Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: iZHM+TerOqL5EaAW7lINsjghSWoBf0LICcqVcxXVn1c=
Subject key identifier: AE:A2:0E:CC:29:C0:B3:C5:CE:DC:21:1B:8D:54:0E:F0:7E:03:CF:12
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 01A06EDEE4C6046098B4D82D4D7B8639A979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 099D
Signing time: Sat 05 Sep 2026 00:01:36 +0000
Manifest this update: Sat 05 Sep 2026 00:01:36 +0000
Manifest next update: Sun 06 Sep 2026 00:01:36 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: jBsRxIJdMCV3l6ntE+LvdjjsYumdYnPDq4u75f3Ctr8=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:e4:c6:04:60:98:b4:d8:2d:4d:7b:86:39:a9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Sep 5 00:01:36 2026 GMT
Not After : Sep 6 00:01:36 2026 GMT
Subject: CN=aea20ecc29c0b3c5cedc211b8d540ef07e03cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:00:01:be:20:c3:97:a8:a0:d1:38:d5:75:
ae:40:64:60:49:92:06:ed:17:fc:d7:a1:8b:07:d8:
9f:ae:e7:96:25:45:5e:76:86:9e:b1:34:5b:b6:c4:
e1:7f:59:4c:dd:a8:31:23:fa:f1:4a:36:89:a5:ab:
38:c7:42:0d:b5:a0:8c:7b:a6:c0:33:4a:1c:8d:74:
1e:db:bd:47:05:25:6f:05:ec:7b:7f:8f:7d:f2:d7:
f0:eb:4b:ee:43:92:91:fc:b5:c6:70:32:fb:a6:65:
0b:14:b0:d5:99:17:85:a5:6e:fb:c4:ee:8f:38:eb:
db:6d:dd:d0:58:2e:80:ff:8e:84:d8:1e:52:a9:67:
65:59:63:b5:60:14:69:54:db:1a:15:ca:2c:b6:c7:
eb:d9:22:c9:ef:cf:52:6b:8c:10:97:eb:d8:0f:bb:
ca:9b:c3:8d:f9:e5:97:08:dc:2e:c4:08:30:9b:5f:
c2:5c:77:58:6b:f5:dd:0e:65:96:d0:5f:40:c7:e1:
9a:ab:f4:ed:4b:7f:4d:59:f2:9c:0a:3f:e4:d4:0e:
66:f1:51:71:70:dc:a1:6e:7b:59:7f:dc:bd:1b:1b:
20:a6:47:de:99:79:f6:e3:64:7f:20:a5:49:21:1d:
e3:f1:9b:5a:d8:3a:14:29:16:9c:93:be:50:76:71:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A2:0E:CC:29:C0:B3:C5:CE:DC:21:1B:8D:54:0E:F0:7E:03:CF:12
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f9:8e:9d:70:c7:af:dc:b5:f8:ec:62:5d:d1:07:bc:62:af:
aa:7c:df:6d:b0:3f:33:3c:32:f6:b2:80:79:56:37:88:fe:f1:
af:bd:47:c3:cc:4c:0d:9f:92:28:67:a5:6f:da:30:c9:f8:0c:
c5:6f:6d:9c:32:07:cf:00:18:76:28:ca:43:ef:c6:ba:e1:1c:
ef:d8:f2:04:4f:5f:27:dd:ce:22:73:11:38:c3:72:2f:10:54:
e0:93:f3:58:71:89:a6:81:0b:52:31:f0:49:42:a3:30:29:2c:
3c:fd:c9:35:4a:28:3c:33:fb:bc:9b:46:7c:cb:09:80:2b:3b:
9d:9b:15:d7:74:96:8c:ca:d3:e9:23:7e:b6:1b:db:8d:1e:dc:
c1:f4:0e:ee:a0:b5:60:3c:fa:c2:ba:69:67:76:c7:c5:6d:f5:
59:e3:ba:1f:ef:5f:b5:23:a5:d6:b5:74:a3:7d:5a:0f:b2:ac:
d9:18:ac:87:b5:06:59:79:4c:ae:09:e5:68:93:bd:3c:66:ad:
32:be:2d:8d:f3:c0:ac:e9:e1:74:a0:ed:89:91:72:cc:c5:fa:
d9:d7:03:35:e2:ae:e8:5a:0d:f8:98:2f:ac:ac:12:93:9e:57:
4a:c7:ae:89:0b:e4:81:b0:dd:53:58:8e:d6:15:9b:05:6b:8d:
a8:c8:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:36:32 2026 by rpki-client