Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File: YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier: KWBwws8RorYWFVjk7gMZ26Zh8RlVndKsgzQRSkczbPw=
Subject key identifier: 9A:9A:45:ED:23:4F:E2:F3:2A:C7:21:14:16:34:CE:6B:8B:88:CF:06
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 019FA1841BC1508E4C08C11A904C916BA275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number: 0C9E
Signing time: Mon 27 Jul 2026 03:00:17 +0000
Manifest this update: Mon 27 Jul 2026 03:00:17 +0000
Manifest next update: Tue 28 Jul 2026 03:00:17 +0000
Files and hashes: 1: FaiCCLCJ_22L37bTLhekiTS6xWk.roa (hash: 0rF76R7VaTqT7h2AWynmZ6U6C8XdF6nPrpTOFBQQBKw=)
2: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: VfjfOetQju6hSjiZfETUT0A2IYipFoks4Pw1q9FIL5I=)
3: fbVmVDZSr2N5vEu2YR2iNEUtIwY.roa (hash: XF+oa0yHniCseXwIDuAlr+pULGrTcD83gldJXfm1CQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:1b:c1:50:8e:4c:08:c1:1a:90:4c:91:6b:a2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jul 27 03:00:17 2026 GMT
Not After : Jul 28 03:00:17 2026 GMT
Subject: CN=9a9a45ed234fe2f32ac721141634ce6b8b88cf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:fd:3a:0b:e5:4d:c9:7f:16:6f:0d:cb:d9:
76:3c:da:37:90:4a:67:c6:f8:69:f1:e2:a9:37:c7:
a0:0e:7c:15:bf:fc:ea:39:c0:72:db:a1:0d:68:4e:
b0:97:14:ce:d0:4b:d0:7b:d4:c5:19:7a:7e:a6:02:
57:9a:a4:76:34:b9:f4:a2:3c:c5:e6:25:c9:6a:c8:
35:e6:b5:64:6f:50:d5:b6:2c:7e:ad:ae:c6:46:e3:
e8:76:a6:47:32:13:99:92:a2:a1:d4:15:76:e3:47:
fb:e2:13:96:48:8e:35:67:4e:a6:b4:89:1b:2e:db:
ff:ce:dd:36:28:cd:a8:36:e4:6b:c5:3b:23:36:de:
48:f6:75:83:0b:47:4d:6f:8e:1b:ff:72:c5:89:1c:
ae:87:0b:93:ff:38:33:b1:c7:24:52:ba:ec:d0:e2:
f2:33:04:4e:ce:dc:b5:7c:23:e2:08:a7:c5:ae:e8:
02:45:ba:66:74:68:5b:88:96:a8:cc:bc:db:31:17:
7a:ef:5e:cb:cf:30:69:d0:ba:5e:20:2a:06:5b:b2:
d6:c7:fb:02:81:9a:e5:fc:44:8a:ee:59:bc:81:d9:
fc:f8:ac:9d:f8:6d:1f:b3:76:26:1c:81:9a:74:94:
6c:fd:8b:20:3f:50:30:62:26:25:e0:ee:d3:f2:cd:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:45:ED:23:4F:E2:F3:2A:C7:21:14:16:34:CE:6B:8B:88:CF:06
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4c:f1:e2:2b:cc:ea:b6:90:b1:ca:3d:69:2e:a5:2a:53:10:
70:e6:09:28:2a:e8:d7:1e:75:70:60:54:ae:cf:46:06:17:b4:
06:43:c0:fe:51:2d:32:c0:4b:3a:a3:26:69:be:92:22:87:d0:
c2:81:a5:ea:7f:e4:77:29:93:79:a7:49:51:3c:e7:e0:42:6d:
7c:e9:a3:6f:f5:1a:0f:b4:a0:93:d5:3a:73:88:fa:4f:5b:5d:
49:1e:0a:ac:bf:b8:29:6e:c1:36:ba:a0:6b:dc:02:cd:b3:96:
e2:0c:94:27:03:f3:d6:33:38:04:e9:e5:3b:47:9a:e4:5a:e7:
e4:76:ec:68:7e:86:55:99:5e:39:85:cd:83:5f:90:e3:5a:c8:
73:3f:03:7e:df:56:81:a5:9b:c2:32:c8:b5:36:a6:2f:7d:f1:
bd:a3:96:2a:69:aa:96:bf:45:78:87:45:2e:45:ca:a0:70:b9:
8b:d4:ad:3a:e7:bf:1a:7d:71:21:d7:5a:99:b9:96:f0:9f:74:
00:2e:c6:1d:71:72:1d:b8:29:f7:99:e6:d0:d7:50:19:10:d7:
e9:52:2a:7c:b8:11:4c:9d:c9:93:89:66:87:f4:56:41:05:a0:
17:5e:f0:64:3d:cc:46:19:64:ce:c2:72:4d:7e:90:14:93:ef:
48:19:8a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:38 2026 by rpki-client