Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: KDQFXcsWX8e84Ck3dvi33DYyl/MddJIoZEtWs/AO2Ws=
Subject key identifier: AE:23:94:3A:B3:F3:3B:0A:E8:CC:A5:1F:59:44:6D:E8:90:E4:67:CC
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019EB68E2D62FE81E52DA9C2B7CC434E45C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0CC5
Signing time: Thu 11 Jun 2026 12:00:31 +0000
Manifest this update: Thu 11 Jun 2026 12:00:31 +0000
Manifest next update: Fri 12 Jun 2026 12:00:31 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: K6NIIbumwoeIJ93VTbwUFidCsvqsW3vprhrsm6XYvZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:2d:62:fe:81:e5:2d:a9:c2:b7:cc:43:4e:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Jun 11 12:00:31 2026 GMT
Not After : Jun 12 12:00:31 2026 GMT
Subject: CN=ae23943ab3f33b0ae8cca51f59446de890e467cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:af:79:9d:b3:ed:84:e4:31:6b:0d:c6:80:
e9:ec:e8:c1:69:f8:d7:78:ac:65:2d:bc:54:d1:55:
c2:d3:7e:b6:7c:b8:a6:74:40:e2:f2:fa:4c:20:3d:
66:28:ef:b4:eb:5a:75:00:46:71:c2:96:c9:43:a3:
31:de:18:98:50:7d:d4:fa:c5:6a:9a:da:9e:96:b2:
fe:24:cb:95:3a:9e:27:6f:73:0a:d7:14:fa:c5:16:
1a:91:e6:42:90:b6:03:a4:2c:20:4a:d7:ac:e5:b0:
fb:10:c6:ed:8f:e1:37:3a:1f:11:9d:a5:8c:40:b0:
47:88:3d:e4:09:b0:0e:1b:ef:63:22:0b:fe:79:85:
f1:ea:ae:ba:fd:5c:cd:cc:fb:94:c1:c2:00:b3:3e:
72:78:6a:e2:f5:fa:17:63:b6:6c:3c:40:99:6e:07:
1c:79:87:e0:6a:65:0d:7f:79:f9:55:bb:fa:ae:e3:
94:fa:f8:45:5a:19:db:45:7b:41:70:b2:2c:55:8f:
90:02:cc:15:ed:b6:ac:3d:d3:a4:d0:68:41:04:bf:
81:a6:dd:77:50:a7:68:2c:9e:f5:93:0c:0a:14:1d:
c5:98:a9:81:e2:50:d0:0f:f4:82:b4:fc:e1:5b:c8:
65:a1:90:e1:df:b1:a2:e6:07:30:c0:38:41:4d:97:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:23:94:3A:B3:F3:3B:0A:E8:CC:A5:1F:59:44:6D:E8:90:E4:67:CC
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:42:91:19:dc:cc:bd:69:3c:cd:81:63:c7:40:bf:05:89:9e:
2a:ea:7c:ac:99:22:7a:12:26:28:d3:16:27:60:b0:94:33:5f:
fe:79:06:7d:76:bf:e4:2a:5e:ce:d1:3b:5f:56:24:fd:cd:d1:
4f:2d:7b:00:53:cf:b2:dc:8b:2d:e8:b8:3a:7f:71:63:3d:3f:
ed:23:44:9c:91:2e:29:5b:8c:95:d9:89:8a:ff:7b:82:2a:05:
f4:71:56:e4:30:a2:f9:e3:9e:eb:6c:a3:33:2c:8e:2f:e5:e5:
e2:9b:6e:68:67:73:de:14:4b:50:fe:64:f5:e3:9a:47:90:72:
9c:4d:c3:df:b0:71:8d:19:69:a1:79:d9:1d:80:57:84:0d:ee:
ce:ac:19:de:51:f9:9e:5b:06:9d:11:eb:78:6c:1c:a8:cc:bb:
17:ad:69:16:2d:8b:1f:81:ee:e9:a9:a5:69:a5:fa:32:5f:6f:
1e:89:f8:b2:38:c9:5f:35:cc:88:e4:cb:0b:d0:ca:c7:14:1d:
0c:46:15:76:63:6b:04:74:51:30:d9:b1:71:ec:a9:eb:a8:00:
68:33:43:d8:a8:53:62:4c:a5:2a:65:cf:81:2c:02:52:55:fb:
f9:93:35:73:7f:ea:4e:33:de:d4:24:0f:47:ed:b5:8e:f3:1e:
26:ab:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:10:50 2026 by rpki-client