Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: 03leROfG1csQUzR6GWCdG35rHjaxVk7E1L57XBixZ2E=
Subject key identifier: 73:63:07:19:10:9E:BD:46:39:CB:EE:96:29:8C:60:A8:99:81:7A:A4
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019F122EDF60DF4B1CC6FFF0FEB5B9A9F1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 11B9
Signing time: Mon 29 Jun 2026 07:01:29 +0000
Manifest this update: Mon 29 Jun 2026 07:01:29 +0000
Manifest next update: Tue 30 Jun 2026 07:01:29 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: XvqKL4Mp+M8wgK4VpmGV1b+FlDGTuqpxjJd6dAsCAyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:df:60:df:4b:1c:c6:ff:f0:fe:b5:b9:a9:f1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jun 29 07:01:29 2026 GMT
Not After : Jun 30 07:01:29 2026 GMT
Subject: CN=73630719109ebd4639cbee96298c60a899817aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:3c:eb:a6:4c:d0:5d:bc:de:eb:fb:13:f7:
c7:04:65:b9:3d:79:0e:d9:70:71:13:3c:0b:c4:3f:
8d:52:e1:70:df:56:44:b2:8e:ad:bb:03:2c:a8:9c:
b5:89:23:6b:d1:98:1d:ee:59:72:5d:dd:34:0e:4d:
af:f4:3e:00:a5:55:80:4a:7b:7e:22:35:68:a9:e5:
b0:a8:2c:59:38:17:cd:1e:be:a3:4c:ef:1c:9c:39:
99:13:1f:e9:2b:95:45:c6:43:b4:c9:77:c1:da:14:
ac:91:95:df:b0:f0:91:fe:d9:d0:9c:d7:61:a4:03:
b8:3a:4e:0d:b2:ba:9b:67:b7:b3:91:64:f6:88:84:
7a:30:7e:07:3b:de:39:1d:a6:c9:61:4e:1d:2c:cd:
d6:27:4e:c5:e8:8e:06:c6:c3:aa:67:db:df:77:c2:
26:5b:61:27:75:db:15:34:f9:45:d4:d9:3b:b1:44:
2e:56:84:28:af:d8:cf:c2:a7:d3:35:25:bd:04:b6:
5f:f2:51:e3:1d:4d:15:35:7c:be:47:7e:aa:df:52:
fb:c7:f9:02:50:cf:c5:27:cb:6a:78:4e:05:2c:04:
8b:ca:b8:25:8f:53:87:e4:34:b1:08:0c:db:0a:01:
9b:53:00:e6:21:46:ab:7c:a8:6c:be:04:4a:17:01:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:07:19:10:9E:BD:46:39:CB:EE:96:29:8C:60:A8:99:81:7A:A4
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:24:b0:ac:f3:e6:ac:86:81:c3:75:02:3c:0f:b1:00:41:b5:
0e:f6:58:35:63:0c:aa:a9:bd:99:b1:31:29:8e:ce:2c:83:a1:
d0:96:e6:fb:06:98:78:c9:bb:e8:f9:27:4f:25:89:ee:5f:21:
1e:e7:58:7b:b3:63:da:0d:c1:9a:43:cf:de:a7:c5:44:90:cc:
d7:0f:17:3d:3c:8a:b7:a2:59:4e:8c:e9:98:ca:a2:cb:d6:b8:
71:f7:6b:cb:4e:b6:c5:a1:a8:6e:86:47:ce:8b:87:c1:03:c3:
a8:f8:50:8a:8d:4a:b2:fc:d8:97:5b:bd:c7:b3:09:93:ed:c8:
12:1c:78:ad:c7:94:ff:74:2d:8f:ba:3d:2c:dc:84:e2:ed:7c:
79:1e:71:f8:95:a2:fb:74:8b:bd:60:81:10:fc:6d:b9:fa:59:
d3:cb:71:53:20:4d:99:ee:3a:0e:ac:fd:c5:95:5b:01:e0:eb:
95:20:cd:23:38:10:c7:a0:4a:ee:f7:8c:3f:d7:f2:07:96:08:
ad:c7:f6:83:c2:0f:1e:17:20:4a:3a:db:97:d1:24:62:7e:bc:
ee:3a:21:6a:b2:08:df:94:c8:6d:bc:cb:bd:6e:99:3a:df:32:
72:c0:9c:c9:a6:19:f0:d7:db:a5:ad:97:54:6c:95:4f:62:7f:
06:78:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:47:00 2026 by rpki-client