Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: 3PeppS1Tdmpto5oo7kWpwwmWiy0MM9Wp9G843hI9fB0=
Subject key identifier: B7:3B:A2:10:D5:A0:7C:46:8A:41:8F:3C:F3:24:CC:47:AB:DB:F4:5C
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 019E9C60EE96701368DA6589BEB1FCA01DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 0103
Signing time: Sat 06 Jun 2026 10:00:58 +0000
Manifest this update: Sat 06 Jun 2026 10:00:58 +0000
Manifest next update: Sun 07 Jun 2026 10:00:58 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: oSbwJ4N/wle62PqMxhy+z29Q2Dj8U6PplfJIktwHZCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:ee:96:70:13:68:da:65:89:be:b1:fc:a0:1d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Jun 6 10:00:58 2026 GMT
Not After : Jun 7 10:00:58 2026 GMT
Subject: CN=b73ba210d5a07c468a418f3cf324cc47abdbf45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:34:4c:68:dd:68:44:c1:f2:f1:5d:e6:b7:
d7:34:e0:cd:d8:e2:ef:41:0c:e3:df:0b:aa:38:a8:
88:8f:14:b1:07:fa:ed:5f:05:86:87:e0:84:6e:70:
72:a6:4b:c2:e3:96:64:32:d1:c5:3a:54:20:cb:60:
44:e9:d8:27:cc:5d:ad:5b:dd:55:42:11:5a:28:e1:
2f:e5:a3:0f:5e:7f:cd:43:f8:70:57:27:90:19:71:
17:57:31:66:4a:2a:4d:4d:89:e2:46:42:ee:a2:36:
9c:6b:45:cb:5b:88:71:19:60:b8:28:ed:a3:1f:05:
fa:39:21:fa:b8:91:5f:67:9a:bd:63:51:ce:11:b0:
5c:93:2b:38:25:70:d5:43:03:38:3d:3f:2e:e8:98:
f1:5a:61:6f:ac:78:b5:a4:22:0c:08:50:b2:ae:37:
db:2b:12:42:b2:1d:ee:b5:86:88:01:8e:7a:6d:d4:
94:53:31:9d:9a:5a:eb:8a:90:7a:7e:94:d0:a2:69:
49:5d:1b:a7:98:df:23:67:a3:3f:ba:f9:be:13:a7:
c0:dd:0c:91:7c:dc:c5:cc:b7:8f:32:42:f5:cb:87:
63:59:ab:ed:08:1e:a2:2c:8e:8b:6e:fd:b1:0a:75:
1b:2d:e1:4d:6c:5f:ca:2e:f8:d6:12:b4:30:dd:9f:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3B:A2:10:D5:A0:7C:46:8A:41:8F:3C:F3:24:CC:47:AB:DB:F4:5C
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:20:2e:e6:11:72:aa:49:1e:0e:77:17:bc:48:7a:4b:99:5b:
80:b1:52:93:2c:8a:43:f9:1d:b5:16:d2:35:c1:3a:9a:c1:71:
36:be:05:2a:0d:ec:46:71:11:70:1d:2d:77:7a:a2:57:fb:06:
40:39:b9:bd:96:82:fc:8a:0b:73:5c:aa:6e:af:e3:01:dd:31:
e1:2a:01:60:f7:b0:80:a8:a5:d5:42:b9:f9:35:64:a7:c9:55:
1b:75:2f:65:26:d8:be:fc:21:f3:71:e1:c8:be:60:81:e6:c9:
d7:2b:7b:49:e5:40:cd:75:be:61:f7:8a:ae:27:8a:7b:12:f0:
1d:94:c6:2f:02:63:9e:72:d0:a5:b1:c2:02:6b:81:ff:bf:03:
f5:65:7d:ac:e2:84:ba:29:aa:d0:da:c8:13:b8:04:ee:87:b5:
9a:c6:0d:71:30:63:4d:ee:85:fc:d7:1b:0e:8d:d6:1f:99:6c:
72:55:56:38:86:8c:ef:9d:fe:e0:22:da:f9:51:0a:3b:dc:ea:
f5:7d:f3:69:87:2d:ca:32:c5:6a:75:3d:8d:5b:7c:ec:83:91:
91:27:cc:86:30:69:62:90:98:f2:cb:8f:f4:c1:a9:08:db:00:
71:ac:e3:a7:de:00:1c:60:98:9b:7b:75:b7:d6:fa:76:46:62:
04:d2:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:51:26 2026 by rpki-client