Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: 3vIF76comxSRa02B9lPhMI4VuT/Hz2aX2q+9VfhdVSg=
Subject key identifier: 05:93:AC:2B:F5:81:C5:69:6B:83:5B:0F:4E:44:D8:67:58:BE:98:EC
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019F1453C3D7A532E25D77612246A79BFF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 17:01:01 +0000
Manifest this update: Mon 29 Jun 2026 17:01:01 +0000
Manifest next update: Tue 30 Jun 2026 17:01:01 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: QC2B9nx+u+2P/MOvjY9S3dzc1NIpsIMUEelGyeXBznQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:53:c3:d7:a5:32:e2:5d:77:61:22:46:a7:9b:ff:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Jun 29 17:01:01 2026 GMT
Not After : Jun 30 17:01:01 2026 GMT
Subject: CN=0593ac2bf581c5696b835b0f4e44d86758be98ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:c4:ae:97:99:7f:55:42:71:5b:af:4a:29:
3a:31:8a:c2:6a:ff:a9:1c:40:ad:d4:c4:88:e9:6e:
9a:69:64:67:77:74:a3:4b:7c:bb:1b:9a:da:e2:8a:
f5:b7:12:3b:18:ef:a4:89:a8:ed:dd:5f:36:3e:5f:
cd:51:7f:f0:f2:f9:48:3d:d2:e8:da:55:5f:a9:98:
bb:b6:0d:66:6e:a6:2a:b2:63:82:94:83:6f:9b:4b:
f5:9b:85:e5:c2:93:a9:9c:c0:52:72:45:6a:09:85:
af:7f:a8:62:61:b8:ec:d2:7b:8e:bb:ff:bc:f7:7a:
20:20:aa:0b:29:d8:ff:fe:6c:6e:8c:59:50:3c:79:
6e:c7:e6:e0:b8:5d:59:97:c4:8c:9e:06:23:28:42:
8e:76:65:a4:22:ce:6c:d7:dc:9f:5c:27:1d:26:65:
47:02:6c:a1:ab:21:fe:a8:43:16:bc:3d:f0:e8:60:
89:14:56:09:fb:dc:bb:2c:b4:2b:0f:5c:2b:3b:9b:
99:e4:2c:c1:6e:89:5d:e7:4d:33:29:8b:a6:c6:a6:
ae:09:af:26:6e:79:f6:f1:b0:cf:67:b0:bd:7e:93:
5c:41:2d:24:63:e5:ef:3f:f1:9e:71:3a:0c:f2:a9:
b8:63:b1:79:c9:9e:c0:4d:cd:81:73:61:89:7e:58:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:AC:2B:F5:81:C5:69:6B:83:5B:0F:4E:44:D8:67:58:BE:98:EC
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9b:5f:e1:8c:9f:0d:91:8f:3c:78:23:06:c3:35:b2:96:93:
02:75:1e:8a:2d:65:17:ee:fb:87:35:a1:69:1a:15:74:ab:85:
de:32:8e:6d:c0:95:30:74:ae:d0:5f:33:79:36:a0:0f:67:75:
14:e0:cb:ea:40:91:69:5a:02:13:b5:2a:4b:84:96:0c:96:60:
7f:d0:c5:39:a3:80:a8:e0:9b:7a:2c:f1:73:9e:c0:10:a2:40:
aa:bc:53:e3:cd:fc:d0:e1:47:c4:0b:6e:01:7c:e3:ab:d8:51:
8f:83:d4:f1:d7:11:3a:81:d6:a1:dc:e5:18:aa:91:0e:5a:08:
b4:36:93:eb:18:ea:8f:50:35:13:75:10:ad:fa:51:a3:a1:dc:
83:f5:82:54:d7:a3:2d:2b:d1:50:b6:a4:06:9b:9b:00:5f:e7:
cc:63:7e:34:dc:11:09:90:4e:94:b8:7a:90:80:86:13:7d:00:
be:fd:8a:2c:d1:c8:38:8b:aa:55:5e:63:35:94:af:6e:c0:ed:
b6:21:1b:bb:65:d2:af:10:5a:ab:09:36:7d:83:cf:69:62:44:
7d:7a:40:07:24:d5:56:c0:7a:2b:4b:ed:8d:49:8e:f2:83:03:
94:85:cd:bf:76:bf:22:e6:78:59:80:9c:76:08:c4:04:d6:00:
f1:f0:91:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:12:36 2026 by rpki-client