Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
File: yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft (raw, json)
Hash identifier: +ezBmfx+lE0WDPAmgUVtXTisLb+VbW1NTVZ2nKNQ1bU=
Subject key identifier: 9A:BD:0B:74:73:18:AE:F5:37:10:0C:01:C2:3E:EA:EE:80:4A:C7:55
Authority key identifier: CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
Certificate issuer: /CN=cb36180ab4542d6eee66d9f99030df71236ce264
Certificate serial: 019F29C965FFA9886439105C3B91D8756875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
Manifest number: 17D8
Signing time: Fri 03 Jul 2026 21:01:32 +0000
Manifest this update: Fri 03 Jul 2026 21:01:32 +0000
Manifest next update: Sat 04 Jul 2026 21:01:32 +0000
Files and hashes: 1: HNYjnMa8XonNqZQ0AY5BlHwMzX8.roa (hash: 93bbzx6/nbiayVdplAT1nOdB7pkJO7+NMwUpbbLpb2Y=)
2: yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl (hash: SKbRFz3wTOLCRRBJgVCSPVrEFtSTTf5gyn7aKhBRrlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:c9:65:ff:a9:88:64:39:10:5c:3b:91:d8:75:68:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb36180ab4542d6eee66d9f99030df71236ce264
Validity
Not Before: Jul 3 21:01:32 2026 GMT
Not After : Jul 4 21:01:32 2026 GMT
Subject: CN=9abd0b747318aef537100c01c23eeaee804ac755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:cc:0a:7a:3f:c0:f8:ca:6c:0d:ec:39:6e:
92:61:19:d5:35:0e:95:d0:b2:4d:78:d6:0d:d3:04:
60:90:8f:00:02:58:29:c5:0d:83:9b:ed:4f:2b:eb:
74:50:61:ca:d6:f1:19:5a:b1:87:0e:8b:e6:2e:66:
b5:41:ec:d6:73:bf:2a:1e:b7:4a:b6:9b:59:d5:1b:
44:0f:67:c9:c8:22:66:12:89:5c:10:65:91:3f:7e:
1f:53:61:57:5f:d1:e2:30:4c:26:e8:89:8f:dc:06:
1a:b2:16:37:1c:a9:8a:91:d0:3a:ae:7f:75:d9:8a:
0c:41:f3:3e:3c:9f:73:75:2e:9c:06:68:93:ca:f0:
6f:b6:d9:b3:13:04:20:62:95:e3:4b:81:41:e5:a3:
9f:2d:95:81:ec:93:bf:9c:d4:ac:7d:06:3c:b5:01:
f0:9b:25:e5:b0:6a:68:ff:9b:90:4c:54:2c:2f:d2:
b1:89:47:f8:ff:17:ea:94:8e:03:bd:78:c2:1f:ec:
5f:32:b8:16:ed:c0:1b:ba:a1:6a:ad:79:e2:58:33:
ab:cc:09:ff:35:01:13:42:18:63:04:7d:ca:dd:31:
bf:56:28:fd:07:b8:b5:34:30:b9:3a:1c:34:36:1b:
58:77:18:c4:82:90:45:75:c9:27:f2:e0:4d:ab:ec:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:0B:74:73:18:AE:F5:37:10:0C:01:C2:3E:EA:EE:80:4A:C7:55
X509v3 Authority Key Identifier:
keyid:CB:36:18:0A:B4:54:2D:6E:EE:66:D9:F9:90:30:DF:71:23:6C:E2:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzYYCrRULW7uZtn5kDDfcSNs4mQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0797d4-8b2c-40ac-9cab-667db1dc1b86/1/yzYYCrRULW7uZtn5kDDfcSNs4mQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d6:cc:59:75:5f:2b:a1:9b:8d:3d:0f:54:c6:51:64:c3:08:
66:df:8b:31:c3:88:5f:b3:e0:13:30:07:3f:11:33:37:47:b3:
80:d2:fc:3f:b6:b0:00:8a:e0:c9:2b:82:15:10:15:4c:2d:6d:
ac:31:f8:66:08:cd:f7:90:ee:f5:d0:d5:50:c7:45:1d:02:a8:
fa:9c:c3:8b:a5:49:07:54:27:8a:ed:42:53:47:03:d9:d5:04:
6e:4c:9c:bd:00:c7:ca:a6:c0:fa:d6:8c:1a:d2:3b:b8:17:b3:
21:c9:69:28:18:18:05:59:c6:e5:d7:13:55:ec:6c:1b:ff:33:
bd:1a:73:ac:7c:f3:50:1b:73:d9:85:6a:c7:02:97:82:45:91:
6e:1d:e8:13:31:b8:30:69:6a:f1:8e:a9:73:ad:b6:7b:28:b4:
05:23:c9:83:f5:8c:0f:52:45:56:ab:2a:33:05:87:0e:ee:d9:
d7:8f:6a:ff:cb:1f:e1:55:17:c8:da:77:3a:68:66:b9:2f:6c:
17:25:05:b4:22:91:ac:be:bc:4c:d9:26:d5:66:29:d6:29:45:
cd:fa:6f:38:2d:db:b3:f9:c5:da:05:42:6b:47:f3:51:ce:26:
d1:4d:a1:f5:14:f5:6d:5e:8c:fa:ff:89:26:91:3b:fa:e7:a1:
bc:f8:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 22:33:50 2026 by rpki-client