Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: 0kAnOIxaOJpCEW/q5qZgbI0C38yjZc9ZFoVSTPDaRG8=
Subject key identifier: BB:19:99:0E:AB:57:03:B4:2F:B7:D6:E8:DD:F7:98:EB:4B:89:7E:18
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019E92139EB3FDE0127660CC1536FEEF3ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 08E5
Signing time: Thu 04 Jun 2026 10:00:19 +0000
Manifest this update: Thu 04 Jun 2026 10:00:19 +0000
Manifest next update: Fri 05 Jun 2026 10:00:19 +0000
Files and hashes: 1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: VEHfUu5jXIk3c3Yf1I8ROQ4tXay9QLkYoZTdYGeytNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:13:9e:b3:fd:e0:12:76:60:cc:15:36:fe:ef:3e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Jun 4 10:00:19 2026 GMT
Not After : Jun 5 10:00:19 2026 GMT
Subject: CN=bb19990eab5703b42fb7d6e8ddf798eb4b897e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:75:3f:48:8e:32:3a:ae:da:38:d4:57:86:
b2:ef:2a:f4:78:00:4c:85:88:94:13:c0:a2:22:eb:
e2:da:e7:9c:31:c3:c1:65:7b:5a:04:b8:53:d4:e4:
05:95:c1:c6:33:74:ee:ec:4d:09:32:92:19:97:fa:
14:74:4a:27:3d:20:a6:b5:eb:f0:07:0b:c9:68:d0:
e1:44:55:4f:ab:7d:4a:99:78:db:de:93:74:a9:5e:
66:1a:f8:6b:95:a5:19:81:f1:8f:72:71:aa:1e:a6:
5f:3b:54:c1:66:87:3a:d7:6d:7e:4c:dc:8e:18:34:
89:01:d0:82:a7:30:cd:a2:cb:bd:40:57:e2:f7:b6:
c7:07:ca:46:5f:c1:f6:ef:3a:18:44:40:f6:eb:2e:
bc:9d:81:9e:99:af:9e:dd:bc:47:ff:2c:3d:9f:fb:
98:ec:65:87:30:3c:2d:9b:ef:95:c4:5b:56:3f:fd:
19:41:9e:68:ff:0b:d8:02:2b:73:74:aa:54:7a:42:
40:61:38:4a:71:69:72:8b:60:2b:48:8b:75:27:bd:
5c:58:c3:d3:c4:bc:69:b3:a0:8b:a7:0c:65:95:13:
1e:e4:67:b8:f3:92:a4:02:b7:8f:e9:4b:6e:4e:a9:
69:97:20:63:d0:de:57:8d:af:13:76:ce:e0:82:48:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:19:99:0E:AB:57:03:B4:2F:B7:D6:E8:DD:F7:98:EB:4B:89:7E:18
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:48:35:0f:ad:3d:43:71:e5:4f:fa:71:fc:bf:f7:24:64:45:
90:71:7e:c1:15:c3:3e:62:d5:c6:78:b9:19:d5:af:40:e6:32:
7c:53:19:79:4f:36:23:ee:c9:f0:c6:c9:85:ee:51:d6:12:64:
5f:67:25:f0:e5:a2:b1:4a:97:7c:27:05:1b:41:e6:20:57:ab:
f0:68:45:86:da:50:7c:dc:d5:c6:9b:c9:1b:7a:37:30:05:6d:
71:ed:57:49:74:91:d2:a7:2f:3d:8d:6c:48:45:55:7f:77:de:
78:1f:1e:56:35:a1:9b:7c:ec:44:96:b6:8a:60:1b:b7:26:24:
b6:b8:1f:f0:b4:66:32:04:39:24:7f:d9:24:99:e3:81:83:f1:
d1:2b:04:a7:5c:44:2b:58:e0:d3:b1:03:1b:7a:64:28:41:62:
f0:a8:28:ec:a4:87:fb:da:41:a8:c6:bb:27:15:eb:7f:0d:c5:
9f:c2:94:c7:57:5f:81:98:13:22:93:86:50:20:ea:c9:7c:00:
36:03:2d:b3:55:36:48:2a:77:c5:f4:75:c8:f1:3e:96:5a:f4:
b3:de:7a:63:12:07:61:99:b3:0f:a4:8c:39:92:9e:cd:fb:d7:
f5:3a:6a:c6:32:17:0b:8e:0a:cf:eb:7b:fc:11:74:06:1c:9b:
ef:2e:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:14:59 2026 by rpki-client