Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
File: yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft (raw, json)
Hash identifier: fVWVm3EzDY/nlBQv1CAw6KD2pwKzl6JVXJlgtEYaWOg=
Subject key identifier: 29:35:A6:FF:BF:7F:AB:ED:B7:81:41:03:21:F6:43:8B:39:65:D8:1D
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 019FADF644F2EAEE76652B15F2A1C94449BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
Manifest number: 16BD
Signing time: Wed 29 Jul 2026 13:00:25 +0000
Manifest this update: Wed 29 Jul 2026 13:00:25 +0000
Manifest next update: Thu 30 Jul 2026 13:00:25 +0000
Files and hashes: 1: _SwAckWBp8isMhZUKjw_8MX2PbQ.roa (hash: DdPCOva+CEkdSFj4rwktdG8ykIu5k66PhfcbhD6raBk=)
2: yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl (hash: 14p3ZkKIbA/vjJiosJ4NcYoIc9Gi6NTDevERdgWmDdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:f6:44:f2:ea:ee:76:65:2b:15:f2:a1:c9:44:49:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jul 29 13:00:25 2026 GMT
Not After : Jul 30 13:00:25 2026 GMT
Subject: CN=2935a6ffbf7fabedb781410321f6438b3965d81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:df:94:4c:df:6a:cc:ee:4b:4f:1a:90:ea:
6d:d5:f2:a8:d5:ad:3f:a3:10:6a:16:9a:6e:5e:73:
79:0c:4b:fd:18:0e:31:bf:e2:79:45:a0:a5:eb:78:
b1:c7:04:bc:3a:89:66:dd:16:2c:cf:7f:6d:d1:a6:
05:64:12:47:8d:51:c2:f8:56:db:58:65:e9:d5:67:
2a:1e:33:bc:f2:a7:4e:97:d9:b7:45:44:48:7b:c5:
21:86:e1:30:42:ab:aa:5f:db:81:7a:b9:40:0d:15:
ea:68:93:aa:c2:bb:bb:8d:b9:5a:89:12:e4:84:08:
3c:81:75:b8:2f:5b:c6:da:57:0e:98:1b:b5:06:e9:
ab:26:0c:1c:29:8e:86:78:be:b9:b8:a9:33:25:45:
79:46:a0:76:7f:c8:7d:05:6f:88:83:61:b7:a6:a0:
e0:b6:a6:88:6f:2d:c7:5b:6f:99:f9:56:9d:8b:88:
ac:5b:58:fd:25:31:67:96:0c:ec:e7:ad:4a:11:3c:
f6:ca:f4:db:30:84:60:73:1c:36:4c:b0:e6:d8:13:
67:58:b7:cb:19:79:3c:54:5d:46:ad:35:91:4e:c4:
d4:65:13:02:8a:46:fb:30:d8:d7:b7:88:2a:ad:c3:
16:13:dd:e9:af:fb:2a:3e:e6:64:b7:8e:21:ee:87:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:35:A6:FF:BF:7F:AB:ED:B7:81:41:03:21:F6:43:8B:39:65:D8:1D
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b7:65:20:27:d0:b8:80:cf:5b:be:73:63:69:d0:6d:e6:bd:
b9:34:3c:70:96:db:c2:e9:74:00:21:ac:e3:42:64:53:d8:7a:
3d:c6:97:56:db:70:26:01:cb:a1:f3:47:a4:e2:20:f6:2a:c4:
ad:fb:63:10:6a:46:83:96:fa:6d:71:ad:f7:ca:53:44:cf:2e:
21:22:ea:e1:2d:67:80:7a:af:cd:d1:51:a7:f7:7f:d6:48:b1:
b3:e1:a6:2c:03:13:0a:52:8b:7b:ae:be:5e:f7:65:a7:f6:13:
2c:cb:f7:b8:7f:48:5d:68:d0:d7:19:0f:ef:81:3f:13:e9:8d:
53:f0:07:d9:3d:a6:b6:f7:2b:4e:b2:b4:88:47:f1:ad:9b:ec:
24:80:aa:51:3e:0d:b7:e2:76:60:d9:fb:f8:b8:5f:55:af:32:
27:b5:20:66:99:65:ae:7f:a7:b3:39:9f:04:c1:9b:7f:97:e8:
8c:5a:f7:6b:93:cc:bc:f2:04:98:3a:64:9b:ea:81:ee:f7:04:
62:a3:e9:6d:0c:7f:82:ad:e5:41:e1:5d:04:c1:b9:be:9a:be:
2f:91:a5:f2:db:27:f3:ca:69:a7:38:9f:45:36:11:43:e2:be:
ea:1e:33:14:6e:ac:03:72:ef:e0:c3:b1:c6:00:e8:3d:a1:17:
e8:f4:89:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:45 2026 by rpki-client