Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: hFiBONrjqr7MWEKK4MTgi0AZaYUgs29PaGA03WBBd74=
Subject key identifier: A8:0C:4F:0B:33:8F:8E:00:D2:54:6C:B8:C4:FB:8E:91:71:C0:AE:BC
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 019EBB470F8E5737007CC218BDD153A821CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 12F7
Signing time: Fri 12 Jun 2026 10:00:56 +0000
Manifest this update: Fri 12 Jun 2026 10:00:56 +0000
Manifest next update: Sat 13 Jun 2026 10:00:56 +0000
Files and hashes: 1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: Qw4TBrXLDsCQGRHuG1+DVh284zKNTeKWH/P9Zsx0YzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:47:0f:8e:57:37:00:7c:c2:18:bd:d1:53:a8:21:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jun 12 10:00:56 2026 GMT
Not After : Jun 13 10:00:56 2026 GMT
Subject: CN=a80c4f0b338f8e00d2546cb8c4fb8e9171c0aebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:d7:ad:2b:10:30:43:b2:3b:7e:09:58:1f:
40:33:41:2a:ee:ef:90:33:28:d1:b9:d1:16:5f:73:
80:68:10:9a:0f:e1:f2:6b:9f:8f:f6:b1:ee:0c:72:
36:2a:9b:75:2e:44:f0:93:e7:30:9f:5b:69:36:25:
aa:f8:a2:a1:9a:a5:a9:f7:a4:f9:eb:06:40:5a:0f:
7a:36:a4:7f:a2:fe:b6:3b:42:48:42:8e:68:2e:db:
4a:ca:c5:37:64:9f:2c:dd:9a:f0:0d:7d:bf:a3:0b:
95:9b:8e:2c:d7:ac:87:df:8b:58:c6:7b:d7:65:d1:
fe:98:4b:e5:ba:a0:33:5d:7c:4d:c1:b4:16:26:bd:
f2:c1:e9:31:58:2b:e7:7b:5f:f1:29:af:3c:63:d2:
65:cb:ba:24:27:ef:4f:32:2e:30:57:e6:c7:54:0c:
08:af:d2:2a:2f:f0:97:51:a2:03:bb:c2:bb:dc:aa:
9f:43:68:63:78:b0:6e:8d:05:b3:e4:22:84:1c:04:
d8:83:7f:17:86:89:2e:30:8d:f7:ee:12:ce:3d:d7:
1f:7f:73:2a:36:ae:8f:8b:4a:7a:4b:b8:27:bd:c5:
c4:86:98:ec:ca:3f:a0:04:53:68:b6:e1:dc:53:8a:
4b:e6:79:91:9f:c5:7c:79:af:19:4c:ba:83:a9:7a:
c4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0C:4F:0B:33:8F:8E:00:D2:54:6C:B8:C4:FB:8E:91:71:C0:AE:BC
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:44:e9:da:11:52:fb:3e:f7:b9:2a:f4:bd:83:c6:c4:6b:c9:
40:6c:b7:73:f1:0a:11:95:b9:b2:a6:60:48:00:3e:5c:c4:b7:
f6:90:1b:39:e7:c1:51:0c:ac:b6:d2:44:5a:ca:77:78:f7:52:
c5:9f:bc:47:52:8c:f9:15:6f:d3:62:3e:03:0c:e2:0b:76:58:
de:55:9c:72:f0:ba:a5:7a:0d:d2:8a:a1:8f:d6:7c:2f:17:9c:
43:55:42:25:af:34:74:90:46:37:06:7e:f5:c4:89:c0:f2:c0:
36:73:a3:90:e0:2c:cc:24:1d:d6:1d:ce:ec:99:16:23:c0:fe:
7a:a8:99:a5:d4:28:d3:b5:40:22:22:31:af:7a:6c:84:ea:c4:
48:16:5f:c6:57:69:57:6b:d2:a9:ee:7d:aa:a9:ec:42:35:50:
3c:ff:5f:70:31:05:a0:eb:c8:1d:69:66:e0:7c:3b:aa:e9:f1:
d8:3e:3c:38:02:73:33:c9:4c:56:8b:55:17:11:93:96:b4:cf:
74:22:fd:6c:2a:29:fc:32:75:24:0d:e5:2a:f1:7b:46:4a:11:
55:99:59:78:59:05:27:20:88:c9:96:9e:17:96:4c:24:d7:0e:
69:37:9f:cb:56:13:29:9b:90:d4:72:92:08:43:d2:d0:5b:2f:
77:c9:0e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:26:51 2026 by rpki-client