Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: NbUzuvb5bo0lssn6SG0ZxLxAqNMiZ4scVIGU4Dak1xM=
Subject key identifier: FC:FD:36:14:D0:22:B6:B6:76:F9:F0:76:83:EB:19:F2:A2:DE:7C:97
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019E905C96CD5137BA81F9FE6E7469B87D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 1941
Signing time: Thu 04 Jun 2026 02:00:47 +0000
Manifest this update: Thu 04 Jun 2026 02:00:47 +0000
Manifest next update: Fri 05 Jun 2026 02:00:47 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: oDHGvVk/PcwTpQZ8IQWkzU+EFoCDVqHmF9tzW+r9vas=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:96:cd:51:37:ba:81:f9:fe:6e:74:69:b8:7d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Jun 4 02:00:47 2026 GMT
Not After : Jun 5 02:00:47 2026 GMT
Subject: CN=fcfd3614d022b6b676f9f07683eb19f2a2de7c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:86:35:5d:cf:df:52:43:be:4f:62:b7:94:
60:f9:64:c8:13:3b:33:79:3e:d6:9f:04:94:c9:a4:
de:5b:00:75:cb:01:c6:33:8c:21:b9:35:ea:43:ea:
18:f6:19:f0:2e:d4:ae:f4:e2:f5:13:1c:63:3d:f3:
9d:b7:08:7f:c3:7d:51:91:91:37:41:cd:0b:50:67:
84:50:5a:52:cc:20:54:7a:53:33:cf:21:7b:f6:63:
10:bc:92:96:aa:06:89:6f:c9:04:61:5f:73:f2:1f:
b6:54:77:be:c4:36:02:77:f5:05:c7:74:f4:ef:6f:
e6:db:cf:86:d6:ae:41:21:68:c9:bf:03:99:c6:ad:
91:00:66:6d:6b:dc:5a:c1:c4:83:bf:b2:e7:17:20:
c5:e3:6c:92:7c:dd:28:fa:4b:b6:99:0e:e0:06:26:
d1:01:f1:19:c6:00:39:2e:d4:1d:e4:f7:a1:78:8a:
b7:0a:c6:62:e6:3b:0d:ca:6d:82:6f:60:73:10:0b:
aa:e6:d5:08:be:c5:03:54:ba:e5:20:bd:c7:e8:60:
4e:49:6c:e7:6e:05:35:36:18:e8:f1:b8:ea:3a:5c:
18:1b:cd:8e:42:6d:d5:22:aa:34:72:8c:35:de:c2:
82:78:fc:dc:e2:01:5b:d8:d8:34:a7:ea:9e:66:86:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FD:36:14:D0:22:B6:B6:76:F9:F0:76:83:EB:19:F2:A2:DE:7C:97
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:36:fe:fc:44:9b:a7:7c:07:3b:f9:4a:e9:f4:08:cd:94:6a:
74:13:07:ee:c3:22:c2:37:48:ae:b2:d7:5f:a5:62:24:d6:c4:
53:50:b0:a9:6b:5d:6d:dd:5b:41:69:a3:3f:77:9e:14:44:d3:
cb:3a:fd:03:0b:35:01:49:69:e4:65:67:6f:5a:49:3d:8b:4e:
b3:58:07:b8:c8:17:8a:58:1e:43:d3:4a:11:20:a2:ef:d4:c3:
2f:26:26:8f:7c:4f:4a:c7:4d:b1:50:e0:1d:dd:bb:1a:5c:b1:
ef:78:e3:0f:a1:2a:2f:e8:08:39:42:ef:07:8a:30:93:23:d4:
70:d0:cb:7f:3b:d0:9f:db:fe:6e:0a:ba:c6:26:40:a4:ba:d9:
d1:0e:2c:62:33:3f:db:d6:e4:e3:4c:f3:bd:82:83:0b:e2:cb:
c7:7a:a5:52:6a:be:c1:36:7a:93:a4:68:8d:cd:66:fc:3b:7a:
7b:da:08:da:29:b9:23:ea:2f:e9:50:0f:a5:3d:e4:7b:18:9c:
57:f5:5a:ee:86:fc:45:04:5b:c7:1f:04:4b:40:e7:70:d1:18:
76:65:7e:d7:0e:0b:0a:57:54:12:ad:60:db:b2:22:4f:b6:60:
3b:51:af:89:85:45:f9:7e:3a:40:67:93:0c:03:a3:20:42:91:
db:c7:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:18:45 2026 by rpki-client