Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
File: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft (raw, json)
Hash identifier: Om+f39BiVkomnM26xptTXlZse76Opng7b8T29Z5yWQk=
Subject key identifier: 9D:AC:95:47:C5:C2:60:00:3F:84:79:C2:11:EB:6A:66:3C:FF:97:6F
Authority key identifier: CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
Certificate issuer: /CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Certificate serial: 019F1B68DE71421B1CAAC480F66A11AF9AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
Manifest number: 07D9
Signing time: Wed 01 Jul 2026 02:01:25 +0000
Manifest this update: Wed 01 Jul 2026 02:01:25 +0000
Manifest next update: Thu 02 Jul 2026 02:01:25 +0000
Files and hashes: 1: HrcUui0miVrUYtzzMrX-U9gOlCo.roa (hash: UAsUsT7UI6Qc5HNmPWo/d7Tyc/aSJ+uqpouXt12HmG0=)
2: yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl (hash: disDZbSSYYY0syy5Yz0nLftUg09rs70SoOkphlVEhoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:68:de:71:42:1b:1c:aa:c4:80:f6:6a:11:af:9a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb30eb4353ed750faf23f2f1e14018c6cfc62715
Validity
Not Before: Jul 1 02:01:25 2026 GMT
Not After : Jul 2 02:01:25 2026 GMT
Subject: CN=9dac9547c5c260003f8479c211eb6a663cff976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:54:4f:e6:88:45:55:a8:b9:64:23:b6:f8:
80:d5:44:f2:56:c6:bd:aa:17:b8:65:78:0f:63:c1:
d1:75:86:02:10:5a:cf:cf:e4:fa:2b:11:91:27:e2:
27:fb:5e:ff:23:62:88:58:96:7f:3e:f9:27:e9:dd:
86:c7:9b:c0:8a:bf:1b:8d:69:0d:0a:9d:75:c6:5d:
0d:02:5a:64:2e:82:4f:a8:c7:23:c3:3b:49:ee:a3:
56:30:b1:8c:6f:08:86:f4:24:bb:8e:6a:c9:02:d8:
2e:91:82:b3:12:d5:22:c2:be:e7:82:fd:bd:fa:80:
8f:5e:7d:4b:e4:f1:bd:87:35:21:35:17:9a:3a:a5:
62:6e:11:62:e8:e9:ad:37:15:fa:c2:2f:53:47:67:
eb:70:bc:46:e3:23:34:47:60:ea:36:d2:71:49:f5:
7c:19:f7:cb:59:67:b8:25:af:a3:6a:e2:89:61:57:
15:12:3a:0f:80:bb:86:e1:9a:b8:32:4f:51:52:fa:
05:8b:fe:6e:18:81:8e:a0:c9:ef:91:4f:b5:23:6a:
93:67:8e:38:a3:ac:c7:c0:65:d3:fb:e5:db:a5:69:
0e:96:92:e9:3b:ae:a2:70:fc:0a:61:ab:91:95:ac:
3c:fd:24:0f:b6:40:2c:5f:9b:c1:69:d4:ee:73:27:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:95:47:C5:C2:60:00:3F:84:79:C2:11:EB:6A:66:3C:FF:97:6F
X509v3 Authority Key Identifier:
keyid:CB:30:EB:43:53:ED:75:0F:AF:23:F2:F1:E1:40:18:C6:CF:C6:27:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f09744-8f5b-45ad-95a8-1b9a323c570b/1/yzDrQ1PtdQ-vI_Lx4UAYxs_GJxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:a5:bd:fb:61:72:c0:e8:9d:fc:71:74:b5:a6:c3:fd:e5:
3d:f8:8a:b9:2e:70:85:7c:24:1f:f9:4a:ae:26:5a:7a:a3:18:
4c:b7:05:c5:17:1c:2a:2c:5d:27:26:63:62:4e:54:8b:53:cd:
80:16:d2:0e:89:b7:ba:78:38:89:42:63:2e:1f:d2:b0:65:69:
01:54:b7:3a:d6:9e:2e:36:f6:21:c4:5a:a7:88:8b:4f:b7:de:
ec:2b:6c:c7:5d:2f:dd:e0:25:7c:ca:50:5e:49:a4:ea:33:1d:
b3:40:2f:cf:e4:bc:21:d1:c9:aa:bd:28:e5:5e:38:7b:55:50:
49:d9:a1:7a:78:33:d1:6a:f8:e4:ee:65:6b:4a:12:4a:0b:af:
43:91:5e:d0:5f:7e:91:81:c3:6d:e1:da:ca:2b:d2:9a:ba:e8:
bb:a2:5f:5c:37:89:b1:5e:28:c0:55:c8:08:d5:8a:be:e0:4e:
88:88:f8:c0:28:57:00:29:96:13:f3:26:8b:1c:2a:2e:bf:5e:
f9:d1:a5:e7:ac:c6:e9:b0:ed:f7:fd:2f:a0:50:93:60:b6:6f:
00:da:b2:7e:bf:15:22:67:b9:06:69:dc:44:c0:cf:fc:6b:a8:
01:20:a1:90:bd:70:2c:e8:60:f4:b4:04:b6:bf:91:8d:79:57:
4b:a4:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:32:32 2026 by rpki-client