Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: QDUC0jjuClyVS+F0HJqaA9muAD7obg7tE2+J0I4uiNI=
Subject key identifier: E7:03:62:2F:D4:67:45:A0:D2:5A:76:2B:0C:9D:C9:A4:BA:77:A8:39
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019EB9583E66E9179C207EDFBADE14623360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0D13
Signing time: Fri 12 Jun 2026 01:00:28 +0000
Manifest this update: Fri 12 Jun 2026 01:00:28 +0000
Manifest next update: Sat 13 Jun 2026 01:00:28 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: a3Cu/wFJ5eXx2yfJVaLS8AEn/SVs6es6M1A2QQRHnS8=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:3e:66:e9:17:9c:20:7e:df:ba:de:14:62:33:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jun 12 01:00:28 2026 GMT
Not After : Jun 13 01:00:28 2026 GMT
Subject: CN=e703622fd46745a0d25a762b0c9dc9a4ba77a839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:b6:01:77:fc:89:5f:bb:73:b3:74:a1:22:
8d:17:25:d9:23:f7:4b:b5:a0:0c:c7:13:52:91:fb:
91:84:71:33:04:f5:76:21:93:61:6c:6f:d7:d6:29:
dd:9b:ee:0c:17:c5:09:cc:0b:c0:79:ea:73:85:79:
45:27:5d:f2:82:51:ce:00:72:a5:08:2c:c8:1c:f1:
c0:a0:15:93:43:da:84:a5:2c:4d:c4:a5:88:f4:d7:
b1:d9:66:0f:c8:5d:bd:45:3d:ae:d8:5b:2f:2f:f3:
ff:05:9b:f2:25:e2:b2:ac:3c:f7:de:48:b7:7f:63:
58:75:4f:94:c3:13:87:4a:46:59:49:60:39:8a:f9:
42:a1:ea:0e:f6:9e:fe:50:82:49:c0:15:76:ee:cd:
8d:fa:14:54:37:39:54:c7:1b:9c:41:b0:75:de:34:
56:ed:a9:3a:01:e9:e0:ae:a8:3b:52:ae:43:db:24:
b2:cb:8a:07:a2:c0:9b:e5:7b:60:7c:20:6c:be:8f:
37:07:da:62:ac:d6:20:d1:6e:8f:7b:e8:6e:08:21:
3e:fe:52:ce:64:97:8a:cb:83:6d:b3:ee:6c:05:aa:
87:cb:20:de:97:72:34:08:31:e9:93:ff:f8:8c:4a:
1a:f2:5a:8f:e9:de:98:df:be:b9:64:77:eb:a3:00:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:62:2F:D4:67:45:A0:D2:5A:76:2B:0C:9D:C9:A4:BA:77:A8:39
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:27:2e:eb:9b:f1:9a:28:7c:1f:a7:5f:27:6a:84:bc:6f:b5:
ca:aa:fc:24:37:4e:b7:c8:eb:ed:31:3e:67:4b:d4:62:c1:ce:
40:17:8a:b9:f9:3a:33:25:32:51:73:5f:6e:10:ff:aa:c0:0b:
ef:b3:ca:f4:25:39:f1:7c:b1:69:76:50:fb:08:78:f8:5e:a6:
90:07:72:8a:9f:26:4a:07:21:70:5b:a9:10:32:d4:e7:bc:a1:
e0:8b:82:33:43:b9:e6:ee:d5:ad:a6:a4:e4:51:c6:eb:66:7d:
74:3e:a7:0a:ba:9b:b0:02:00:80:9a:82:f1:39:31:87:13:0c:
fa:f4:83:cc:ae:29:1e:66:56:11:32:19:bd:ba:93:5f:23:b5:
02:a2:77:e4:6b:33:47:70:2a:23:73:7f:76:8d:7e:dd:4b:21:
b5:04:fb:27:61:ad:6f:42:a0:bf:cf:4f:80:4e:83:a1:43:ca:
25:17:3b:76:a9:c9:e7:d8:6d:57:ab:98:dc:dd:fe:ac:07:9b:
85:e6:98:4b:f6:16:06:73:31:4b:d8:60:d3:ed:bb:e2:fa:97:
4e:be:04:82:ac:ba:1c:9a:9e:31:2a:f2:f5:3d:f0:28:31:b4:
f2:a9:37:50:44:fd:5b:83:8e:47:53:93:5d:b9:7e:0f:73:05:
94:87:e4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:30:20 2026 by rpki-client