Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: btQ1A1JUhq6oG1XFsDAe3ZZ+6t61ecLjpe4KRPiCBtM=
Subject key identifier: 98:11:84:05:96:1E:32:E8:A1:1B:A4:07:FE:41:9F:9B:B4:A6:A5:D9
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019EB76A038A843CEB9E3E19855F746695C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0BA5
Signing time: Thu 11 Jun 2026 16:00:38 +0000
Manifest this update: Thu 11 Jun 2026 16:00:38 +0000
Manifest next update: Fri 12 Jun 2026 16:00:38 +0000
Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: NVYHDRK74J3ZwGyxBgBa8HaDIt58MbRyZTpPPJqIIos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:03:8a:84:3c:eb:9e:3e:19:85:5f:74:66:95:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Jun 11 16:00:38 2026 GMT
Not After : Jun 12 16:00:38 2026 GMT
Subject: CN=98118405961e32e8a11ba407fe419f9bb4a6a5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:5b:78:3e:b6:b0:8a:36:35:5e:e2:8f:d9:
85:4a:ee:cb:81:8a:03:ed:b2:ec:94:ca:d7:cc:cd:
21:13:03:f5:39:90:cb:07:d0:4a:5d:32:a6:07:52:
bb:84:2c:05:75:9f:05:d6:3a:99:40:92:18:ee:61:
18:56:64:83:3b:13:f2:16:49:36:52:06:e4:6a:96:
a6:7b:39:4d:57:e3:3b:cb:7a:53:95:41:8c:6a:2f:
ad:16:98:c8:c7:6d:e8:f7:f6:60:01:8a:c9:f2:a2:
0f:16:34:5d:3c:58:12:c4:95:78:d2:c8:b8:e4:e9:
04:ac:2c:a1:57:2e:a3:fd:20:7a:e0:63:24:ec:6f:
18:75:5e:10:47:a4:e8:56:3f:86:92:bb:a0:85:ec:
bf:14:e6:bf:fd:ed:58:63:69:da:da:33:20:93:80:
a9:66:33:9f:d2:8c:d2:17:02:12:22:64:e3:8f:e1:
e9:ab:33:28:40:57:18:ae:96:e1:99:ee:e0:98:0b:
c5:35:68:ba:a0:67:c3:69:09:89:b5:ec:b2:f0:01:
ed:cf:df:e0:62:f0:fd:31:02:4f:dd:91:7b:89:c5:
bc:be:45:13:fe:73:23:51:f1:8e:52:cb:c7:df:97:
d0:49:7c:58:2d:99:6a:85:fe:01:de:d2:09:73:3b:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:84:05:96:1E:32:E8:A1:1B:A4:07:FE:41:9F:9B:B4:A6:A5:D9
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5a:24:f9:4a:14:68:2d:3a:d6:2e:14:9b:fc:2b:86:a7:5c:
86:f9:83:22:ce:c3:d2:97:2f:32:ac:74:73:ed:12:f5:a5:e1:
40:52:47:8d:61:80:b6:60:5f:c8:e3:d3:f1:72:e7:be:80:70:
e9:97:41:fb:70:e5:2c:cb:98:03:be:3d:d8:6a:02:ca:47:36:
ab:75:10:61:1d:f6:d9:30:5f:5f:5b:6d:63:63:f9:60:2d:1d:
4b:f4:e7:82:c0:a0:1e:c9:c4:75:d0:7b:af:0b:7c:f4:81:4f:
d1:f0:dc:5f:17:55:56:fc:d3:23:29:92:5d:7f:7c:40:ce:db:
70:3b:98:91:19:58:80:0b:75:1b:b7:75:26:06:f1:c8:aa:bf:
5f:09:c5:42:49:ff:27:c2:3a:fc:71:dc:99:af:5d:e7:f8:cd:
35:a1:be:f3:1f:87:8f:ef:37:3f:76:29:69:0a:cf:4d:aa:70:
ed:93:d9:46:d0:bc:ea:23:48:2c:bb:64:d9:fb:dc:b9:10:22:
e9:19:3e:fa:04:2c:3e:5c:89:a5:78:36:10:e1:4e:7a:d4:f7:
a9:4c:96:41:6d:e3:8a:70:03:4f:25:c8:63:8b:29:b8:d9:92:
c5:20:ab:26:ce:76:a3:11:57:de:7b:29:55:61:1a:9b:43:73:
7b:be:76:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:02:59 2026 by rpki-client