Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.mft (raw, json)
Hash identifier: k6qvj9Ibph+HUKPjToNHp26d7LkfkJcoObO9BYwBM4w=
Subject key identifier: 7B:AD:73:FE:64:41:4A:BF:66:52:46:6A:5A:1E:A7:0A:37:68:27:56
Authority key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Certificate issuer: /CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Certificate serial: 019FAC0823CB7CD2970B5D28D5686A51B6ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
Manifest number: 0B08
Signing time: Wed 29 Jul 2026 04:00:42 +0000
Manifest this update: Wed 29 Jul 2026 04:00:42 +0000
Manifest next update: Thu 30 Jul 2026 04:00:42 +0000
Files and hashes: 1: 820vIRF1IvHmMeX3TIHoslLaymk.roa (hash: nxsc5hiaKPfRF3Jfau9U9QFL2zAQ/W9nSHpc/OJ2IbA=)
2: yd_q7KItLSYYtDPPAKsUS9i4Db0.crl (hash: 8MWQcLW6KqoO8moJOkz0RQM89gnOO1Jc3mPfKaS/EKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:23:cb:7c:d2:97:0b:5d:28:d5:68:6a:51:b6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Validity
Not Before: Jul 29 04:00:42 2026 GMT
Not After : Jul 30 04:00:42 2026 GMT
Subject: CN=7bad73fe64414abf6652466a5a1ea70a37682756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:a3:b0:1a:3c:98:de:3d:71:23:40:ac:79:
2e:03:df:10:7a:fd:18:fc:0d:df:22:5d:87:e5:72:
b3:ba:ea:a7:20:24:16:fc:4f:6e:61:86:0d:2a:6e:
40:e6:63:3b:93:75:a9:d0:74:0c:69:fa:65:ad:fe:
ce:e6:d8:62:a3:61:36:81:4f:77:b9:cb:b1:17:bf:
d8:da:c5:2b:3b:e5:be:58:70:fe:b2:34:72:28:c0:
88:03:7e:4f:3f:97:d6:e8:6d:31:11:7c:20:be:20:
99:40:ca:a6:f6:68:f1:5f:e3:41:96:0d:c5:3e:f5:
ae:67:8f:79:d6:5b:dd:54:e4:27:70:99:38:af:89:
0b:ae:50:f2:e5:f1:fe:40:26:8d:51:f7:26:2f:57:
62:b2:3d:2e:02:0d:a9:6c:06:74:c2:78:b8:52:a7:
02:57:22:df:89:aa:8f:87:bd:db:e4:65:9a:a0:01:
76:01:a1:bc:ba:4c:a4:a4:3c:10:9b:2d:9b:e4:ba:
cd:3d:ed:20:ea:e4:5e:3c:c4:92:31:97:01:2e:18:
43:ec:4a:b6:b9:c6:bd:ad:17:e8:f0:8b:24:10:46:
d8:66:41:2a:49:b9:0f:eb:8d:a4:5b:c7:26:d4:db:
3b:75:95:d7:64:9d:73:9a:7b:70:83:67:9c:ab:25:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:73:FE:64:41:4A:BF:66:52:46:6A:5A:1E:A7:0A:37:68:27:56
X509v3 Authority Key Identifier:
keyid:C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:59:84:10:dd:db:df:42:d6:d3:36:d8:59:07:f4:04:be:b9:
14:46:6f:34:55:8f:5c:e2:3e:7c:6f:42:05:95:49:65:9c:b4:
3c:9d:63:39:36:3a:20:0c:bf:62:98:61:ca:18:71:7c:c3:98:
c5:0d:9c:c0:f4:b9:46:5e:49:fe:78:46:21:9f:49:92:c7:93:
66:8a:5b:18:a2:01:d5:5c:49:28:42:67:46:2f:e1:bc:da:fb:
e1:78:e1:d0:49:f8:0d:40:77:a9:42:28:37:d0:15:7a:2e:9c:
ef:0b:8c:14:6f:c8:5b:a7:33:53:da:ba:47:82:57:43:75:3a:
c2:f2:b0:87:4e:62:08:9d:30:e6:c6:18:8f:8e:6d:67:4f:75:
51:5d:d4:a1:68:3d:1e:64:ae:4b:5a:2f:59:33:23:ff:a2:7e:
90:a5:74:40:e1:69:95:a3:f4:6e:0d:27:4c:6f:9b:05:87:7e:
d6:e0:f6:4f:b8:ea:df:a7:46:65:31:7e:9c:ca:d0:d4:39:d1:
b7:aa:8d:40:c6:f9:69:17:18:ae:ea:4f:47:95:e7:0e:d8:10:
34:f8:a6:7f:1f:99:78:e4:48:bf:88:e4:66:df:cb:70:95:ca:
1b:23:cb:24:72:77:68:b3:de:a7:44:78:49:1d:76:b6:f0:15:
2d:64:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:30:47 2026 by rpki-client