Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: xnW436sw+t/Q0xvYDSL8qvHePIyllbaNrrrxypvkRm4=
Subject key identifier: B0:88:9D:23:1F:AC:0B:40:09:DB:E1:5A:5A:26:EA:B1:52:B9:1A:37
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 01A08C0D9497A08AE643646CFDA08E64558D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0B7C
Signing time: Thu 10 Sep 2026 16:01:35 +0000
Manifest this update: Thu 10 Sep 2026 16:01:35 +0000
Manifest next update: Fri 11 Sep 2026 16:01:35 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: CRzptIt0ryQuAoT4nx4BixQ/LoN7vYX1zhQ6vz2d+Hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:94:97:a0:8a:e6:43:64:6c:fd:a0:8e:64:55:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Sep 10 16:01:35 2026 GMT
Not After : Sep 11 16:01:35 2026 GMT
Subject: CN=b0889d231fac0b4009dbe15a5a26eab152b91a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:c6:ed:dc:a1:60:1a:2b:61:04:7a:5d:e8:
c4:f3:51:57:02:34:be:61:9a:9f:c4:80:73:af:f7:
26:fb:13:72:fb:d1:a4:37:00:38:26:60:ce:89:c3:
88:6a:62:20:0f:d0:f4:27:b9:b3:3f:4b:77:07:5c:
f2:21:48:e3:42:d4:da:8c:05:21:dc:03:b8:82:1e:
e8:18:87:c3:79:e2:a1:6f:37:1b:77:4e:d3:08:ed:
3b:bd:52:55:e8:46:99:e7:1a:a5:fd:7e:00:d7:b4:
e0:0f:6d:d9:a3:9a:49:df:53:92:9b:ed:32:80:af:
b3:08:60:08:56:75:9c:1e:af:09:e6:65:f6:aa:e9:
4f:db:f0:80:d5:a1:29:63:ae:97:2e:54:f6:c0:f1:
11:59:27:6b:7a:78:81:7b:a4:e0:f5:ca:fd:f8:c6:
6e:68:35:11:91:ff:db:db:d6:d7:e3:7a:b3:a2:97:
43:19:1c:09:ce:5f:01:7e:3b:25:d0:2e:02:a7:f6:
b3:d4:fb:f3:58:e7:05:b0:9d:61:aa:00:53:30:0b:
86:44:29:c3:14:fc:ad:52:89:33:4b:02:90:2d:53:
1c:18:6c:8c:f5:6d:65:c8:c7:e3:65:24:1b:31:cf:
58:9d:2b:36:47:40:7f:05:d5:cb:0f:e7:46:ea:a2:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:9D:23:1F:AC:0B:40:09:DB:E1:5A:5A:26:EA:B1:52:B9:1A:37
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:64:b4:13:16:a9:54:ee:8e:54:0b:17:f2:d2:73:9b:bf:
bf:a7:29:4b:9c:0d:f4:82:9e:c1:83:50:4c:ef:86:ed:53:a4:
7e:87:7c:83:fa:66:3f:4d:bd:60:d2:c2:86:a3:51:9f:eb:22:
f8:31:aa:e3:ef:4b:af:ff:b1:55:d4:34:d8:b6:72:e0:12:f9:
11:e0:23:68:dc:b5:d4:0c:b5:8a:3a:ac:a9:96:5f:e9:95:d9:
70:f0:7b:83:15:da:b9:a2:91:36:a0:81:69:f7:3c:f6:90:c5:
16:86:a5:43:c0:0e:df:8a:85:6d:45:f8:7a:d1:4b:eb:8a:b6:
95:03:30:28:0c:d3:d1:74:d3:e8:74:5d:59:8e:c4:a9:77:ed:
69:9e:3d:ce:94:ea:5e:a8:26:c5:e8:cd:01:b4:85:f9:fb:5f:
df:b1:a1:52:ff:49:a1:a9:16:39:04:e3:69:f8:c5:e4:ef:93:
5a:da:25:a7:0c:50:f7:dc:9b:f1:12:bd:e3:89:46:10:16:de:
74:9e:73:35:d3:46:db:ed:e9:a3:3c:7f:64:29:88:91:73:fe:
1f:05:25:05:f1:3b:b1:85:29:a5:64:2c:d6:b0:b6:a7:2d:5f:
cd:a1:7b:a6:bc:04:c6:f9:3b:06:e4:8f:49:d4:a8:b8:7b:0d:
7e:cc:a9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:08:10 2026 by rpki-client