Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: 2CASmtjuem+EzduiMQLgeeh3aidQoLXAkRitY9dWsSs=
Subject key identifier: B7:39:6E:DB:66:0A:3D:17:B5:E7:9F:E0:B9:B7:F8:63:CE:9D:8D:4A
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 01A0C3D6E4115A31F5BEB3B89162FE588F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 09C9
Signing time: Mon 21 Sep 2026 12:00:35 +0000
Manifest this update: Mon 21 Sep 2026 12:00:35 +0000
Manifest next update: Tue 22 Sep 2026 12:00:35 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: PWhmEWRS0AwJHe6cyWUqNPJl5ufqCTv46tpZ2oRUovQ=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:e4:11:5a:31:f5:be:b3:b8:91:62:fe:58:8f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Sep 21 12:00:35 2026 GMT
Not After : Sep 22 12:00:35 2026 GMT
Subject: CN=b7396edb660a3d17b5e79fe0b9b7f863ce9d8d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:d6:0f:db:f8:4d:58:50:14:44:f8:c4:f1:
8d:89:79:40:a0:db:b3:26:c8:fe:64:ef:12:fc:e3:
b6:d4:9e:a7:c3:b7:2c:a9:2b:db:8f:e9:12:15:0f:
b4:1f:5e:49:24:73:3a:87:ee:94:75:6e:be:ea:42:
aa:36:2e:4e:8e:bb:ec:72:00:77:ad:03:0c:45:74:
39:52:66:ae:00:a5:a7:94:63:9c:33:fc:11:38:41:
6f:ab:b8:ff:d3:67:96:9a:eb:07:e1:10:b1:8e:a1:
9c:4a:ab:5c:1d:16:13:ac:c0:5e:9f:f0:ce:54:db:
28:dd:13:69:5c:e6:f7:d7:21:02:27:be:b8:fe:2c:
d4:dc:39:83:fc:ec:81:d8:86:1d:8a:8d:96:d6:f0:
bd:10:db:a3:8f:82:e4:cd:98:73:55:3f:03:1b:2c:
9c:97:49:93:13:00:a6:61:f9:48:3c:ee:b5:f9:c4:
93:63:73:a8:f1:58:98:4c:67:46:d2:4a:cb:5a:b8:
50:c9:76:e1:f3:ae:ee:55:e1:d9:e0:da:64:fa:b5:
8c:eb:66:a7:41:8a:9b:ac:b4:fe:a9:6d:86:b7:0b:
e0:ef:16:bf:59:e1:a4:0f:7f:b2:4b:05:6b:f1:74:
90:16:6c:da:83:68:dc:e9:de:38:60:02:05:e5:2d:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:6E:DB:66:0A:3D:17:B5:E7:9F:E0:B9:B7:F8:63:CE:9D:8D:4A
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:28:b3:18:55:18:01:ab:f3:35:1c:0e:7b:77:14:0e:5b:e5:
5b:da:fa:45:fb:76:74:7d:c2:90:19:38:64:a8:eb:75:a3:88:
fa:a2:e3:8e:fd:5e:98:c1:92:75:d6:19:bc:0d:9b:a7:71:1e:
5b:e3:71:f4:b8:1a:e0:59:e5:2b:e5:60:d4:d0:48:84:0c:40:
68:df:35:15:08:8c:d4:b5:59:cb:ef:03:57:fa:d5:d8:23:c5:
93:d2:28:16:e4:ff:97:6f:d3:04:31:0c:e1:0f:4d:0a:6c:93:
89:b2:83:50:43:56:1c:12:a1:a7:a4:df:9c:ff:a2:77:e8:be:
ab:d1:d3:46:b9:c9:2e:e2:e7:f6:5a:9c:1f:e0:50:21:60:2b:
30:a9:f8:f4:30:16:48:e9:3c:2e:62:ec:fa:45:8d:2a:24:51:
30:f5:6d:73:de:ba:29:19:d4:28:1d:98:36:86:2a:b2:f8:bd:
9e:ba:83:70:33:dc:88:5b:86:9e:92:de:61:f7:a6:2d:63:3c:
47:64:20:51:43:63:e6:19:4d:da:b9:f6:85:52:fb:c0:f4:2b:
8d:c8:18:e3:e6:72:68:fb:a5:96:d6:19:fd:31:70:6c:48:7c:
72:41:06:e0:98:25:fa:5e:b8:8f:c7:e2:bd:a6:7b:3d:1e:d1:
fc:6f:28:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:31:38 2026 by rpki-client