Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: 1ik4zad3p5XqdpGJjdZHclBxeY4kkLALIv0v2U034aI=
Subject key identifier: B7:B4:C1:11:5A:B4:85:1E:95:9A:EE:4A:8C:9A:C6:6F:13:13:72:1C
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019EB7D83BA367FCBA4CB6B85958CB62CB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 1243
Signing time: Thu 11 Jun 2026 18:01:01 +0000
Manifest this update: Thu 11 Jun 2026 18:01:01 +0000
Manifest next update: Fri 12 Jun 2026 18:01:01 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: 9R495BuNX8m/8OOfJmq02xYzKofnpz3UMLKGuN/NVHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:3b:a3:67:fc:ba:4c:b6:b8:59:58:cb:62:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jun 11 18:01:01 2026 GMT
Not After : Jun 12 18:01:01 2026 GMT
Subject: CN=b7b4c1115ab4851e959aee4a8c9ac66f1313721c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:ff:09:fd:7d:fc:75:82:14:4a:d6:35:bc:
c3:f8:f7:54:bf:de:14:c7:be:c3:78:90:31:1e:3a:
0e:68:69:4d:65:32:c2:fd:6b:eb:60:00:bc:6e:db:
ab:36:d9:6c:07:6b:56:bc:10:12:af:10:41:28:2d:
97:d7:6c:8b:fa:2e:a0:f0:98:cd:71:b1:2b:1f:96:
27:e8:f3:66:73:0f:04:48:5d:01:7b:01:49:8d:4b:
ec:fe:de:0a:f7:cd:9c:8b:5f:2e:05:bc:e4:21:fe:
aa:d2:04:e5:88:57:f5:70:df:f4:54:93:a5:86:18:
44:0e:5f:bb:cb:76:70:fd:eb:8b:42:8d:f3:fd:dd:
92:1e:b2:17:c2:fc:ab:c5:1a:ba:44:2e:69:15:14:
ff:53:0d:73:15:07:49:17:08:ec:7a:6c:b8:ec:91:
22:64:59:93:f9:db:64:9a:27:5e:65:f2:85:81:c6:
9e:d4:2e:42:f8:46:52:e7:fa:6d:3c:51:2e:ac:53:
5f:18:c6:97:28:07:96:e2:c7:8d:3a:aa:5c:94:d8:
fd:23:04:14:da:69:07:3c:f7:97:fc:04:cc:55:c1:
50:bc:24:74:2f:d2:87:6a:7c:84:6d:bb:40:15:b7:
b9:fc:eb:ec:4d:91:ec:eb:2d:1d:57:bf:2d:4c:b4:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:C1:11:5A:B4:85:1E:95:9A:EE:4A:8C:9A:C6:6F:13:13:72:1C
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:02:27:ad:37:fc:5d:77:ee:58:e4:c0:fc:0d:0f:cb:18:f1:
d2:60:6f:68:73:f8:89:6e:a2:e6:05:8e:27:20:df:88:36:3e:
f7:72:1e:ad:e9:34:0f:55:0f:fd:85:ec:c5:af:d8:9b:5d:d4:
33:e3:94:8d:ac:12:0d:56:cd:91:ea:70:32:4d:1d:f2:12:54:
ab:68:bf:96:dd:97:c0:48:58:7b:b7:22:e2:c7:30:24:91:cf:
00:e5:b0:12:39:3d:64:80:78:99:b6:aa:77:14:1d:17:a6:99:
ab:fd:b7:3f:fa:81:4b:a0:bb:cf:c3:0c:4a:1a:67:e4:e1:29:
21:cd:cb:aa:5a:36:05:6f:b2:81:d2:e1:6d:f8:39:fc:91:80:
83:f1:5b:1c:8a:36:9a:0a:17:ba:64:f4:91:3b:18:d6:fd:d5:
6d:f3:01:8d:c8:10:44:22:54:34:dd:55:a8:e7:a7:c5:c3:09:
8d:79:b3:e0:0b:89:1e:df:38:af:37:2b:ed:e3:47:aa:ba:07:
f5:c0:13:d7:aa:1f:44:ff:80:a0:90:77:84:33:83:d3:19:4a:
0c:ec:eb:ef:f3:41:e6:99:51:43:3f:ee:42:0b:d2:a6:0a:a0:
60:4e:bb:64:32:28:aa:4a:ac:6d:2c:f6:c3:0c:7b:06:9c:b7:
74:03:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:47 2026 by rpki-client