Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: ozj5GrTySWjfMmqEFn+3TuscaKF2OVyfhvYEhjUWWU0=
Subject key identifier: 25:EF:76:73:61:D2:52:DA:36:71:4A:89:D5:B3:E4:89:2F:66:2F:84
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019FA07269A83DBBB53DEB196396741F01DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0B02
Signing time: Sun 26 Jul 2026 22:01:20 +0000
Manifest this update: Sun 26 Jul 2026 22:01:20 +0000
Manifest next update: Mon 27 Jul 2026 22:01:20 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: h0rgx63uEwNkKfonM43WWcCH+wI0P5FpBffPrFnP+J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:69:a8:3d:bb:b5:3d:eb:19:63:96:74:1f:01:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jul 26 22:01:20 2026 GMT
Not After : Jul 27 22:01:20 2026 GMT
Subject: CN=25ef767361d252da36714a89d5b3e4892f662f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:d9:1c:e8:8f:f3:40:c8:06:ae:9d:dc:d1:
9c:32:cf:7b:14:c2:5c:61:29:ad:1b:74:51:29:79:
af:e3:55:de:cf:d9:79:ce:36:66:fc:ed:27:c0:35:
62:f6:d1:a2:67:ed:10:b0:b1:6f:53:7f:73:2f:3c:
36:09:cf:3c:86:e9:71:18:6f:7b:a9:76:08:1f:c8:
9f:5e:16:9e:ae:3d:40:b1:c8:e0:39:bf:be:6c:00:
ec:5f:52:22:9e:0e:86:53:a8:3d:6d:e4:48:14:8b:
cf:94:90:72:1a:cb:fd:8b:5c:14:67:0b:c9:c3:40:
04:88:13:0c:97:35:e5:05:e8:25:67:fb:ba:79:c1:
ca:ef:6d:d0:c6:52:4c:1f:18:81:34:ae:bd:64:27:
0b:ca:5d:fe:99:d3:c2:22:2b:66:0f:90:a4:c4:9a:
19:0b:c6:a1:66:90:f1:c2:26:aa:a9:bb:fd:c2:33:
03:11:e6:63:4e:2f:bf:e5:8b:1d:0f:28:85:3e:86:
6d:dc:19:8d:67:74:e3:73:9b:f8:59:b3:1b:26:62:
ee:fc:31:1b:6d:78:6e:4a:0e:9a:69:79:8a:18:ed:
08:16:43:6a:8f:d7:d3:f4:4e:e3:fd:31:df:7b:19:
df:a3:27:13:bb:d9:b3:7e:dd:00:17:dc:66:c4:3b:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EF:76:73:61:D2:52:DA:36:71:4A:89:D5:B3:E4:89:2F:66:2F:84
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:13:60:95:d9:60:19:31:e0:a4:b8:94:c2:7c:86:52:3a:ff:
c0:9c:81:46:df:27:4b:b5:a7:db:57:ca:49:ae:ec:63:98:1e:
2a:e4:5e:59:3a:81:98:1f:d8:15:27:16:01:e0:f0:22:41:af:
68:24:b5:6f:94:b2:42:73:90:74:5b:66:61:a5:6c:5f:93:77:
56:2b:f8:2c:d0:fe:ca:ac:82:2a:e0:c9:98:0d:92:31:b0:ed:
f6:ed:2f:b2:4a:d7:1a:82:d9:76:83:de:11:f5:6f:c5:ab:4e:
a3:d1:37:36:86:b0:d0:22:51:ed:f0:85:16:62:7e:13:03:51:
63:2c:23:5a:cb:4f:30:e3:01:54:c1:92:84:f5:b6:cc:08:61:
05:03:57:37:65:43:32:e5:8d:e9:10:a2:17:73:6a:dd:9e:f8:
49:95:55:6f:cb:f4:5c:2b:97:a1:99:e8:f7:7e:bd:3f:aa:31:
a0:c6:f4:4a:df:ea:11:28:1b:91:95:92:54:a5:ce:8c:a1:da:
81:09:b0:66:4f:ad:ee:ff:28:2f:f7:12:a4:4b:10:29:27:ec:
4d:bc:79:e0:be:ef:7f:b4:cd:4e:f3:b2:f3:c1:f2:1c:0b:7c:
78:a2:56:2e:03:00:49:bd:94:49:76:4a:99:6c:0b:d2:d1:79:
a3:91:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:46:40 2026 by rpki-client