Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: PnU1fSETpWHKCCr3t270C0MVmqOPnr5t388urGzKlzA=
Subject key identifier: 4E:99:7B:64:87:D0:84:36:A2:09:8E:0F:A6:A9:10:3D:4C:A6:63:8A
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019F42ADE3609C5387C0EA10CFF2F71DEFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 09BE
Signing time: Wed 08 Jul 2026 17:01:59 +0000
Manifest this update: Wed 08 Jul 2026 17:01:59 +0000
Manifest next update: Thu 09 Jul 2026 17:01:59 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: eG0BB0fxPO__q6mOdYkIRJrDTRM.roa (hash: Pz6hND4v1iqvGNLQnBKtOPhsGZ3SlAq3DU7DzPNQrOg=)
4: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: VWIavxcl/C/DYCk90udcrdSTtYt3IyhOSPlz3keYLNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ad:e3:60:9c:53:87:c0:ea:10:cf:f2:f7:1d:ef:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jul 8 17:01:59 2026 GMT
Not After : Jul 9 17:01:59 2026 GMT
Subject: CN=4e997b6487d08436a2098e0fa6a9103d4ca6638a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:eb:57:05:6d:75:73:ce:5f:a0:52:10:b7:71:
cb:b6:f8:ec:cd:e1:dd:05:77:3a:d2:45:25:eb:15:
4b:b0:a1:28:44:d8:1c:c3:61:cc:cb:2f:95:81:71:
fc:a4:a8:6b:8c:94:33:12:6c:ef:f1:28:64:b1:97:
08:a2:01:89:c5:78:e3:5e:fe:12:44:9f:42:f9:03:
57:0d:1a:c8:48:f9:d2:4c:f4:5e:4d:61:db:a8:9c:
a4:7c:c1:a7:9e:9d:5f:ce:3c:be:d0:6b:d9:70:11:
f6:1c:a8:f1:76:92:f4:ee:84:59:d5:9f:6f:70:63:
a1:f7:8b:e9:ed:bb:21:f5:3b:bb:55:c8:75:fa:7f:
3f:76:3c:18:fe:35:0f:64:fc:db:e3:95:63:3d:6d:
d1:0b:91:09:6d:15:4a:bd:77:1b:d7:15:34:ac:d9:
34:e2:f6:aa:44:97:19:d0:b1:8e:b2:89:be:42:c9:
06:82:d2:1f:81:4a:b9:7c:02:de:6f:a7:65:ba:81:
dc:49:c1:3f:f6:64:71:31:48:47:86:1f:62:0e:d9:
06:d6:12:a3:81:e8:21:bd:ca:82:2f:53:46:df:b6:
8b:a8:6c:ba:ae:67:1f:40:64:ea:8e:2a:11:5e:a7:
3e:ab:c4:51:8b:82:f3:05:a3:d5:24:7b:f7:43:40:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:7B:64:87:D0:84:36:A2:09:8E:0F:A6:A9:10:3D:4C:A6:63:8A
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:cd:41:ef:f1:ba:a7:be:19:25:3f:95:0e:2c:81:61:07:
89:50:32:29:4a:4b:38:5b:43:80:23:ba:5f:01:2d:3e:f2:4d:
ad:1d:df:f8:3d:a9:22:b5:20:ca:27:7f:ba:6b:8e:b8:c6:6d:
ac:25:75:14:e5:9b:4b:8a:bb:cb:69:d7:98:00:60:45:58:3b:
89:b9:40:12:53:ee:6b:d1:76:c1:26:40:7c:b8:8e:99:37:a9:
25:7a:fd:c4:91:0e:89:93:8c:22:7c:f5:25:9d:91:93:29:10:
f4:32:db:5d:fa:59:73:f1:c9:f4:71:a9:3c:a2:82:76:74:b8:
e8:c0:82:8a:50:7f:ec:5b:c8:d6:d5:05:74:45:17:82:0a:d7:
b1:80:0c:26:98:13:c1:0c:f1:4d:0a:d4:13:90:31:21:07:5c:
6f:1f:d2:8e:c9:bd:31:20:aa:00:10:c8:e8:95:b7:04:49:de:
ac:0d:90:df:ff:c8:1a:52:b1:94:df:60:4d:93:98:96:ff:31:
64:7b:37:41:58:f8:c8:13:55:26:b9:39:2f:f4:7c:50:0b:f8:
72:84:1b:0d:ce:3a:ec:34:b5:ee:41:de:fb:c7:17:4d:9e:bd:
69:a2:25:49:fe:fc:b1:8e:06:7c:69:c8:a9:62:4b:68:e7:6d:
27:a2:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:48:04 2026 by rpki-client