Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: UyycLRPod0GGS14AxYWu/E/Jz11cm/S0V2qyAfSOtSw=
Subject key identifier: F1:20:88:5A:31:67:45:66:2F:0C:73:3D:11:CF:B0:03:14:18:F5:90
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019EE82057EF87A2218EA0E61B224EF7E18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 09C0
Signing time: Sun 21 Jun 2026 03:01:34 +0000
Manifest this update: Sun 21 Jun 2026 03:01:34 +0000
Manifest next update: Mon 22 Jun 2026 03:01:34 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: 8iIyVvsxEGW3vIBQkAOrDMEcIPPmkAReB0Jnfr1EL7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:20:57:ef:87:a2:21:8e:a0:e6:1b:22:4e:f7:e1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Jun 21 03:01:34 2026 GMT
Not After : Jun 22 03:01:34 2026 GMT
Subject: CN=f120885a316745662f0c733d11cfb0031418f590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:01:f5:2e:aa:1f:ac:45:a1:6f:25:7f:21:
8c:21:46:73:52:94:9a:d6:ed:1c:07:b8:77:f8:03:
33:97:17:47:6b:c3:e1:07:6a:8f:64:cf:c7:6c:ec:
d6:13:7c:ef:b1:70:be:42:2a:f7:52:55:fd:a6:03:
f9:b6:98:8e:00:35:9d:0d:25:ad:a9:d2:4d:7a:b7:
2d:a1:fe:98:81:06:b0:7e:ab:bf:34:b9:27:3e:92:
09:09:e0:50:73:52:e8:4e:e6:6e:f0:4f:48:55:fd:
d9:88:3a:53:45:b2:67:71:bf:aa:34:3a:af:9a:25:
da:7c:80:17:2c:e4:ca:8a:0c:6f:d4:aa:5b:bc:fd:
8f:20:ab:55:96:7a:4c:29:c3:79:8c:63:25:5f:ee:
11:ae:69:43:73:ed:dd:9e:eb:c0:19:e6:aa:33:7d:
62:ee:6a:11:98:7e:3c:db:9f:de:00:b3:64:7a:74:
34:9e:2b:1e:0c:99:c0:79:3e:50:cc:c3:c3:1f:da:
e2:d6:c2:99:dc:d0:71:06:25:54:c3:45:b3:1c:67:
42:8f:6d:2d:2c:4a:d6:fc:41:cb:a1:f4:de:de:a0:
35:c0:b3:78:f3:fe:aa:64:6f:c2:7f:96:6c:4b:7f:
83:cc:d3:90:58:29:e6:bc:d3:34:85:25:a5:98:33:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:20:88:5A:31:67:45:66:2F:0C:73:3D:11:CF:B0:03:14:18:F5:90
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a3:b1:56:d4:a7:bc:38:5c:79:f5:67:78:29:04:47:09:d6:
29:b9:c4:83:e4:17:75:85:e7:2c:d0:af:9a:69:90:a7:7f:f0:
ba:7b:46:5f:fc:b2:ce:2a:0c:9e:8a:82:e7:55:45:7c:c0:0b:
9b:c6:d8:bf:07:ea:13:7c:94:71:16:9b:14:41:8b:d7:6d:91:
e8:24:c3:4e:76:af:80:f6:ca:fc:3b:c0:53:26:74:14:93:d3:
67:87:8d:56:a5:45:57:f5:1f:b4:9f:40:a6:e1:3a:df:2e:76:
bd:12:0d:46:4e:7f:b8:b5:6b:ab:29:4c:5e:62:4a:a9:12:e2:
49:36:50:81:20:3c:78:74:36:d7:b6:eb:29:41:99:87:82:4a:
31:7d:38:46:06:56:77:6c:4e:99:f7:24:df:b4:70:8c:fa:4b:
72:7f:b4:98:02:d1:42:c8:8e:09:9e:b7:0b:4d:f9:31:f8:5b:
e8:d1:f8:f1:54:75:28:83:76:2f:e9:65:f3:f9:9f:6a:4f:44:
db:c5:05:b4:41:83:b4:a3:0a:29:62:e2:98:4f:aa:1a:e5:1b:
95:cb:9b:78:3b:4a:04:46:90:95:91:39:8a:ee:73:be:b8:27:
65:b4:ba:c8:fc:59:bd:48:74:c3:fc:1c:b5:da:79:40:90:65:
2e:ee:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:13:29 2026 by rpki-client