Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
File: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft (raw, json)
Hash identifier: Qp1ZTXqibl+VYeRXbxhxy9E2Ci3OBhBcj/CCYyyPGKU=
Subject key identifier: B7:77:E9:95:F1:96:5E:F0:51:A1:EC:8B:E6:6E:2B:B4:8F:A7:FB:2B
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 019EBA6B002233799ACACC4359A3D966C3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
Manifest number: 16A6
Signing time: Fri 12 Jun 2026 06:00:35 +0000
Manifest this update: Fri 12 Jun 2026 06:00:35 +0000
Manifest next update: Sat 13 Jun 2026 06:00:35 +0000
Files and hashes: 1: J0qpnA35YrWdkNYZVcd9jRpBOBE.roa (hash: XoaXScXKpwP2trg33PIg2cyrDiDDcWR43c4XEEKEOb0=)
2: PN9Auf6nfCjQOBl6zYFAwEaQaC0.roa (hash: gjfumwwkQOIiQ7wTm/N/cWS4x7vvKCrISYqhYWQWJAY=)
3: Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl (hash: Nu7P/Bzs9wwv0VQqSZQDrmpNjpX9YqiGougKvjqz5lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6b:00:22:33:79:9a:ca:cc:43:59:a3:d9:66:c3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jun 12 06:00:35 2026 GMT
Not After : Jun 13 06:00:35 2026 GMT
Subject: CN=b777e995f1965ef051a1ec8be66e2bb48fa7fb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:1f:06:a6:e4:e2:11:ee:93:a9:af:ea:c5:
ba:d5:e3:03:99:d0:98:7b:91:8d:66:5c:26:fb:0d:
65:11:c0:fc:22:1d:7f:48:9c:c5:7c:f5:8c:3d:d7:
45:92:24:4e:c7:1a:62:67:5d:09:24:e6:05:c6:36:
e3:82:20:6d:f9:c3:b5:a9:cb:ba:23:4f:8d:9d:25:
bc:11:b7:a6:12:52:12:ce:0f:45:7f:d3:f8:3f:d8:
75:72:13:09:c4:03:98:e7:30:f8:f9:3d:82:20:c5:
38:0d:24:3f:bb:ed:a7:94:ae:57:97:7e:1e:18:92:
63:65:de:9d:07:ed:b8:46:db:3c:a0:99:aa:46:a6:
85:0e:ab:2d:a3:48:fd:e4:f9:46:c2:4a:63:9e:ad:
6e:c6:40:8d:f6:00:cd:76:8c:5c:0d:64:81:96:2d:
3d:e0:a5:53:b6:13:f8:4b:c8:bd:ec:57:61:09:17:
cc:f2:24:56:ef:95:c7:1b:bb:ec:b0:d1:07:a6:67:
39:3e:61:75:dc:b7:c3:45:c8:c1:1c:cc:84:27:51:
49:6b:4b:61:7b:60:c1:c0:97:4d:c6:1e:93:1c:bf:
ab:77:d1:8e:c6:2c:04:89:dc:4a:46:71:64:90:1b:
28:f5:53:af:41:3f:27:85:86:b9:3a:fe:f6:a1:63:
20:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:E9:95:F1:96:5E:F0:51:A1:EC:8B:E6:6E:2B:B4:8F:A7:FB:2B
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:e8:0a:0e:9c:67:5c:68:0e:20:0b:3f:ff:0e:8b:cd:67:
b5:e7:85:00:47:51:8c:48:40:e9:55:18:36:68:4f:d3:cc:e1:
7c:1a:03:fc:aa:c2:ab:79:15:32:c3:8d:b5:fc:9b:52:d5:ab:
2c:f8:a4:96:94:be:47:8e:24:9f:c5:02:14:5a:1a:ed:62:06:
88:70:73:8c:07:f4:92:b9:53:cf:b9:02:23:40:b7:72:23:87:
fe:ce:21:24:bf:5a:58:0e:80:f9:3b:78:32:8d:9c:25:78:93:
f5:59:b8:4a:eb:40:ab:92:05:31:29:51:70:16:23:14:9a:22:
f5:79:87:75:81:3d:d3:76:b1:8d:51:23:52:31:91:cc:c1:aa:
00:0e:2f:c8:9f:8c:52:63:2d:fb:cd:66:a8:e5:0b:e9:84:a1:
c3:bb:02:da:3a:e3:98:4c:fb:99:13:07:db:ed:1d:aa:2a:b3:
68:41:04:61:25:04:3f:8a:19:66:64:71:96:a2:a8:a7:24:88:
31:92:1a:78:19:86:1f:b5:75:f9:6a:5f:4d:d4:08:5e:d7:ac:
ea:81:5a:f4:5c:93:b9:2e:f4:bc:35:62:ef:60:12:39:19:64:
88:1b:2a:40:82:06:8a:10:d5:66:90:a1:d2:30:db:ba:a9:e8:
06:f4:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:28:25 2026 by rpki-client