Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: tFuoKJV9crCCT/tKePoiL4J54iPVJ4DZIMD2ajEtnM8=
Subject key identifier: 12:CB:06:67:D3:67:BB:81:0A:49:F2:33:11:D5:74:1E:67:8B:F0:07
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019EB7A0B5B6A5343AF409CFD65D05D20E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 1436
Signing time: Thu 11 Jun 2026 17:00:23 +0000
Manifest this update: Thu 11 Jun 2026 17:00:23 +0000
Manifest next update: Fri 12 Jun 2026 17:00:23 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: 6k1X0ZPwcrpt4Tk2qACvKvNjui7Ymc5sDe/Zl1q4B98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:b5:b6:a5:34:3a:f4:09:cf:d6:5d:05:d2:0e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jun 11 17:00:23 2026 GMT
Not After : Jun 12 17:00:23 2026 GMT
Subject: CN=12cb0667d367bb810a49f23311d5741e678bf007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:51:18:bb:4e:0a:e5:d7:f8:db:f9:33:0e:
ca:f8:b5:9c:57:2b:d0:b7:06:35:3e:d8:45:86:49:
2f:58:6a:c1:39:8e:3c:90:90:2a:c9:c6:12:50:16:
88:59:f9:f5:7d:2f:a2:d1:02:63:f2:c5:12:83:b0:
22:2a:14:55:cc:67:8e:01:b4:f4:47:4d:33:1a:0a:
da:66:64:a5:24:d3:54:ff:fe:b1:9e:83:0c:27:30:
79:be:4f:33:b8:87:ff:df:6c:19:52:e2:d2:41:3d:
8c:61:70:47:b1:cf:c1:5c:9d:75:70:01:e7:1e:d3:
81:6a:90:24:1f:6e:3b:95:51:45:3a:b3:c7:3c:db:
a7:f8:3b:b8:67:f0:3e:dc:ee:e5:b3:42:fa:e3:29:
f1:26:83:a8:6a:48:ac:67:dd:ca:09:81:76:16:3a:
40:9a:7f:e4:90:8f:8f:cc:98:af:f9:f2:89:04:94:
e4:93:8e:26:53:f3:fb:ab:8e:f5:b6:37:bd:6a:bc:
d6:f9:71:c3:96:0d:c1:7b:8f:08:d6:c2:8d:a9:59:
7d:d4:09:7f:24:35:a1:b2:fb:77:81:d0:69:c1:f7:
b5:1f:2e:3c:23:2f:1f:d5:d6:aa:e5:d3:d4:4b:7b:
5f:c4:f5:8e:b9:7d:3a:92:b5:b0:d5:0e:a0:4b:eb:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CB:06:67:D3:67:BB:81:0A:49:F2:33:11:D5:74:1E:67:8B:F0:07
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:5f:ac:31:33:32:ba:e5:47:80:26:10:a7:07:66:18:64:e2:
1e:82:fd:ac:e6:1d:3d:f0:f1:25:b9:69:96:55:16:49:cd:90:
5b:9b:e8:e5:88:6c:c6:ee:dd:29:9f:a5:48:40:3b:12:8b:ab:
42:1a:ba:77:36:d1:08:94:f3:05:60:29:4c:12:a6:0e:06:20:
42:c7:dc:26:69:29:16:41:2e:25:e2:51:4d:28:47:04:dc:8a:
cb:94:4c:43:c7:8a:60:4b:3f:23:b2:fb:9d:3b:ae:5e:cf:cd:
6d:f5:e9:5f:1f:15:2d:d8:af:96:dc:4c:7b:98:48:7c:5e:32:
35:ff:d1:b1:8a:55:75:2b:78:88:21:a1:24:02:aa:68:5b:7d:
1d:fe:79:4b:ca:d8:cf:21:92:1f:fd:ea:18:fb:11:18:88:34:
a8:17:99:0c:24:6e:98:30:c4:ee:03:b8:9c:88:6f:21:78:56:
a9:ff:42:1c:8d:4b:6b:6d:cd:28:f4:c0:e7:05:c8:e3:03:52:
6d:68:43:df:7a:7a:74:d0:57:79:2a:6d:49:47:06:a3:47:ef:
d7:ca:09:24:a4:f9:ee:3e:f4:83:7c:b2:44:4d:e0:0a:47:b1:
f2:c0:a4:33:a2:70:93:ac:a8:44:72:b2:04:08:c0:64:82:b3:
2c:70:02:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:23:59 2026 by rpki-client