Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: vNk8qvVxq1olpdkQfl2uG1KWXv1GDskYVD029oF0rzM=
Subject key identifier: 73:95:B2:83:60:69:17:9A:D4:3E:E4:FE:26:EB:FE:E4:50:35:A5:BD
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019FA9E288807561D625A6B873B4A6BA8624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0937
Signing time: Tue 28 Jul 2026 18:00:23 +0000
Manifest this update: Tue 28 Jul 2026 18:00:23 +0000
Manifest next update: Wed 29 Jul 2026 18:00:23 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: Pt28+Ou2t5HEctLZrlttX+uYrgB7HWvBAS3pmlKUuUc=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:88:80:75:61:d6:25:a6:b8:73:b4:a6:ba:86:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Jul 28 18:00:23 2026 GMT
Not After : Jul 29 18:00:23 2026 GMT
Subject: CN=7395b2836069179ad43ee4fe26ebfee45035a5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:99:22:47:29:82:4b:1b:0a:36:6f:78:3b:
ca:1f:7b:1c:cb:6e:66:ba:25:9c:e8:81:be:32:5a:
13:5b:95:26:1d:fe:7e:81:3c:54:f6:4b:39:e1:0f:
a4:fe:80:d6:56:bc:c5:20:b3:5a:5f:81:4f:67:61:
ac:8b:31:6f:4f:af:2a:07:3b:63:9c:47:7e:77:32:
61:7e:94:b0:84:3b:a3:9d:55:5c:86:01:77:7e:e1:
90:e9:d6:9b:cd:5e:88:6c:f6:dd:57:29:af:25:b7:
d8:21:ad:73:61:b6:9e:c8:62:fe:2a:5d:19:b5:8a:
a9:bf:03:26:2b:8e:c7:8f:76:27:25:c2:e0:bf:9e:
4e:19:4d:a1:ad:ac:bf:ee:39:ab:c7:62:db:1c:2a:
a0:7e:da:f0:c9:73:d1:12:b3:8d:7b:cb:f2:cc:48:
81:a1:7f:66:7c:d9:76:12:7f:f1:b3:62:35:59:a7:
f2:a5:e9:ef:e7:40:7e:7e:31:12:57:7b:cc:09:d2:
b3:30:e2:85:a3:69:40:bb:b6:db:3e:7e:e3:db:ef:
cf:c2:21:58:dc:6c:c4:ee:b1:74:e7:1f:20:23:be:
de:87:13:25:59:c4:28:15:08:f4:89:56:51:09:c4:
91:46:38:be:90:f6:77:b1:1a:fa:03:de:f1:3a:37:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:95:B2:83:60:69:17:9A:D4:3E:E4:FE:26:EB:FE:E4:50:35:A5:BD
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0b:72:60:3f:58:8a:82:0a:47:75:44:5e:89:4f:9c:04:e4:
11:7d:44:80:ab:3b:8b:7b:13:d9:14:01:e3:2a:67:7e:70:af:
ce:31:b3:0d:71:b8:d4:4b:36:51:e6:e2:20:42:25:33:e9:c4:
d7:22:f5:2e:b5:22:7e:b8:19:cb:b2:dd:a0:36:bb:9f:8e:cd:
0e:13:56:47:fc:61:cf:b3:72:64:06:1f:11:43:10:2d:43:c1:
71:f0:08:e8:28:5d:93:03:54:0c:38:65:35:55:4a:92:c3:59:
9d:64:9f:ff:c4:c6:e1:bc:ba:46:55:8c:99:f1:95:ff:4c:4c:
d1:10:b1:df:ea:49:2b:c9:9b:71:50:11:1f:7d:fa:9e:b7:e8:
60:52:4c:36:71:1d:a0:f0:ec:33:97:f8:b6:87:85:00:83:4e:
1e:ae:a2:2f:3b:f3:18:79:ef:69:b4:2e:50:1e:ed:1f:90:cf:
75:62:e2:06:b1:d0:40:4e:7e:c6:79:f5:c8:f7:a1:23:11:17:
c7:36:6f:9a:55:c4:69:3c:fe:47:04:93:10:05:14:c3:16:3a:
60:c2:4f:2f:aa:e8:84:c5:2c:d6:ef:f5:c8:f2:b4:14:6c:d2:
4f:30:1e:59:e8:e0:6a:b3:9a:78:67:f5:65:71:ff:b9:ee:5c:
27:78:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:44 2026 by rpki-client