Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File: yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier: RRtLBdUhg0INV+5PDZDDjwdSMJKEFrWjtOBMVAQ+US4=
Subject key identifier: 89:79:25:21:7F:D3:78:44:FC:E8:DC:44:03:43:44:90:EB:01:3E:4B
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 019E8EA57E1E3DB25A4AF4163B82D9EB3E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number: 04B3
Signing time: Wed 03 Jun 2026 18:01:10 +0000
Manifest this update: Wed 03 Jun 2026 18:01:10 +0000
Manifest next update: Thu 04 Jun 2026 18:01:10 +0000
Files and hashes: 1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: KXHw5OgVllvtx/tqdOZE/J5dagz+357K3RU/Jbbv7eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:7e:1e:3d:b2:5a:4a:f4:16:3b:82:d9:eb:3e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Jun 3 18:01:10 2026 GMT
Not After : Jun 4 18:01:10 2026 GMT
Subject: CN=897925217fd37844fce8dc4403434490eb013e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:03:35:b4:0a:92:3e:69:14:0e:06:47:cf:
10:ff:f3:6b:59:00:3a:0b:b9:93:c8:0b:28:db:b7:
59:40:c3:3d:bb:0f:fe:67:fb:71:29:63:78:44:4c:
5a:fc:96:a5:25:65:e9:49:c6:14:ba:a9:dc:56:01:
08:ce:a3:01:1e:d0:ee:fa:bc:c5:d6:7b:75:00:0d:
9e:1c:9b:06:23:3c:a4:c9:ed:53:65:1d:3e:87:74:
f2:4b:1a:40:ee:09:c3:06:04:34:38:84:21:56:a3:
ae:f4:86:5b:7c:12:66:89:6a:bc:03:84:57:85:fc:
2d:53:24:3d:09:c9:e2:43:0e:2a:56:c1:37:a5:3f:
5d:6f:b9:db:a4:37:66:4f:52:c1:3c:0e:01:a2:1e:
a0:e4:6c:f6:ea:68:7b:bb:57:87:38:de:a4:78:e0:
c5:fe:79:83:55:0c:d0:81:c4:0f:60:b0:c5:28:fe:
a3:28:b6:66:a5:e4:34:50:bd:bd:49:a0:c3:5d:c7:
3b:9a:3b:1e:41:63:42:6f:ae:85:00:3d:27:70:54:
3c:9a:4d:46:b8:07:05:27:76:70:35:3a:78:85:32:
aa:ca:67:12:a3:5b:58:a3:e7:79:8b:42:eb:cb:2c:
2f:e1:a1:43:0c:76:87:a6:2d:26:e7:d8:46:1d:a1:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:79:25:21:7F:D3:78:44:FC:E8:DC:44:03:43:44:90:EB:01:3E:4B
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ff:ee:9b:a7:85:c6:4a:c2:b3:a1:34:7e:fb:1d:fb:70:e8:
40:66:9a:56:f1:c5:a2:22:67:cf:b7:b1:9a:f9:7b:7a:4e:95:
d2:12:c1:cd:9c:cf:38:09:4e:bf:40:bd:e3:72:f2:8f:16:3b:
da:87:d6:e8:cf:d4:7d:93:cf:7b:da:de:ad:12:5a:b2:7c:cc:
be:6d:47:b1:2d:8f:ec:51:87:56:ed:a1:61:1f:41:87:3b:e7:
c7:46:3b:25:f5:17:58:69:26:72:7e:54:43:8e:d2:ef:be:bf:
26:1c:ae:e6:30:02:f7:7b:3b:2d:5c:f4:1a:f6:53:0f:09:2e:
55:18:57:23:ef:be:91:28:c0:36:39:df:a4:b7:eb:84:e7:46:
ee:01:e0:f0:9a:60:2d:70:e4:9d:72:9c:d3:34:88:da:f5:6e:
7a:f9:e1:6a:9a:47:da:30:0c:81:32:cb:6c:5d:c6:35:64:21:
c8:1e:06:e2:b5:d4:76:5c:62:2e:c3:26:c3:c0:b3:78:cf:18:
36:4e:0b:fc:42:4e:5e:46:92:f0:2f:21:30:e7:f0:b1:96:0e:
a7:3e:a2:69:7b:c2:48:e2:de:63:cd:62:81:0d:b9:7b:6b:05:
8e:be:60:23:9b:1a:26:8d:b3:e2:26:c7:e5:80:6c:72:0c:f5:
6d:60:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 04:18:41 2026 by rpki-client