Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: 9skx8CtKbypqy/ArD5ReuUQKRkR1NOZ1htvQXg5UpAc=
Subject key identifier: EA:9A:3D:B4:A4:56:60:50:7E:D7:DA:E5:8E:1D:7C:27:86:56:82:04
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019FA003EF84E9282D0A3AFA492B09352E89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0DF1
Signing time: Sun 26 Jul 2026 20:00:40 +0000
Manifest this update: Sun 26 Jul 2026 20:00:40 +0000
Manifest next update: Mon 27 Jul 2026 20:00:40 +0000
Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: IWMJLViiqCZpHK17SpXtw5bo1+sNIAPWKJjCWU+Hm6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:03:ef:84:e9:28:2d:0a:3a:fa:49:2b:09:35:2e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Jul 26 20:00:40 2026 GMT
Not After : Jul 27 20:00:40 2026 GMT
Subject: CN=ea9a3db4a45660507ed7dae58e1d7c2786568204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:fe:40:e8:54:8d:71:c0:6e:6c:01:f5:6e:
49:06:d4:0a:59:56:98:d7:ca:3a:12:bf:ca:fe:9d:
40:4f:87:a3:5d:11:49:e9:f5:31:42:0e:73:c4:fd:
1a:dc:d1:d7:49:b7:4d:08:02:e2:27:0c:37:0e:08:
ce:00:06:69:5d:ce:30:6e:93:0f:66:9e:4b:d7:3a:
41:bc:4d:55:dd:7b:28:0e:28:51:5f:f0:a6:9c:7f:
f0:1c:22:fb:ca:8f:63:67:69:32:00:04:d6:b7:6c:
9b:ea:6f:2c:16:c8:5e:06:60:e4:4a:53:c1:00:3e:
0b:26:f4:1d:a2:34:7a:d2:b4:99:0b:2d:d8:a5:e8:
9e:ff:76:82:e6:a3:c2:88:e8:ee:d9:98:30:b9:34:
27:73:8c:1d:2a:bd:af:57:95:7d:ed:af:67:1b:a6:
e7:6b:91:a4:31:7a:9b:26:7f:39:93:dd:2c:73:da:
fe:a9:cc:17:d0:ca:f2:4e:25:e7:0e:20:58:e7:80:
10:24:a0:f5:56:ef:21:9e:cf:79:b7:f6:50:7f:aa:
81:51:01:d1:e5:d9:d2:34:ea:a3:22:df:77:e3:05:
4c:34:fd:e4:a0:6d:41:96:e3:2b:ac:35:b1:c7:43:
3f:a1:0e:74:7e:f7:7f:85:98:17:46:0f:d3:f1:1e:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9A:3D:B4:A4:56:60:50:7E:D7:DA:E5:8E:1D:7C:27:86:56:82:04
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:ac:4b:95:d6:27:d1:62:72:95:4a:b0:c6:d0:b1:2a:b4:
4b:52:62:12:c5:bc:b2:7b:89:14:4e:b1:f4:4b:db:a4:fa:58:
d1:a0:97:83:ea:29:85:92:be:d4:4a:1d:51:cb:06:7f:d8:37:
3e:6b:92:55:b6:81:bc:9b:80:fb:ec:ef:28:b9:22:dd:04:37:
63:c7:ba:cd:77:22:30:4a:a0:51:a0:35:7e:2d:ad:46:68:33:
4a:eb:16:46:bc:ca:20:ee:13:ab:42:d0:dc:45:1c:9e:82:ef:
14:4b:c3:71:9c:66:33:a2:7f:31:ed:32:6a:10:33:3b:df:7c:
ab:d4:ce:4c:81:07:28:a4:3a:6c:d6:a0:de:4c:00:59:70:4d:
44:9b:e9:58:07:31:c9:83:18:75:20:80:6d:b3:f9:0f:7b:72:
e1:74:68:53:d0:e3:08:70:6a:90:e0:6d:28:51:38:27:64:41:
fc:ec:28:3d:39:55:ac:3d:3e:d6:c3:98:9a:2d:93:3a:13:bb:
28:70:37:f7:06:71:d2:12:c7:7c:c5:39:db:77:49:76:50:41:
93:72:fb:9f:f4:e4:7c:a1:59:b8:99:83:86:61:db:13:3c:4b:
05:a4:78:57:03:5a:ae:47:4f:c3:d7:53:f5:d9:26:4e:39:a5:
25:2e:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:25:21 2026 by rpki-client