Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
File: yRdwDdwOcosHKtQaPR6LaoCqdRA.mft (raw, json)
Hash identifier: 3vdrUFiTrNaMnVQtVDn6oV54lmbrFEzGCe86yWGHHs8=
Subject key identifier: F2:02:63:80:87:91:11:0D:B6:B3:18:36:C8:5C:59:01:9E:AD:A6:4D
Authority key identifier: C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
Certificate issuer: /CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Certificate serial: 019EB7D7EE905B87EBBF0BCAF9EBAA6BEEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
Manifest number: 18E8
Signing time: Thu 11 Jun 2026 18:00:42 +0000
Manifest this update: Thu 11 Jun 2026 18:00:42 +0000
Manifest next update: Fri 12 Jun 2026 18:00:42 +0000
Files and hashes: 1: wbZC2ywn3MopqOZcK5wfTzngXuU.roa (hash: BKsSPZZN6H035QOhv5kmcLN6+1r7D6TcSZ6TgnVBHpE=)
2: yRdwDdwOcosHKtQaPR6LaoCqdRA.crl (hash: sK3XUgGBJ8c9woMMGK5SL01FSsioMmpDR05DRcoEjE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:ee:90:5b:87:eb:bf:0b:ca:f9:eb:aa:6b:ee:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c917700ddc0e728b072ad41a3d1e8b6a80aa7510
Validity
Not Before: Jun 11 18:00:42 2026 GMT
Not After : Jun 12 18:00:42 2026 GMT
Subject: CN=f20263808791110db6b31836c85c59019eada64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:dd:d9:79:45:bc:aa:18:86:f0:9d:1d:2b:
74:46:0f:c7:df:4f:38:40:a3:51:cd:56:a5:7e:54:
c7:6f:e4:c3:24:06:e3:66:85:a6:67:3c:3b:cb:92:
ab:fa:99:16:4e:6d:ba:41:33:73:21:63:a5:91:18:
17:39:6e:c2:f9:ca:d0:f0:fe:6b:92:a4:8b:35:0b:
3a:5d:87:3a:e8:67:08:b9:d2:cd:ec:4a:24:7c:0c:
3d:ad:e9:05:35:ee:7c:fa:26:2a:c4:5a:52:b2:c1:
57:c7:e4:b3:7c:67:55:9b:80:57:cf:fb:de:85:bd:
0f:be:9e:dd:37:a7:57:79:40:6a:5f:33:aa:d4:b2:
14:0d:02:c5:58:ed:05:0f:23:83:d8:57:73:fe:ba:
06:64:c2:84:1a:40:3a:ad:6d:21:73:1c:2d:91:f6:
f6:6b:00:23:b5:32:c0:a0:97:95:47:59:b3:c1:9d:
d0:7b:39:85:28:a5:80:93:aa:9e:2c:66:18:7f:75:
36:96:7f:b3:c0:c0:5e:c0:ee:66:14:bc:73:5c:0c:
b1:3e:6a:92:06:52:79:de:b4:40:93:ee:b3:bc:57:
7e:6d:4c:5d:ed:38:ac:11:01:e0:23:8e:9a:28:f5:
82:d6:ed:a2:b0:d5:d9:72:75:2f:ad:9e:73:6c:a3:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:63:80:87:91:11:0D:B6:B3:18:36:C8:5C:59:01:9E:AD:A6:4D
X509v3 Authority Key Identifier:
keyid:C9:17:70:0D:DC:0E:72:8B:07:2A:D4:1A:3D:1E:8B:6A:80:AA:75:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRdwDdwOcosHKtQaPR6LaoCqdRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/efe6e6-0306-4769-80ab-7ebec0e27b28/1/yRdwDdwOcosHKtQaPR6LaoCqdRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7c:5d:9d:8f:84:9f:17:d0:7d:74:d9:30:bf:76:fc:91:43:
7b:7b:2c:fc:91:87:97:c8:a1:60:fc:b0:5a:b5:7d:e7:b4:2a:
12:ed:e4:96:95:15:68:6d:60:00:08:97:44:35:e5:ba:a5:c6:
92:40:fd:c9:ca:f8:1e:33:30:ee:2f:78:8e:b3:11:2b:2f:15:
9a:31:9a:da:84:5e:5e:f9:89:f5:22:93:1a:93:b1:69:d2:5e:
a2:61:74:49:57:c1:bd:f5:05:97:7d:b3:ac:d7:65:4e:28:b6:
95:61:8b:14:1c:b6:60:14:41:86:ee:45:e4:25:94:c2:9d:24:
31:30:9c:c9:b5:01:c9:44:ff:7e:38:94:f4:fe:64:db:c5:73:
05:4a:13:8f:27:cf:66:9b:c1:2b:2a:38:22:b4:4f:a6:22:f0:
ee:e4:8f:de:b5:1e:52:f6:26:6f:54:99:51:1f:32:5d:23:8a:
b9:34:7d:95:73:4c:df:64:d5:da:71:38:5f:9b:79:ff:55:57:
db:31:6e:46:27:11:a1:e3:3a:ff:41:4c:64:6d:a3:f9:20:dd:
c9:d1:54:91:18:b4:2f:80:18:70:2e:58:e4:a7:ef:e2:fa:21:
bd:57:12:8e:71:8d:fc:42:51:0f:d3:6d:8b:7f:47:cc:76:b6:
6d:c4:b5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:18 2026 by rpki-client