Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: NuvauLpjTlvNgUvnH2w6AOgPVWD1VxRJnGjR7LGCY/U=
Subject key identifier: 11:A5:E8:CF:48:08:13:DE:0C:4F:08:F0:C6:60:21:BC:47:6A:A2:F7
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019FA8D039DDEA622D12D5C4A2E4AD7C47D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 0957
Signing time: Tue 28 Jul 2026 13:00:46 +0000
Manifest this update: Tue 28 Jul 2026 13:00:46 +0000
Manifest next update: Wed 29 Jul 2026 13:00:46 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: bLTupSALGzvxKx/BT+Eth79SO8g3j7jrQnxoTpGKcBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:39:dd:ea:62:2d:12:d5:c4:a2:e4:ad:7c:47:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Jul 28 13:00:46 2026 GMT
Not After : Jul 29 13:00:46 2026 GMT
Subject: CN=11a5e8cf480813de0c4f08f0c66021bc476aa2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:97:68:0a:0e:fc:76:3f:39:1d:a3:57:2a:
b2:11:3f:72:0d:40:a7:87:f7:29:e1:a5:8e:c2:f3:
a8:7b:c3:73:95:6b:08:1b:28:61:1c:be:cb:80:be:
ed:0d:18:d4:d4:fc:de:39:1b:fb:08:62:18:72:71:
17:3a:ee:6b:ff:8d:d9:9f:61:ca:86:87:63:5b:64:
dd:f4:0a:59:55:74:f5:fa:be:92:b2:9c:b6:2f:ac:
3f:fe:96:d0:e0:f4:9c:88:57:53:57:93:ee:7f:9d:
63:be:2a:92:a5:c7:91:54:66:5b:8e:a2:f3:79:d0:
d9:5c:b3:7d:d6:75:f5:23:47:dc:99:b6:cd:39:7d:
19:db:05:53:52:d2:46:1a:1e:09:24:8a:ab:cb:52:
ac:86:48:9a:ee:2e:2d:47:f4:68:17:57:4c:c7:e5:
19:4e:73:71:fa:df:53:29:f8:3f:c7:0d:0d:88:22:
b1:f7:20:9a:8f:93:12:3d:cb:66:70:55:ba:d1:08:
25:19:cf:d9:a8:fe:c1:c9:fb:78:18:77:79:12:9b:
78:3c:07:3a:fa:84:af:95:b1:69:24:e1:ea:54:7c:
2d:91:cb:0c:36:67:00:a5:cd:77:93:43:e9:41:d8:
0f:c3:bf:b7:58:65:f3:23:53:2f:d2:69:e7:58:71:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A5:E8:CF:48:08:13:DE:0C:4F:08:F0:C6:60:21:BC:47:6A:A2:F7
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:19:06:16:56:d9:7e:ec:7d:c5:90:08:16:13:df:d5:7a:23:
b5:f2:66:9e:4a:f8:a9:78:54:ef:37:d9:14:bb:18:63:af:77:
50:a4:57:9d:71:49:f8:c8:c2:8b:a0:3c:78:d2:b3:c9:6c:7c:
fc:9e:1d:4b:24:c4:58:71:14:49:1a:88:d4:7e:3e:9d:2b:cf:
86:f7:f7:57:01:cb:6c:57:bd:f3:91:80:8e:93:60:a3:8b:dc:
86:6c:0b:69:af:9b:f5:b0:83:08:fc:d8:39:e5:75:55:39:0f:
f4:ad:7a:e3:75:87:c3:9e:a8:e0:2f:78:6a:1d:6d:e7:95:be:
2b:05:1e:8c:e3:3a:25:48:d3:e5:38:bf:16:0a:5d:6e:d8:da:
d3:db:cb:be:52:11:ae:f7:c9:2e:4f:16:0c:c6:b1:ce:eb:e2:
23:db:4f:2c:bc:9a:7a:32:3f:02:95:75:6b:d6:f7:6d:97:73:
88:db:e3:f1:24:7c:89:48:d9:16:49:4d:e1:37:30:fc:e9:cc:
bc:65:c3:40:6c:4b:bc:52:c2:f2:93:a6:6a:f8:27:87:1f:ba:
87:7b:0f:93:3d:70:81:ba:38:6e:04:15:e1:1b:84:05:5d:09:
9a:18:5f:f0:b8:ef:31:bd:dd:3e:22:16:3b:0d:14:4c:df:3e:
90:a8:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:39:02 2026 by rpki-client