cf:18:f8:
f6:c4:98:a9:38:79:f0:77:82:d3:a9:39:6d:99:6e:d2:6f:c8:
23:cb:e4:dd:a8:83:a3:1e:f1:60:42:26:13:3e:cf:22:77:54:
da:c4:00:1d:28:6e:dc:ad:34:ff:1d:11:a9:74:ca:5c:7a:3c:
27:2e:1e:de:43:a9:97:8e:5c:ef:ba:46:74:45:7d:91:97:a4:
6f:f8:07:69:d3:ea:96:bb:1b:c9:e6:33:40:07:66:2c:5a:5e:
0a:be:aa:d8:b6:b1:76:86:ce:31:43:ab:49:1a:5f:c5:7c:20:
be:3d:a5:43:65:f0:ec:25:0c:48:d9:50:5d:c8:cc:9a:68:fd:
80:63:ab:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:36 2026 by rpki-client