Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
File: yaOl5BHeryKE_9AVML-0H4Fsu6M.mft (raw, json)
Hash identifier: bLryOIxvsHjArVn/QoaOUO32Ct/P4nQvLl/28vDUC5U=
Subject key identifier: 0C:A1:6B:19:05:1B:A3:0B:B3:DA:3F:C8:2F:08:79:38:C8:1F:F4:01
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 019FAA50FD9A65EC0E11DC45BF45F020A6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
Manifest number: 07B0
Signing time: Tue 28 Jul 2026 20:01:02 +0000
Manifest this update: Tue 28 Jul 2026 20:01:02 +0000
Manifest next update: Wed 29 Jul 2026 20:01:02 +0000
Files and hashes: 1: AWu_WHM93JRneofXM1YLkcteG3U.roa (hash: qBRtmYIkSAD5sUFWA8So9jT67pkquNgEz925+bd/SZE=)
2: s5h_FbOSJtTwNWZ7nw-DoslTY04.roa (hash: 3rYcvADDI43HpDRf99rDIKGF7HoSWoEsrigLvsY6+nw=)
3: yaOl5BHeryKE_9AVML-0H4Fsu6M.crl (hash: 1geCtzEnuzjPRhUMJ9LRld0dlhcf8yxSRanUoR9GVbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:fd:9a:65:ec:0e:11:dc:45:bf:45:f0:20:a6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Jul 28 20:01:02 2026 GMT
Not After : Jul 29 20:01:02 2026 GMT
Subject: CN=0ca16b19051ba30bb3da3fc82f087938c81ff401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:4a:66:bc:bf:51:34:ec:0c:e4:1d:94:fe:
33:5c:83:36:7f:11:dc:d2:3c:d5:4c:5a:99:5c:fd:
47:37:1a:8b:ab:7e:c9:64:6d:09:3e:e7:53:a8:80:
d1:12:01:a0:9d:2f:e3:9d:82:ce:e4:19:ba:39:d8:
c4:01:be:29:2e:fc:03:72:b3:ad:90:c6:d1:09:ac:
bc:bd:07:12:56:48:b5:32:d2:b5:11:9c:e3:d8:7f:
9f:f0:7c:17:03:f8:f9:a0:d2:ea:8e:b0:0e:b7:52:
ca:a1:8c:ad:25:32:49:f0:e7:11:0f:0f:33:ec:50:
97:a7:49:97:ae:fe:8c:42:69:3d:b6:0e:8e:da:50:
7b:f1:51:b4:29:a3:28:bc:7c:0a:cc:30:7c:05:53:
67:c8:e7:ab:fb:53:77:c7:6e:f6:21:cb:31:c2:3d:
a8:6e:2a:c7:c0:91:e9:aa:97:10:ea:d5:ba:fa:37:
4e:76:46:0f:c9:7d:70:42:3c:64:79:c8:a1:fa:9a:
f2:d9:c8:7a:58:d8:bb:ed:7c:16:41:38:a0:52:c1:
fa:f7:9a:6d:c8:22:89:3d:05:8e:ef:c1:38:5f:6d:
43:37:80:96:47:82:27:db:f6:d7:6c:58:e6:d0:f1:
e2:6b:0f:b3:9c:ba:0d:b6:dd:83:34:04:e3:bc:a8:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A1:6B:19:05:1B:A3:0B:B3:DA:3F:C8:2F:08:79:38:C8:1F:F4:01
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:07:9b:0e:0d:9f:4d:8b:c4:6f:e0:4e:a1:fb:e9:81:e3:e6:
41:a6:ea:f7:d9:be:9e:ab:87:e7:a9:c1:d2:42:89:f9:7c:f3:
98:07:51:f8:52:05:7b:e6:ae:70:06:01:89:ad:e0:c6:b7:9a:
f7:49:ba:0f:09:15:53:86:6f:4d:05:36:e2:29:14:a9:87:ab:
30:f0:a3:55:f2:69:27:34:c0:2d:23:eb:de:57:dc:fc:8e:3f:
71:33:7f:d1:04:d4:d7:b4:64:05:01:cb:e8:c4:90:82:3e:30:
ee:51:d7:8b:65:06:14:38:fd:78:2b:90:64:c2:64:e0:40:c0:
08:d2:64:9f:5f:85:c7:77:7b:db:cd:bb:0a:79:4f:37:f2:30:
6d:58:c2:dd:d8:1b:1b:7a:27:45:53:20:e2:4b:c9:3f:8b:78:
32:7e:ba:20:df:f0:97:eb:ae:ca:8f:3f:b9:89:8a:f7:bd:28:
bf:14:d5:02:46:9e:f2:e1:be:7a:8d:fc:5c:ae:e5:48:09:4a:
65:45:30:8e:60:74:fb:d1:a7:15:42:45:a5:e4:d5:4e:7f:6d:
ef:89:1e:3d:a3:b0:cb:bf:d6:22:9a:bf:e5:c2:ed:b9:2a:83:
b3:eb:56:2d:12:a8:bb:43:3b:83:f6:65:33:de:a6:85:d1:b4:
af:b2:c1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:59:33 2026 by rpki-client