Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: viO+yh31zHybZbZ6u9emAgEFOt90vT08xnQ5qIslr8s=
Subject key identifier: 0D:50:6E:7C:F6:49:7C:F4:B2:56:30:BC:02:DC:D2:72:D4:9E:BF:A6
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019FA2973690EF06EB287DEC698DBAE66F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 07AC
Signing time: Mon 27 Jul 2026 08:00:46 +0000
Manifest this update: Mon 27 Jul 2026 08:00:46 +0000
Manifest next update: Tue 28 Jul 2026 08:00:46 +0000
Files and hashes: 1: AWu_WHM93JRneofXM1YLkcteG3U.roa (hash: qBRtmYIkSAD5sUFWA8So9jT67pkquNgEz925+bd/SZE=)
2: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
3: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: PnPn7RP6+p4iBSTPS3Cwq/tPuhHDOF5iY8LsS/gZfAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:36:90:ef:06:eb:28:7d:ec:69:8d:ba:e6:6f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jul 27 08:00:46 2026 GMT
Not After : Jul 28 08:00:46 2026 GMT
Subject: CN=0d506e7cf6497cf4b25630bc02dcd272d49ebfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:22:02:8a:90:2f:ee:7d:79:50:04:d6:4c:
0e:28:15:b0:21:5f:6f:fe:64:48:64:ed:54:d4:70:
96:e1:2f:95:11:d9:c5:fc:90:f3:8c:ea:ce:1e:c8:
26:88:ab:c4:be:89:de:e5:6d:d3:21:3d:00:c1:5a:
60:b0:4b:77:08:e0:7a:97:b4:78:37:0e:9f:40:52:
56:f8:69:78:77:70:f0:ea:8e:60:e5:68:dc:09:f3:
aa:f8:66:89:60:f1:30:f6:4a:01:e8:9a:6b:62:49:
15:c1:99:38:2a:44:c4:22:d1:84:83:22:17:97:5d:
b4:32:35:d5:58:e7:0f:b3:90:a1:27:9f:60:d3:53:
3c:8e:9b:24:31:18:35:1b:a9:5d:49:c1:fe:2f:40:
6d:5a:9d:1f:d3:ea:3d:ca:fa:62:f6:56:be:be:e7:
80:39:2a:f8:9a:b2:f9:6f:97:82:fa:60:49:18:12:
f6:e2:2e:c2:9e:04:04:66:7c:7a:fb:69:cd:8e:b6:
a9:ec:0b:8b:d0:3d:d8:df:98:05:a9:23:e7:a0:c4:
f4:d0:a8:64:5e:f4:08:2b:02:c4:4a:7d:ce:b3:8d:
58:73:d9:21:9e:6c:a7:23:bd:ad:d0:4a:1d:55:01:
b5:b8:d5:21:37:77:e2:99:58:8e:91:c9:46:bc:8c:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:50:6E:7C:F6:49:7C:F4:B2:56:30:BC:02:DC:D2:72:D4:9E:BF:A6
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1d:eb:de:1b:8d:eb:2b:87:0b:f3:b3:c5:6b:96:58:37:c4:
c6:62:05:1f:7a:9d:c4:1c:35:c5:57:07:61:01:40:ac:32:e7:
5a:79:6e:bf:22:24:8e:fe:3b:62:ab:ae:f5:bd:06:6c:f4:df:
29:72:89:34:54:9b:d4:42:fa:d7:94:ea:8b:b8:fd:cb:07:7d:
39:0e:85:a1:e9:02:c0:19:34:c9:aa:2d:3f:1a:d8:02:d5:01:
5c:12:1b:45:30:4e:2e:a3:70:aa:33:e0:67:8d:da:7e:cc:6a:
bb:d1:3b:f6:4d:d2:d7:00:fb:36:a4:41:32:31:41:6f:c0:15:
b4:50:e7:4a:91:88:b1:24:fb:83:15:38:d0:70:53:a2:60:76:
97:b0:34:cf:cd:de:c6:41:c7:1c:d9:cf:9e:91:44:98:ab:1c:
6e:e7:ef:c7:c4:25:7b:1e:2d:47:07:cf:0a:d8:32:fd:5d:b3:
61:34:e8:8f:31:b8:07:d1:a4:81:3c:8a:8f:d8:9e:54:49:76:
52:c3:d9:32:01:bd:be:42:e6:cd:c7:57:a1:25:d4:8a:bb:49:
69:63:f3:c3:2f:46:8c:83:ba:e0:37:5b:b7:fb:bc:7b:fc:49:
53:c9:20:da:d0:b6:75:41:38:0b:e6:c1:7b:04:22:b2:55:4f:
b7:0a:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:18:16 2026 by rpki-client