Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
File: yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft (raw, json)
Hash identifier: AlPUAFi86jvPfj62ex3uoRPTAysTzqefTYuj4zadM90=
Subject key identifier: 7E:F2:03:57:B6:07:E7:CC:9D:F9:78:4E:B9:87:92:8A:84:65:B3:F0
Authority key identifier: C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
Certificate issuer: /CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Certificate serial: 019F159D3911103209273C00DD5DEDB7327B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
Manifest number: CA
Signing time: Mon 29 Jun 2026 23:00:52 +0000
Manifest this update: Mon 29 Jun 2026 23:00:52 +0000
Manifest next update: Tue 30 Jun 2026 23:00:52 +0000
Files and hashes: 1: 9vZ-bh78nQSisMvdujS-2j3jEKQ.roa (hash: 9I7QrI133VXhhj9mm/9D7pspc5I/xtLd60jZL9gznBc=)
2: yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl (hash: 2tPFOXBag2+8kH3a7Ids2yqnMEUB6k0Rk1KhA/uQAbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:9d:39:11:10:32:09:27:3c:00:dd:5d:ed:b7:32:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Validity
Not Before: Jun 29 23:00:52 2026 GMT
Not After : Jun 30 23:00:52 2026 GMT
Subject: CN=7ef20357b607e7cc9df9784eb987928a8465b3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:20:fb:b7:02:73:0c:53:e1:df:f6:b6:25:37:
73:34:2e:1d:3d:aa:4c:59:03:e6:d2:ce:42:8b:9b:
90:b7:3d:c3:2c:3e:5f:01:2a:e0:bd:fe:fb:10:33:
0e:d7:76:b0:95:44:7b:07:3a:12:4f:e9:4c:e6:5f:
35:c9:41:e0:92:8c:47:ed:e5:0f:97:28:38:fc:8b:
7d:b2:b6:be:b2:39:80:7b:cb:96:e2:4d:04:05:2e:
d0:a4:db:3a:88:7d:46:ff:38:09:e9:33:1b:b2:fc:
07:fa:9d:ae:f6:34:6f:7e:d6:13:93:e0:0c:22:fd:
f1:6d:da:6c:c4:ff:eb:d5:3e:2e:31:b8:22:b7:12:
a8:c2:dd:3e:9d:8b:a4:46:f1:47:f4:08:f3:68:f9:
91:80:07:08:9b:26:1b:8e:12:8a:dc:d5:d3:e8:56:
79:d5:aa:33:37:81:bf:07:03:3d:67:57:8a:fb:1f:
55:af:a6:6c:f4:88:5a:1e:68:6f:a7:a7:2b:03:ae:
fa:b7:00:2e:59:19:61:58:df:eb:84:e8:0a:76:df:
3b:4a:90:96:45:58:f4:77:64:60:49:36:4f:0c:87:
7a:a5:3b:e2:c6:57:4a:6e:4b:f1:c6:fc:23:63:02:
ac:70:85:5a:98:46:b0:c7:19:e4:12:de:28:ae:c4:
ac:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:03:57:B6:07:E7:CC:9D:F9:78:4E:B9:87:92:8A:84:65:B3:F0
X509v3 Authority Key Identifier:
keyid:C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9e:dd:72:18:a1:e4:c6:24:c1:62:fe:1f:3a:33:7d:9b:7f:
38:f0:8e:6f:7c:3c:60:c6:f4:01:cc:a0:8d:72:75:ed:03:30:
23:59:be:6e:ca:29:3b:b8:4e:80:34:a4:0e:9c:83:48:1c:92:
34:db:69:49:a7:02:12:0b:a4:ac:c3:c6:8a:07:78:72:b5:2b:
ab:fe:c3:41:01:f0:72:63:c7:48:d6:c3:45:32:65:6f:5e:65:
da:96:ac:67:b5:e5:e9:0b:a6:52:d4:3f:77:29:96:46:de:d1:
b5:95:d4:e4:33:4d:70:e1:3d:62:c9:f5:bd:db:a2:e6:df:8f:
2d:17:cb:40:35:bb:2c:de:92:86:2b:8f:52:64:92:cd:97:f8:
6f:f9:77:f5:4b:57:e5:e5:86:d5:9c:d4:12:b0:4a:d5:07:ea:
4e:20:75:c6:96:66:02:32:85:ef:58:cd:a1:1d:71:6b:11:61:
7c:f4:da:54:af:8c:a4:26:5f:6d:e2:d5:f6:d2:05:7c:df:bc:
93:24:08:86:45:5d:0f:22:7d:d4:54:10:6f:71:88:39:6d:e1:
af:2d:6d:05:b9:2a:d5:d7:3f:87:15:22:06:c7:7d:3f:05:9b:
24:0f:1f:9e:fd:e1:e6:1b:05:55:46:b9:48:a0:58:12:bd:46:
49:64:47:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:15:11 2026 by rpki-client