Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: QQJ3aNN8PMD8DDXJKmHfaQLyAAecfByyXL6LTu80PAg=
Subject key identifier: 8A:86:48:DD:6F:C8:76:44:AC:4B:E2:E3:C6:2D:9B:7A:DD:93:A6:FA
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019F1265C58CF9B7B9E417DA638F641C489E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 03DC
Signing time: Mon 29 Jun 2026 08:01:27 +0000
Manifest this update: Mon 29 Jun 2026 08:01:27 +0000
Manifest next update: Tue 30 Jun 2026 08:01:27 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: RW84jP/PDtvES5mxlK13Zj0AQk7GDKA1la3b94hf6+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:c5:8c:f9:b7:b9:e4:17:da:63:8f:64:1c:48:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Jun 29 08:01:27 2026 GMT
Not After : Jun 30 08:01:27 2026 GMT
Subject: CN=8a8648dd6fc87644ac4be2e3c62d9b7add93a6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:a3:d2:83:25:1e:b8:ad:38:77:91:a8:17:
be:10:dc:da:20:ce:57:d2:71:1e:03:05:5a:62:d2:
74:70:b9:e5:0d:19:89:3b:91:b0:e7:76:2d:aa:e4:
7d:53:7b:9f:66:2e:df:ed:96:44:b2:f6:a7:fe:74:
ba:8a:56:76:50:8f:fd:55:81:78:87:2f:c4:3b:e0:
6b:cc:8f:bc:27:71:9b:4e:19:fd:dd:8a:20:f5:74:
bd:d5:69:b7:8c:24:45:4e:76:e0:97:b5:c0:7f:87:
d9:91:0c:c3:f0:57:26:60:8f:52:1b:96:4f:7b:b2:
13:bf:e6:db:d2:c5:59:dc:e7:b4:02:e5:62:84:40:
92:23:cf:52:4c:3b:fe:54:40:84:66:81:03:a2:7e:
b4:9d:dd:0b:0b:86:02:d0:36:e8:8d:d1:2a:9d:17:
4f:b4:bc:06:6f:5b:50:56:0e:ce:82:09:ea:ac:b1:
26:b2:d4:0e:ca:a7:d3:3a:77:05:6e:aa:51:30:17:
af:a6:d0:fa:ff:83:dc:f8:0a:1f:1f:cf:89:9d:b8:
df:5e:56:ad:c6:d9:5b:c9:f3:59:49:8d:bb:b8:1d:
87:a0:59:ce:e1:5c:84:d8:2c:e9:21:be:ee:a8:5c:
28:83:87:46:58:2c:a4:63:ae:08:33:01:88:98:f3:
07:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:48:DD:6F:C8:76:44:AC:4B:E2:E3:C6:2D:9B:7A:DD:93:A6:FA
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:62:57:37:80:23:60:95:21:80:c5:6d:4d:3c:4e:80:52:e9:
42:0d:86:f7:81:88:5d:77:1b:7f:9e:e0:ba:12:d5:28:6b:56:
9d:bb:23:c6:d3:47:6a:a9:99:75:01:79:b9:38:76:f6:7b:63:
cd:b4:a9:f6:d7:cf:b7:6f:cf:56:2c:b1:d0:37:7c:3f:dd:e7:
7d:b7:a9:7c:4c:72:1d:bf:67:f4:52:0b:40:fc:02:05:6f:ac:
2c:c8:d1:1f:d2:1a:37:f7:62:4c:2c:50:5f:59:17:09:73:a7:
cc:d1:2f:0a:7a:35:54:a1:25:5f:f0:98:17:79:09:12:08:91:
cb:d1:45:10:78:7d:eb:9e:4d:66:6e:7f:bd:be:cc:7b:85:1d:
25:7a:ef:cc:0b:b5:04:0d:f8:89:09:6d:7c:bb:53:d2:e6:f8:
b1:ba:55:1d:42:5b:ff:fd:34:a9:9f:5a:d8:0f:a8:a1:59:8a:
ee:a8:05:99:b9:ce:36:2c:00:ed:29:11:66:dd:e0:32:39:ce:
da:58:62:30:ed:90:b3:07:dd:8b:8d:91:aa:58:d7:b5:a9:ac:
bd:2f:70:4b:12:08:a5:b5:b3:40:51:7b:98:c0:2a:81:6c:01:
d8:0a:33:a1:bf:99:30:37:db:36:cb:ba:68:ed:35:c0:96:77:
2a:b3:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:44 2026 by rpki-client