Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: fHqlIAxqHfQFjSiGKXKWkzEDCAdqMhOVV6FmwlHgbyo=
Subject key identifier: F8:B5:58:09:12:E3:57:BD:10:7B:81:6B:66:02:5C:67:16:83:59:5B
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019FAAF5804D3ADDDD89B325A910BFD78CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0D67
Signing time: Tue 28 Jul 2026 23:00:43 +0000
Manifest this update: Tue 28 Jul 2026 23:00:43 +0000
Manifest next update: Wed 29 Jul 2026 23:00:43 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: mquVRNydDmRPXGQP6HqXwOBur8MH7Py/9JDy6XyVyIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:80:4d:3a:dd:dd:89:b3:25:a9:10:bf:d7:8c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jul 28 23:00:43 2026 GMT
Not After : Jul 29 23:00:43 2026 GMT
Subject: CN=f8b5580912e357bd107b816b66025c671683595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:34:61:b8:38:aa:ab:9a:1b:73:95:06:e0:
45:de:b2:6c:8c:a7:ca:1f:bc:c3:99:1c:4a:cb:8b:
ee:26:ad:02:6d:6e:17:7d:cf:0f:a0:0d:2f:97:d4:
53:2b:ee:3f:b1:e9:8c:dc:99:a7:17:6b:78:6d:da:
b5:d8:3f:90:e3:f9:b9:1b:33:17:93:85:5a:ad:96:
d4:ee:e0:c7:f8:2f:07:df:4d:ab:28:09:26:da:82:
bd:8d:fb:c5:90:9c:eb:e6:72:dc:54:f4:65:19:50:
ce:26:9b:bf:d0:7d:15:83:4c:bf:1d:44:f6:d6:b5:
1e:d6:4d:59:58:b6:9f:44:df:8e:1a:67:a5:37:70:
af:9b:9c:65:8d:16:86:e0:cc:2d:02:43:16:80:67:
5d:44:fa:c6:d1:af:31:4a:1b:3a:3a:dd:b6:53:17:
3e:60:76:27:61:e7:1e:77:5e:a7:b6:51:51:66:5c:
a8:43:ba:8f:ff:8f:43:92:12:16:99:f9:8e:b6:ae:
86:5b:28:7a:99:6a:8a:36:00:9b:d5:c9:80:b3:56:
d1:64:16:94:f8:d0:ba:e1:eb:1a:65:25:00:54:f7:
7a:83:29:77:01:1b:43:50:25:49:65:fe:14:62:4c:
63:d5:6c:fa:13:5b:a1:02:be:6d:4e:08:86:d9:49:
e3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B5:58:09:12:E3:57:BD:10:7B:81:6B:66:02:5C:67:16:83:59:5B
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:de:e7:ed:74:af:ea:76:b5:2a:18:7f:69:21:19:80:ca:09:
47:89:64:1b:a5:c6:86:bb:5e:55:c9:ea:5c:8e:94:96:d7:c9:
49:4d:22:06:ff:c2:24:4a:f1:a1:8c:15:6d:d1:4e:76:88:43:
0c:2b:27:30:a4:c6:79:e5:59:74:71:2f:11:ed:95:50:8f:51:
48:4e:61:91:5c:28:4e:7c:a7:32:58:f1:47:9e:d7:7d:20:fd:
f6:f7:e9:83:3e:5b:d5:13:68:01:e4:60:e9:af:ab:04:51:dc:
1b:bd:ba:9a:ad:b3:ef:af:15:87:ed:e5:02:f3:46:97:96:8b:
8f:31:21:4b:32:01:ea:ec:cf:0f:5b:4f:78:24:34:2c:d7:d0:
7c:8c:f0:91:c3:af:e6:b8:ce:98:a0:ac:cc:d9:a8:10:51:ec:
2c:0e:f7:95:38:ab:4b:ff:6d:d4:5c:cc:0e:d3:42:4c:55:a0:
6b:b1:d9:cc:36:e9:ec:9d:28:cd:20:55:15:f2:75:4e:2e:cf:
7c:cd:e2:fd:48:d5:da:4c:1f:eb:2c:29:44:5c:0b:a0:eb:56:
8a:7b:40:0d:0f:45:3e:96:fa:b7:be:72:1c:77:1a:d5:9a:f9:
48:8d:95:34:98:93:26:fa:59:fa:89:14:ae:11:2c:56:34:40:
24:82:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:05:25 2026 by rpki-client