Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
File: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft (raw, json)
Hash identifier: u8K+55QjvxPIKyhJA9M9J7DFYi+HCRO02tARYmLy3RA=
Subject key identifier: 99:3C:0A:07:64:EC:B5:20:81:78:FE:97:4F:BE:D5:44:0B:33:09:25
Authority key identifier: C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
Certificate issuer: /CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Certificate serial: 019FA372979D6F59FCAB70D7FC5F6F648085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
Manifest number: 1013
Signing time: Mon 27 Jul 2026 12:00:23 +0000
Manifest this update: Mon 27 Jul 2026 12:00:23 +0000
Manifest next update: Tue 28 Jul 2026 12:00:23 +0000
Files and hashes: 1: yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl (hash: 3cXgZbmDKloLt28F7yYdyU4hVaXt60VDkXdlPjbSE8c=)
2: yZypMalDZN_1H34j86whs9HOsns.roa (hash: QTHAsSMIZiio2WTla/ss5QYgZ5yq+TMYt6pBCLwJH0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:72:97:9d:6f:59:fc:ab:70:d7:fc:5f:6f:64:80:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97edcedec3254b357b09615a02b16e06ebe63eb
Validity
Not Before: Jul 27 12:00:23 2026 GMT
Not After : Jul 28 12:00:23 2026 GMT
Subject: CN=993c0a0764ecb5208178fe974fbed5440b330925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:36:3a:62:f3:91:67:45:d7:eb:77:64:6d:3c:
3e:f4:d6:fe:36:63:4b:d2:d0:d2:c2:18:62:45:22:
71:73:31:87:06:0b:26:e0:c6:3a:21:f9:bb:ff:bc:
12:7c:6d:4b:50:6b:c7:4a:90:20:70:03:87:fc:5e:
d5:ae:60:ae:85:30:d1:81:f9:a4:1c:d9:54:fa:e4:
27:a8:23:f5:bc:57:ad:1d:ee:05:33:8d:c8:ec:94:
3e:2b:78:13:76:6e:f5:a2:f5:5b:f1:03:45:0e:0c:
78:2b:0f:af:47:19:a0:4c:a8:14:aa:ef:fb:e3:48:
a1:bd:23:bf:0c:b2:4e:d6:67:9f:68:5e:0f:8d:83:
d0:63:88:44:e7:cb:9f:71:17:9f:ff:88:79:5f:d9:
b5:27:e5:ab:f5:29:b5:76:9c:23:19:28:11:b5:a7:
97:8c:af:eb:cf:81:a9:d8:5c:1d:92:dc:19:5e:95:
bb:1a:37:35:47:3c:21:16:11:4b:ab:80:8e:6f:b6:
0b:7c:7a:08:30:b0:41:34:8b:de:07:9b:c0:7a:8d:
b8:53:4d:67:7d:29:03:5e:90:b7:fd:40:bc:dd:f4:
e7:16:49:20:4d:ad:36:6f:56:08:96:34:6a:1b:00:
f9:c5:3d:f3:da:ed:8d:b3:64:5b:3c:19:be:34:87:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:3C:0A:07:64:EC:B5:20:81:78:FE:97:4F:BE:D5:44:0B:33:09:25
X509v3 Authority Key Identifier:
keyid:C9:7E:DC:ED:EC:32:54:B3:57:B0:96:15:A0:2B:16:E0:6E:BE:63:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efd282-33b2-4373-9948-3239a81c9fc8/1/yX7c7ewyVLNXsJYVoCsW4G6-Y-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:dd:c4:dd:ac:08:23:07:8b:32:6e:f5:99:80:ff:08:c3:
d6:11:66:ab:db:56:fe:dd:a4:15:91:1d:7c:34:37:a7:f4:43:
2e:23:ce:5b:01:03:8a:1d:6b:9e:be:f4:1a:52:29:eb:bf:29:
3e:e7:bc:fb:09:4d:8b:97:aa:33:2c:f4:34:0b:b9:39:12:f1:
40:12:12:df:73:08:1e:e9:bf:91:58:bf:f3:5f:8b:93:82:10:
dc:51:90:99:9e:c2:1a:0b:74:e5:b3:ae:85:1c:76:be:ae:4f:
91:7c:52:10:7b:5e:b8:de:9f:0a:68:31:bc:f3:81:d7:79:3a:
5f:42:d9:e8:0f:c2:61:92:b7:77:ce:cc:54:91:a1:40:8d:20:
24:0e:27:8a:bb:9c:b1:ab:4c:f5:1a:17:4c:4b:32:6f:5e:0a:
b5:e2:0a:48:90:bc:e4:31:a1:3e:b7:e0:3d:ce:c3:82:e1:30:
f8:7a:ba:f1:ec:f5:0e:31:c6:15:43:fa:5d:d9:42:b0:9d:64:
56:00:65:3a:c5:5b:72:7c:6c:84:c0:6f:ab:b6:ff:49:61:81:
c9:39:a7:e5:c9:3b:45:fd:5b:58:2f:53:42:8a:08:f7:b3:b6:
4f:6e:a6:35:08:98:3e:0a:55:b6:6f:24:28:52:ed:fb:88:b6:
68:92:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:49:33 2026 by rpki-client