Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: 6/wIHjE/EMXuuvOOWUmw7e3k3Mg36APZtf7OKQdhQeU=
Subject key identifier: 0E:99:5D:FE:79:DE:CE:19:5A:AF:81:0E:E7:34:96:8F:32:6A:8C:05
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019F37185AADFEFAAE1849F5FA5C79CC121F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0D2B
Signing time: Mon 06 Jul 2026 11:02:50 +0000
Manifest this update: Mon 06 Jul 2026 11:02:50 +0000
Manifest next update: Tue 07 Jul 2026 11:02:50 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: Vm2w8nlxfIq4M421l1OrAe273XPjEca29YCzrIqUPho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:18:5a:ad:fe:fa:ae:18:49:f5:fa:5c:79:cc:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jul 6 11:02:50 2026 GMT
Not After : Jul 7 11:02:50 2026 GMT
Subject: CN=0e995dfe79dece195aaf810ee734968f326a8c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:4c:5b:64:f1:f1:4d:41:a7:6d:bb:1b:43:
bd:50:db:41:23:ed:73:a1:be:5b:01:89:cb:9c:49:
16:2e:8a:03:4c:de:ac:d3:fd:df:95:9b:3e:8b:ba:
78:cf:7d:a6:45:f7:e4:47:22:f4:de:bc:7e:6f:b1:
24:cd:f5:bb:54:42:3e:48:2a:82:c7:92:03:a1:11:
13:37:51:87:52:79:a2:f8:87:92:89:ec:e5:e7:ba:
43:bc:7b:ce:81:60:2d:b2:8d:1f:f2:5e:cb:5e:3a:
80:41:a3:7e:ec:9f:bc:8c:30:58:0c:38:12:6d:23:
6e:67:71:d0:97:4b:00:78:d8:9e:d8:e6:4e:c3:95:
42:43:2d:cf:20:c8:c7:83:22:33:11:2b:6b:4a:5d:
47:2d:04:58:9b:e4:a6:20:20:17:79:8c:bf:05:7e:
3c:c0:dc:e0:90:8e:10:91:16:2a:a9:89:7a:2d:09:
bf:dd:61:e0:ac:52:8e:88:3a:3e:fe:db:25:79:8c:
92:8f:1c:bf:e8:37:56:09:05:f5:e3:22:f4:ce:d4:
b7:32:b3:5c:39:b8:c5:d8:ea:ed:69:86:bb:c4:46:
69:d1:80:54:fe:d5:42:d0:5a:2e:08:b2:49:80:73:
8e:f4:0c:d1:ef:88:68:50:a1:14:f9:1a:60:04:ef:
30:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:99:5D:FE:79:DE:CE:19:5A:AF:81:0E:E7:34:96:8F:32:6A:8C:05
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:7f:93:5d:71:6b:01:38:5f:04:a3:55:4f:37:58:f1:1e:
45:a1:7c:a5:74:39:b2:9f:e9:ed:6f:d1:cc:9c:2c:4a:04:21:
e1:43:4b:58:00:87:97:c1:80:cf:9d:ec:74:2d:cc:c4:53:17:
27:1d:3f:c8:8e:c4:c9:2f:fd:da:90:74:2e:3a:cb:15:ea:ad:
69:96:fc:ae:5e:20:68:ee:ab:73:2a:5c:95:28:84:50:e9:98:
01:c5:3e:d5:08:c9:32:11:7b:5f:76:f2:13:cd:f7:cd:51:08:
ea:b3:07:cb:32:45:65:9b:30:1d:85:a1:26:74:16:58:17:4a:
47:1e:c3:cf:e7:44:52:62:af:af:e5:82:07:db:cc:24:13:11:
39:fb:cf:c5:30:13:00:fc:7a:d8:fe:ab:5b:2f:92:82:3f:3b:
33:fe:4b:38:cd:5f:28:fc:a0:f3:26:14:07:81:3a:78:1b:68:
9e:d5:64:f7:f0:67:50:19:55:0b:ba:ee:65:50:c3:b4:aa:89:
6c:90:37:db:e1:04:43:ad:69:10:11:2f:86:b5:6d:09:e6:c9:
87:5e:32:20:08:4d:0c:dd:17:12:02:7e:0a:2f:de:99:11:cf:
d0:71:8b:1c:66:00:f5:88:66:bf:33:8f:22:44:f9:91:e3:ae:
70:44:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:00 2026 by rpki-client