Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
File: y02MQeEiyIHZNtkdWwLb2GoucKU.mft (raw, json)
Hash identifier: jLCmNzG7NZN0kAt0lYIFALTvnQM5DIvFIXJd7PuxGQ4=
Subject key identifier: E2:60:92:25:E9:CA:F1:79:C8:A5:D4:8B:E2:43:31:81:CD:1A:6F:33
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Certificate issuer: /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial: 019EB98F175352364DA6BE157EEFC65ABEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 02:00:22 +0000
Manifest this update: Fri 12 Jun 2026 02:00:22 +0000
Manifest next update: Sat 13 Jun 2026 02:00:22 +0000
Files and hashes: 1: iEbK2UIcSgblBPFEqOrlOQefJIM.roa (hash: vnaXCkdmexBSxEoO84GDkmVJcEZxlob0ZmZd5HSj0RU=)
2: y02MQeEiyIHZNtkdWwLb2GoucKU.crl (hash: p6ausPC3bd4x4obV+p8XAfPgNxUwbBuYdlgfnC6gKHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:17:53:52:36:4d:a6:be:15:7e:ef:c6:5a:be:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Validity
Not Before: Jun 12 02:00:22 2026 GMT
Not After : Jun 13 02:00:22 2026 GMT
Subject: CN=e2609225e9caf179c8a5d48be2433181cd1a6f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2e:c1:db:96:e5:5a:d1:87:42:00:d5:84:3e:
d0:03:06:ca:af:9d:b9:42:fc:6a:59:59:1c:62:bc:
32:1b:11:ed:55:82:8e:48:44:fb:64:28:5a:4b:b2:
48:f0:3b:dd:7f:f0:f9:21:c3:27:3f:60:2a:e6:47:
af:2c:0b:4b:9c:bc:b2:df:53:e4:5a:86:c9:9f:26:
20:7b:f4:5a:4f:ef:5c:ac:79:3d:67:f5:56:08:5f:
55:05:2b:01:cc:63:01:7a:f0:89:fa:8a:52:90:e0:
5c:0a:98:72:59:82:c0:d4:d1:fa:6d:17:ef:e9:98:
2e:a3:21:f6:7d:07:83:b6:a0:43:c0:50:3b:00:fe:
75:5d:f5:82:53:7f:9b:1d:33:cc:da:22:34:ae:d0:
0f:3a:23:41:49:db:81:66:1c:4f:73:01:39:ef:f4:
46:a1:89:f2:94:97:aa:c5:f9:ff:54:1c:87:a3:a7:
64:54:b6:df:3b:0f:84:7f:33:64:aa:6e:8b:c8:3c:
c7:fa:d9:15:dd:7d:50:b7:63:93:c9:51:4d:d5:1e:
85:55:9f:a3:3b:ad:d0:ca:39:58:be:b6:4a:7e:30:
df:de:3b:44:36:a5:5b:0c:1e:13:a5:df:73:04:75:
7e:a9:ac:36:d9:d5:a2:71:2d:c6:ce:41:c6:27:12:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:92:25:E9:CA:F1:79:C8:A5:D4:8B:E2:43:31:81:CD:1A:6F:33
X509v3 Authority Key Identifier:
keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:b6:02:cc:ce:42:6c:c5:77:d0:19:2d:7c:13:88:e3:7e:
d8:20:7c:98:51:4d:22:ab:c2:4f:df:1f:58:8f:85:b8:0d:8e:
6a:ac:83:c5:1c:33:ca:99:02:97:a2:85:7f:9c:c3:e6:62:4c:
43:69:34:72:d7:9c:04:06:7e:7a:02:58:d6:04:70:00:c3:65:
3e:62:d4:a2:90:cf:8c:43:07:d2:55:dc:a1:9d:22:a2:cf:fd:
3e:55:f0:1b:bf:7e:82:d0:57:32:db:3c:7c:aa:e7:f0:13:93:
67:eb:73:5a:99:dc:59:9c:30:e4:36:e4:b1:47:58:22:1d:3a:
65:ba:37:b3:37:35:06:21:e2:05:15:f1:96:37:ab:32:95:59:
9e:83:56:69:82:dd:af:1b:cd:b7:d2:de:db:13:86:95:c8:8a:
ce:01:dc:0d:72:b0:20:b1:9e:3a:bc:36:22:c4:01:f3:c1:4c:
9b:bc:c0:5d:71:49:98:12:70:93:f6:92:2d:83:dc:48:a5:a7:
0e:27:38:2c:7b:3c:97:44:10:3a:66:6d:b7:f6:f3:cc:af:a3:
f9:ee:53:c2:50:4d:40:75:ae:88:3d:06:a8:c3:78:c9:5a:a5:
88:95:f8:da:78:10:58:21:9f:f7:cd:de:7f:08:a7:25:e5:5d:
7a:43:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:09:33 2026 by rpki-client