Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
File: ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft (raw, json)
Hash identifier: q9QhWSmyhGrmMRff87spnOl4Wae8/lsgwsG/TKPMhF0=
Subject key identifier: BB:50:DB:32:77:E0:AF:3C:05:7E:CE:0F:84:F6:11:67:F2:37:87:ED
Authority key identifier: C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
Certificate issuer: /CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Certificate serial: 019EFC838EAAD382BD44EC11E68AB8A60F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
Manifest number: 42
Signing time: Thu 25 Jun 2026 02:02:20 +0000
Manifest this update: Thu 25 Jun 2026 02:02:20 +0000
Manifest next update: Fri 26 Jun 2026 02:02:20 +0000
Files and hashes: 1: L6cWexgMIbqFul3AirbjsOAefEg.asa (hash: 1nOkALqCPFQsioiwLDdO7OlhwTmnqBbLFbvH6uqIpPw=)
2: X2DmUx0pbN5guKhNJtTsv2u4c3Y.roa (hash: VTwewHc51dPE2RalZVl+hHr3MWkt8tZDjDqcqb8c2w4=)
3: ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl (hash: 56HRoq4jF+SD8rZFGGf+5r3vkp+34dgo7ac8tLckGBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:8e:aa:d3:82:bd:44:ec:11:e6:8a:b8:a6:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Validity
Not Before: Jun 25 02:02:20 2026 GMT
Not After : Jun 26 02:02:20 2026 GMT
Subject: CN=bb50db3277e0af3c057ece0f84f61167f23787ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:df:bd:a6:38:71:17:94:ce:46:1c:e3:f6:
0c:e7:a2:7e:5f:cd:9c:4c:dc:77:e0:33:fb:a0:3f:
35:63:91:19:37:10:5a:c9:0b:b3:28:68:4a:cb:53:
de:d3:f8:ad:97:32:fe:de:de:97:f5:26:6a:f2:28:
e5:6c:94:e2:6f:98:fe:c0:5f:57:8a:92:9d:7e:35:
d8:44:8b:e5:c2:d1:30:bf:d2:ff:97:e0:79:9a:02:
0f:ff:fc:f7:e4:17:f2:49:fb:1d:ba:d9:34:6a:fc:
2b:c7:ea:c5:28:45:08:93:66:1f:4b:3d:98:93:99:
75:84:21:29:fb:df:db:02:13:58:83:ff:0e:09:8b:
67:5c:6e:41:45:2b:47:be:7b:64:9b:3f:8d:58:d8:
44:96:fa:30:bf:f5:93:f3:e0:4e:8a:ab:05:22:c7:
35:e5:3d:0f:79:39:58:21:8a:34:f9:04:7d:92:10:
6e:c8:20:88:5f:82:cf:4c:44:d5:0b:27:b5:24:bb:
af:7b:56:b3:94:da:69:af:b1:9c:64:a0:84:32:7e:
00:00:ca:70:a7:ea:3d:5c:39:78:fe:0d:b4:0f:57:
59:26:72:dc:71:39:15:8f:a9:96:19:2e:50:7a:99:
65:c1:ff:64:cd:09:0d:23:8a:db:3e:8d:85:cd:e5:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:DB:32:77:E0:AF:3C:05:7E:CE:0F:84:F6:11:67:F2:37:87:ED
X509v3 Authority Key Identifier:
keyid:C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8e:06:14:bc:d9:d6:58:77:05:96:7f:5b:62:80:78:22:15:
c0:28:b1:87:47:66:99:ab:ed:fd:09:8a:28:0a:0e:30:b4:63:
9c:fe:f3:48:85:fb:ec:7b:aa:5b:79:71:c8:0a:fb:b3:af:dc:
4b:aa:07:ab:37:76:11:0f:36:53:4c:b7:2c:af:eb:a6:4b:89:
76:64:1a:73:c2:6a:8d:91:f6:88:54:e3:58:58:c9:f1:ad:3b:
82:ae:7e:e1:ed:51:0c:cc:f0:55:b9:7c:f7:f9:db:4e:25:3e:
c8:f4:af:79:f6:1d:87:d5:f0:34:1b:d7:b1:dc:5d:55:3f:01:
90:bd:9b:4a:b3:b7:d2:e1:84:75:1c:7d:77:1e:ec:9f:e0:14:
be:11:c8:aa:b3:af:61:a4:e3:6e:2e:55:0b:42:fd:33:8b:bd:
d2:17:5d:c3:c3:46:a0:87:a8:10:a9:e7:73:fd:c0:05:ad:7c:
fa:98:0d:c1:7e:ee:76:31:94:6a:99:ff:61:cc:df:b9:c1:45:
c5:64:30:56:ae:e9:0d:47:76:92:b7:22:43:e5:c6:d4:09:34:
08:54:3c:3b:bf:07:4a:57:b9:9e:c8:40:08:64:3d:8e:ea:7a:
4e:59:7a:95:f0:57:10:bd:9f:4c:c7:9b:df:2b:c7:a2:90:97:
49:a4:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:35 2026 by rpki-client