Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
File: eY97H9gCs9xqvXpc2nhqYxHh1j0.mft (raw, json)
Hash identifier: Goxz4UPBNjvtpyzHEE3AYuPudZ3MvZbYjK446ikUGYg=
Subject key identifier: 96:2C:19:CE:64:30:E5:83:97:5C:0E:38:AF:4F:93:5D:FA:4F:C5:F5
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 019EB98FA01243107F9605BC58B11E678DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
Manifest number: 119C
Signing time: Fri 12 Jun 2026 02:00:58 +0000
Manifest this update: Fri 12 Jun 2026 02:00:58 +0000
Manifest next update: Sat 13 Jun 2026 02:00:58 +0000
Files and hashes: 1: eY97H9gCs9xqvXpc2nhqYxHh1j0.crl (hash: c+Zn21JG4sqISde1CrVvpzcErLh+8DPIf6t48LEd8es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:a0:12:43:10:7f:96:05:bc:58:b1:1e:67:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jun 12 02:00:58 2026 GMT
Not After : Jun 13 02:00:58 2026 GMT
Subject: CN=962c19ce6430e583975c0e38af4f935dfa4fc5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:3d:1e:8e:e6:0d:2d:07:f5:fb:8b:55:1b:
5e:61:06:b8:fe:1c:2e:b6:54:c5:6f:04:e5:9e:f7:
fe:23:6c:31:32:3f:8e:c8:46:2d:75:ed:c3:65:55:
cd:0c:9f:5e:bb:d1:50:89:b7:be:d4:1c:f8:b7:24:
34:27:69:2d:43:cf:54:89:10:16:0b:6b:f5:a6:68:
dd:d7:dd:74:66:8f:94:b1:7f:6f:7b:4e:b8:9f:9e:
bd:0d:c6:8f:e2:24:1e:14:1b:d5:31:41:31:1b:10:
11:1e:41:37:de:a0:91:a6:a1:4b:29:3f:80:6a:b0:
1f:0b:53:39:c2:94:13:5d:0c:d4:5c:2e:99:8a:a2:
0c:22:06:8a:cc:f6:90:d3:5f:b9:8d:83:ca:f6:a5:
2e:91:f3:d0:66:7d:26:1e:ab:fa:91:7c:ed:21:d2:
b4:be:93:a8:d0:3e:da:9f:a8:68:58:f3:cc:e8:e1:
82:80:e0:dd:4e:bb:17:00:4f:ac:1e:eb:60:ff:a5:
7a:c0:f9:0f:d8:7c:5b:4e:fa:42:25:a0:6c:5d:af:
cb:a8:8d:fa:e6:97:96:fe:90:11:6d:07:31:b7:f2:
80:2f:7d:17:6a:89:30:0a:0d:92:a2:17:f8:66:90:
5f:9e:e8:63:c7:56:96:f7:52:1f:58:96:0e:1a:60:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2C:19:CE:64:30:E5:83:97:5C:0E:38:AF:4F:93:5D:FA:4F:C5:F5
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c0:b7:96:1f:74:ab:7f:9e:e9:9c:92:7f:71:d4:1d:a0:af:
25:12:57:07:29:36:64:0a:e4:88:72:92:7f:0a:7a:25:84:3a:
5b:4c:66:33:07:2f:ab:d8:98:5a:69:3e:50:11:5f:9d:3e:7f:
26:32:54:da:7e:ea:69:8e:55:ce:b6:61:b9:54:4f:0f:03:03:
0e:0b:de:01:5b:3f:d4:fa:2d:5c:9d:fa:4a:1a:1f:9c:14:73:
f9:e7:77:79:96:bb:52:c6:d4:6a:d8:9c:54:d5:19:57:0a:30:
31:3e:55:b9:91:db:b4:c8:08:c4:a8:0f:52:f3:47:0f:fa:3d:
a3:1a:c2:e8:c6:18:6e:c8:c3:dd:a3:5c:d2:17:c2:3f:90:56:
7a:c9:95:41:68:4f:33:8a:02:e8:c7:64:5d:c7:a2:3a:d9:64:
1d:92:65:e2:5b:40:68:4d:d9:84:bb:e2:de:b6:0a:fa:e5:fd:
74:06:5d:01:e4:24:7e:7c:90:0a:29:6c:63:8a:dd:d6:f4:dd:
88:da:88:87:bc:72:1e:8e:eb:11:12:a3:32:dc:e0:2a:a3:a2:
a9:ed:dc:4c:65:3c:de:b8:04:13:d7:f1:59:ec:6a:36:79:f8:
1d:16:88:55:42:7f:c8:45:b9:9c:76:fc:ea:0e:7f:9e:88:40:
36:b5:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:12:51 2026 by rpki-client