Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: o9zx4JKEUQj625Oscc2VG4WjqW2+8LUltf5WTx64A+8=
Subject key identifier: 94:40:B8:32:68:95:30:4C:FB:02:1C:1A:A2:4F:B4:B9:22:4B:46:92
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 01A0C2C40A428DB674593B2006741B06E0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 09E9
Signing time: Mon 21 Sep 2026 07:00:22 +0000
Manifest this update: Mon 21 Sep 2026 07:00:22 +0000
Manifest next update: Tue 22 Sep 2026 07:00:22 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: uCieyJq4C9ulwrR7As8ha5+I+4/2vzypEThGvW3rJrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:0a:42:8d:b6:74:59:3b:20:06:74:1b:06:e0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Sep 21 07:00:22 2026 GMT
Not After : Sep 22 07:00:22 2026 GMT
Subject: CN=9440b8326895304cfb021c1aa24fb4b9224b4692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:95:d3:19:c3:03:87:f8:16:33:e5:c7:da:
ca:cd:22:fe:4e:7b:af:fd:5e:94:24:94:d8:13:a0:
55:a5:b0:b1:08:b1:dc:d3:35:a9:7b:01:52:c8:93:
66:d6:16:43:08:01:25:f5:42:99:46:00:f9:59:f8:
49:c4:65:d0:ea:58:ea:b4:8a:12:90:df:7d:d7:57:
27:8b:4c:18:ad:9d:a3:de:8c:82:fb:1f:1f:19:3b:
f8:4a:20:ea:1c:e6:1f:c6:a3:ec:73:7d:8d:84:be:
b8:aa:84:75:b8:ec:a9:22:d9:87:42:60:2f:17:d2:
ec:b7:7b:57:69:97:11:6e:e5:e7:ab:67:b8:13:b4:
02:f3:3c:f9:95:cb:3c:70:c9:c0:dc:72:90:d5:5f:
c0:24:5c:da:b2:31:fc:b8:26:68:b1:89:02:8d:78:
b3:70:ae:5c:ac:f3:5e:52:f9:b9:3c:3e:55:d6:38:
14:d6:01:f2:93:63:55:0c:f6:e3:84:d6:30:b0:28:
fb:d1:da:7e:46:8d:62:0a:4d:db:77:13:8f:a2:d4:
28:f9:52:7e:62:e4:06:93:8e:75:60:69:25:53:27:
2f:c9:f2:c8:f7:6e:e9:52:e3:45:ff:2f:da:69:29:
58:27:6b:a6:ee:aa:ea:bc:9e:42:09:93:37:0d:c8:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:40:B8:32:68:95:30:4C:FB:02:1C:1A:A2:4F:B4:B9:22:4B:46:92
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7a:e1:b6:6d:64:c6:46:60:b2:b7:74:98:bf:49:65:4d:48:
4e:0e:e7:09:16:3d:82:61:f0:6a:45:a4:2c:a3:ab:73:e7:e7:
a6:f4:2e:ca:4b:1b:5c:01:d9:99:4c:68:8c:e4:97:33:a9:2a:
59:f1:89:76:5e:41:5c:27:41:64:26:80:75:64:f7:ad:c5:ec:
eb:8d:23:ba:85:35:a7:86:2b:fe:ee:76:09:ce:53:cb:4f:3e:
75:24:87:98:1c:5d:1e:c4:d7:a0:59:d7:b1:6c:e2:af:e2:36:
0a:1e:1a:14:f3:ce:2f:3e:cd:e9:1a:00:92:ce:31:0e:cf:a8:
ff:5e:65:c6:04:5f:21:36:c5:af:2b:46:8a:82:8e:55:92:c8:
75:ca:ed:5b:c3:66:00:6f:e0:56:98:ab:df:2f:74:a7:bd:0c:
78:17:53:53:21:b9:65:75:34:31:d8:a0:8e:48:c1:13:ee:ec:
9e:ff:72:e1:49:1d:db:93:94:be:bc:61:31:50:65:f3:70:1f:
f1:40:e0:aa:7f:8a:00:dc:b6:21:57:a9:5b:15:6e:40:1d:84:
3f:cc:e2:9e:4a:ee:b4:98:4c:b6:82:c0:4f:68:cf:0b:6a:f1:
78:e7:8c:e8:25:c9:53:bd:b0:93:b0:96:1b:4c:9c:f2:00:4a:
26:a0:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:04:52 2026 by rpki-client