Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: cMTVFhyAz4YWYeKWz6uTZG7wB/0R9vkRV94xBWSmNjk=
Subject key identifier: CD:57:EF:35:2F:C0:BE:CB:E9:AA:86:B7:FD:C5:2E:57:BB:10:FB:FD
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019FAF0933B7FD62E24839FBBF92F30E5957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0BE7
Signing time: Wed 29 Jul 2026 18:00:43 +0000
Manifest this update: Wed 29 Jul 2026 18:00:43 +0000
Manifest next update: Thu 30 Jul 2026 18:00:43 +0000
Files and hashes: 1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: JSgFmN/09d9RfzvVLWTB8ozn4XkkZqLsygDIyNQSI88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:09:33:b7:fd:62:e2:48:39:fb:bf:92:f3:0e:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Jul 29 18:00:43 2026 GMT
Not After : Jul 30 18:00:43 2026 GMT
Subject: CN=cd57ef352fc0becbe9aa86b7fdc52e57bb10fbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:2e:71:ae:d7:43:54:a3:38:11:c5:8f:10:
f9:cb:56:c7:b7:7f:9e:a7:a8:a7:7d:ac:ec:df:0c:
8b:24:5a:3e:41:ba:ed:5c:79:4e:59:da:37:77:1f:
0f:a8:b1:7b:0c:3c:8c:73:58:4e:b5:ca:f7:88:9c:
d4:e3:cb:9f:8c:9d:55:54:ab:0c:68:c1:9b:94:fa:
3b:cc:2c:6c:ff:3f:1c:bd:0d:82:79:2d:7f:aa:65:
01:17:02:5d:d2:79:26:8a:96:c3:b1:d2:35:ae:e1:
63:68:dc:6b:32:60:8a:3a:9a:44:ff:c2:03:71:29:
c6:0a:3f:3d:c8:d3:f5:79:4a:dd:fc:5a:ca:fc:8a:
f9:f8:8c:b5:cd:dc:f7:1f:30:be:3f:ab:3a:f7:a2:
c2:54:fc:f1:c1:ce:b4:db:9e:d8:b6:95:7f:4f:bc:
ce:2e:68:37:1b:5a:02:5a:e1:6d:e6:c4:84:b2:c4:
84:62:bd:33:5b:8f:9b:88:64:52:e1:58:99:51:f7:
fe:b0:4c:46:e5:60:f0:9c:44:8a:4c:0a:dd:3b:1c:
12:c0:82:db:72:0e:73:08:cf:86:d9:29:d5:29:86:
a7:37:74:cf:46:1c:46:78:7b:88:73:4e:66:7a:1e:
f9:fa:5f:28:fc:3a:87:5c:79:80:e5:c6:44:6d:28:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:57:EF:35:2F:C0:BE:CB:E9:AA:86:B7:FD:C5:2E:57:BB:10:FB:FD
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:72:68:42:ea:f9:d5:0d:c8:61:cb:2d:26:64:bd:fa:56:
7f:55:93:39:a7:e6:6d:4e:fb:ff:a6:eb:27:11:8a:36:6b:3b:
1b:90:46:eb:ad:2e:d3:45:89:61:9b:ff:aa:42:2c:52:65:bd:
86:78:55:b9:0d:02:a0:78:3c:f1:c1:7a:60:df:61:72:54:d9:
54:f4:8b:00:4e:f2:4d:13:7a:dd:43:68:4b:bd:48:8c:c7:9c:
c4:75:24:57:bb:5c:e8:be:60:a4:1d:63:22:f2:16:5f:69:fb:
94:63:b4:84:6a:9c:6e:c2:bc:8d:f6:4b:16:f1:67:a6:7c:a4:
cb:53:20:6b:9a:20:b3:ef:b6:41:f4:2e:a7:d5:cd:d5:cf:46:
48:7a:93:a8:9b:09:d4:f2:cd:ec:35:a3:62:1f:18:e0:8d:5e:
cf:47:86:9d:a3:de:0d:6b:1d:12:55:99:2a:7a:c9:8b:f9:53:
33:61:6f:35:ef:fe:28:7b:72:0c:ea:42:06:22:a7:fb:ed:d3:
e7:a9:ef:6a:14:14:81:95:cd:ea:59:a2:77:53:ae:f0:7b:25:
9e:45:2e:fc:70:f0:0e:e9:97:6a:1d:ee:6d:51:38:e0:da:65:
25:8a:2f:ae:67:95:f8:aa:fe:86:37:53:9a:de:f8:c4:cf:ca:
51:d7:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:34:46 2026 by rpki-client