Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: t3cqXSqvRr8ff5AaivkX1wdEBrQ6GjwbnqXje1iSuCU=
Subject key identifier: EC:47:33:7C:D1:69:4A:9B:68:EF:CB:90:A1:26:9B:9B:AF:63:D2:DC
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019EB8B453CDD2582CC67FE7635EABFF3787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 139E
Signing time: Thu 11 Jun 2026 22:01:26 +0000
Manifest this update: Thu 11 Jun 2026 22:01:26 +0000
Manifest next update: Fri 12 Jun 2026 22:01:26 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: hT1noMZS2dUVOeusZSkPIgPZmY23Qz3n5EmnxK4ld6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:53:cd:d2:58:2c:c6:7f:e7:63:5e:ab:ff:37:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Jun 11 22:01:26 2026 GMT
Not After : Jun 12 22:01:26 2026 GMT
Subject: CN=ec47337cd1694a9b68efcb90a1269b9baf63d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:61:1e:2b:68:6b:a7:8e:ee:32:77:fe:f6:
b7:e5:e8:f1:8e:0c:f0:6b:e7:9a:0e:64:e3:45:28:
a4:ae:6a:d6:5f:a8:29:0f:02:30:d8:af:6b:b4:d2:
87:de:4d:bb:95:fe:13:a6:97:7e:f2:52:a8:b6:6d:
d9:6a:02:b8:ab:be:f8:0e:b1:df:6a:01:1d:1a:f8:
f4:7f:17:11:ae:3d:b6:44:66:e2:9a:58:38:c7:5c:
8b:4d:0f:e3:63:1c:b3:78:b4:bd:6f:d6:e7:f2:10:
de:88:5a:e9:8a:d1:68:d0:72:a9:69:83:a3:bf:8b:
fb:b3:5c:4d:b4:e6:2f:4a:89:10:b2:12:90:f9:e1:
c1:71:6e:9a:08:f2:40:9c:fd:dc:66:59:02:06:2e:
1f:c7:b7:c5:03:52:c4:8b:82:04:e5:e0:2c:bf:38:
19:95:68:07:90:30:bb:34:23:2c:00:40:99:19:fb:
29:fe:b7:a6:f9:51:13:b5:e5:be:0a:1d:60:dc:bc:
e7:f3:e7:8e:ee:d8:df:b2:f3:5c:0e:83:c8:06:13:
bc:c1:2c:de:10:fb:25:7c:64:dd:c2:a4:d7:25:29:
e0:fa:d0:0a:f9:13:8e:94:cf:18:02:54:23:04:46:
02:10:d6:81:31:46:d7:3a:07:a7:32:74:49:07:65:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:47:33:7C:D1:69:4A:9B:68:EF:CB:90:A1:26:9B:9B:AF:63:D2:DC
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:51:59:2d:69:e0:c6:6c:3a:dd:85:5d:f7:32:ba:85:45:95:
f0:ce:2d:9a:a3:9c:61:46:58:9b:4b:f9:0a:5c:05:b2:dd:f0:
9e:60:e0:51:a7:5e:69:21:3c:9e:61:a4:ba:30:d9:1d:b0:a7:
5b:08:6c:2e:e8:84:bc:f6:16:92:06:5e:7a:62:92:15:57:0d:
8c:47:32:4b:64:4a:c0:c4:8c:35:f8:d3:d2:91:d3:cf:72:8d:
30:73:35:14:86:60:d0:bd:91:35:59:39:14:28:f8:7f:f1:f4:
23:03:3b:e0:e6:7c:14:76:5a:d1:c0:84:c1:20:74:b8:aa:47:
eb:e5:30:84:db:22:3c:85:fe:48:1a:df:5e:24:fc:cf:77:28:
62:dc:81:43:1e:4f:ce:85:e2:58:6f:e1:b5:83:b2:d1:c2:1a:
9e:a4:c0:94:38:7d:e2:96:20:91:80:97:aa:f3:58:bf:49:da:
70:44:a0:7e:a4:8c:75:16:ba:ce:ba:51:2b:ff:1a:de:a3:c3:
6a:91:2a:0c:b0:b0:ac:76:fe:d9:da:b1:76:45:35:b2:2e:e2:
7c:e4:ff:0d:37:af:96:2b:d2:8e:95:c7:47:df:da:1c:b1:2e:
d8:0b:c0:77:ca:8a:13:da:ba:37:58:72:d2:44:9d:6b:2b:7a:
94:63:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:47:57 2026 by rpki-client