Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: jYeDfRqCR6pueE5dwLsKFlvOshx1PqCu4BT/BjBS6fQ=
Subject key identifier: D2:9F:D1:E5:63:2E:0A:2B:B8:9D:1A:6E:D6:10:B1:10:96:C9:46:23
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019ED0BCC961D2D6DB8EBDB533F0B87E85B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: EE
Signing time: Tue 16 Jun 2026 14:01:33 +0000
Manifest this update: Tue 16 Jun 2026 14:01:33 +0000
Manifest next update: Wed 17 Jun 2026 14:01:33 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: +I+6HzmVzh7BaLUkMA7soIZCt7dEB69JTxBmHx0Wwlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:bc:c9:61:d2:d6:db:8e:bd:b5:33:f0:b8:7e:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Jun 16 14:01:33 2026 GMT
Not After : Jun 17 14:01:33 2026 GMT
Subject: CN=d29fd1e5632e0a2bb89d1a6ed610b11096c94623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:a3:c4:9b:d9:29:5e:1b:94:a7:a6:21:0b:
b5:12:92:bd:df:d1:60:51:4e:08:d7:01:a5:4e:ce:
f1:87:88:00:81:1f:4f:f2:46:45:b7:6f:7c:d1:e5:
0e:4f:ca:ae:ed:68:6a:d5:85:a0:66:c6:3a:39:86:
78:22:31:dd:f9:1e:b9:8f:96:af:e2:f1:1c:49:30:
45:b4:d2:ad:11:14:30:28:26:56:b9:08:51:7f:8d:
da:70:a6:3f:c6:1e:21:62:a9:c0:48:92:f6:3b:ca:
4b:41:09:35:42:e5:c9:3c:dc:79:b6:26:a6:77:01:
98:03:2f:c0:80:86:04:0d:ca:17:5b:68:3c:d8:07:
c0:0e:05:98:c0:2b:09:f1:ec:69:0f:83:31:ac:e6:
ec:34:48:93:3f:7d:43:c0:54:50:3c:c9:8e:c5:30:
86:1f:10:55:d5:ca:ca:a2:7d:67:91:39:4e:9b:39:
e5:c1:32:f7:23:3d:e1:06:c7:9e:97:38:56:e2:fb:
8d:3f:03:10:b9:d7:57:f8:ca:a5:9c:34:03:7c:a1:
d3:60:71:a1:70:4d:61:b6:a6:f9:ab:9a:d3:3c:3e:
18:ec:98:c3:30:4e:07:30:7e:37:6d:5b:25:9a:7a:
f2:33:aa:26:f1:56:76:0c:47:e3:76:50:81:fe:3c:
bf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9F:D1:E5:63:2E:0A:2B:B8:9D:1A:6E:D6:10:B1:10:96:C9:46:23
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:27:fe:cd:cf:0e:f3:8c:95:55:e1:0e:7f:de:66:fa:71:42:
13:87:c0:88:de:f0:f2:7c:e0:66:c3:81:64:97:de:7c:5b:e8:
1b:32:9f:6a:65:68:b0:3e:3d:17:ab:41:02:3b:6e:53:bf:32:
72:d1:04:e2:a0:04:2f:89:ca:84:0d:ad:49:8e:fd:fe:93:d9:
05:31:68:b1:a6:70:d6:e8:6b:d3:c6:2f:91:4a:be:e3:f5:35:
33:42:6d:54:45:1e:f8:1b:ee:db:b5:03:4c:d4:b7:60:bd:3c:
54:d8:55:9b:e7:56:f1:d2:47:68:b6:b6:3c:13:c5:6d:b5:f1:
70:a0:c5:c6:c1:78:14:00:fc:4a:26:26:dd:7c:4c:ab:36:f5:
61:a6:3d:84:6a:08:b5:b4:63:65:ec:61:76:6f:33:31:f2:0f:
5d:d7:8f:6b:e6:71:ef:41:8c:0f:90:64:45:c7:6a:84:54:8c:
f1:94:04:8f:6d:53:f4:55:3a:bb:e4:99:38:e1:2e:2b:89:38:
e8:32:d8:87:a8:45:17:b6:13:d4:c3:5c:32:9b:ef:1d:59:57:
f6:d3:25:77:94:7d:55:2b:0d:d1:5d:47:b8:8f:27:0a:59:79:
ac:f1:39:02:98:b3:ef:52:a5:4f:42:8c:2b:34:1c:b4:10:23:
16:7b:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 00:13:27 2026 by rpki-client