Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
File: ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft (raw, json)
Hash identifier: fiAcdGE7yF6kj0Sk3mYlgu5pfx2Hu1bL9XTKIPCijBE=
Subject key identifier: 0E:1C:B0:E4:93:D0:A8:9A:48:7D:98:71:02:2B:E5:B9:52:89:D4:C9
Authority key identifier: C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
Certificate issuer: /CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Certificate serial: 019FA8626C5FD93011C356CCE1561B0181FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
Manifest number: 9B
Signing time: Tue 28 Jul 2026 11:00:50 +0000
Manifest this update: Tue 28 Jul 2026 11:00:50 +0000
Manifest next update: Wed 29 Jul 2026 11:00:50 +0000
Files and hashes: 1: L6cWexgMIbqFul3AirbjsOAefEg.asa (hash: 1nOkALqCPFQsioiwLDdO7OlhwTmnqBbLFbvH6uqIpPw=)
2: X2DmUx0pbN5guKhNJtTsv2u4c3Y.roa (hash: VTwewHc51dPE2RalZVl+hHr3MWkt8tZDjDqcqb8c2w4=)
3: ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl (hash: gCQge3XGEcdhzzQTlU1aBDrTilFAmmW/6DuP9wiFexo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:6c:5f:d9:30:11:c3:56:cc:e1:56:1b:01:81:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Validity
Not Before: Jul 28 11:00:50 2026 GMT
Not After : Jul 29 11:00:50 2026 GMT
Subject: CN=0e1cb0e493d0a89a487d9871022be5b95289d4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:de:e8:1e:53:1b:dd:a1:96:f9:94:9a:91:
49:73:23:43:1f:25:f4:0b:da:ab:92:e8:9e:45:82:
1a:75:f6:01:58:f9:e7:10:60:9f:7c:39:8e:f7:b4:
74:55:12:c2:f2:7b:78:c3:29:86:c5:fd:4d:ae:51:
07:54:3f:9e:a3:50:72:18:68:00:10:f3:d4:a8:9e:
df:bf:cb:5b:19:aa:9c:3d:f8:58:99:ef:ae:88:0a:
96:d6:7e:0c:f0:0d:37:c3:8e:ee:e0:9d:b1:1e:66:
74:40:8d:8b:10:99:15:54:b2:34:fa:fc:20:c8:0e:
6d:08:68:e8:9b:30:42:e7:19:8e:6d:ab:e6:43:37:
ab:e6:e1:66:c7:bc:71:32:be:5b:2a:ab:ab:2c:d5:
5b:5f:2b:64:02:7f:c4:da:43:8e:9c:79:ca:36:04:
ec:5b:5c:0a:6d:29:ae:60:67:bb:12:af:39:fc:6a:
35:98:81:c6:2e:c6:95:ff:08:9b:20:fa:03:4e:79:
0a:0b:cf:50:e5:d3:42:98:de:a6:8e:ee:68:24:78:
01:f8:18:9e:26:8b:23:c1:11:71:ec:00:42:74:80:
1b:9d:ab:d3:fb:e0:13:92:b7:19:91:d8:d2:4b:1f:
85:b9:86:62:fe:c5:ae:87:06:3c:80:2c:8f:a0:30:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:B0:E4:93:D0:A8:9A:48:7D:98:71:02:2B:E5:B9:52:89:D4:C9
X509v3 Authority Key Identifier:
keyid:C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b8:c5:a9:b2:a7:40:c0:08:4e:0a:16:e5:f6:21:01:80:ff:
88:d3:2d:e5:88:26:97:c9:3a:87:7f:5a:d7:10:bc:fb:ba:c1:
48:73:12:14:94:f5:7a:80:eb:51:f9:c5:a7:f9:25:e5:6d:00:
94:66:b9:27:98:69:08:4e:af:66:3c:3b:c4:93:d4:47:dd:10:
6b:d5:e0:e8:72:47:65:1e:61:67:eb:11:8b:76:1f:ee:b4:df:
c1:03:9a:53:45:ee:c2:5d:76:58:85:e8:ad:57:2b:07:7e:5a:
dd:80:be:55:0c:69:db:86:b7:f5:51:33:3f:de:29:cf:8f:8a:
e8:c9:55:da:ae:1c:c9:ef:d3:94:c1:b0:7a:11:71:cc:44:34:
92:5a:3f:4e:8d:8e:aa:a5:ae:a5:b6:7a:3c:6b:e6:2a:05:ee:
2c:c6:6b:09:39:0f:53:70:57:cf:d5:c0:63:e5:ff:29:16:d7:
3c:da:6e:cd:54:40:c0:30:58:fd:eb:59:29:6f:56:a9:51:92:
d7:0b:54:fd:fc:d3:5f:7c:f2:88:db:bb:93:a1:2e:d5:8e:b8:
2f:3f:4e:87:04:c2:a1:bd:d5:99:ea:7b:0a:7f:69:cb:3c:0d:
f3:b7:e4:f8:b1:cd:5d:c3:44:61:07:0e:63:01:c9:b9:dc:a9:
cc:f0:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:41 2026 by rpki-client