Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: gWhVwYNGqF2frMjVrzsCR2sxUnYGbhVGe6efCLp8i6U=
Subject key identifier: 45:44:28:82:EE:52:F1:4F:88:1F:F4:9E:12:2E:82:30:0B:82:53:CB
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019E93CB93FFCF66B8183D6340BD29F2172D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 1945
Signing time: Thu 04 Jun 2026 18:00:52 +0000
Manifest this update: Thu 04 Jun 2026 18:00:52 +0000
Manifest next update: Fri 05 Jun 2026 18:00:52 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: IeIfPAiwvPwVlUmPKTL3Wsdyawn1XqBjpy/hxwSrVkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:cb:93:ff:cf:66:b8:18:3d:63:40:bd:29:f2:17:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jun 4 18:00:52 2026 GMT
Not After : Jun 5 18:00:52 2026 GMT
Subject: CN=45442882ee52f14f881ff49e122e82300b8253cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:1d:d7:82:27:a1:54:c6:06:d7:4f:3b:ae:
b5:58:a0:7e:c4:b2:ea:cc:1b:5b:a1:db:36:61:9e:
8c:e4:f1:e3:e2:90:2a:39:2d:45:5e:41:02:83:4f:
4c:be:1d:9a:fe:58:52:36:47:4e:e5:69:92:26:61:
62:52:29:e4:33:53:47:a1:25:ef:fc:e4:b8:83:94:
7b:8b:b4:00:55:f7:b9:bc:9b:ba:1c:02:8f:f9:43:
fb:17:c9:01:3d:ca:a2:4f:7a:28:4a:3c:ba:7f:57:
f0:e6:9a:1f:3f:a1:4b:91:28:72:e3:5b:52:fb:0c:
12:25:18:05:ad:ee:07:5e:3f:bd:d9:17:fb:cb:e7:
2f:6e:e9:2a:3a:9f:e0:31:c1:c5:f2:f6:fd:4e:7a:
b8:14:63:bd:cc:0e:db:bb:28:05:d1:44:d5:7a:53:
36:b1:6a:ce:39:3b:49:bf:f2:ef:7d:07:98:43:57:
30:e5:f7:81:bd:a8:8f:3b:85:b6:ea:48:37:97:41:
96:a6:4b:fa:90:e5:3e:44:cd:d1:d1:ab:ea:8b:e4:
1a:6c:80:81:c0:16:58:b3:d6:2b:5f:38:b2:20:19:
47:51:a7:1c:3c:e4:a8:ff:cc:b7:97:a2:3d:7d:b3:
fc:9b:3c:f5:ff:4f:34:6e:3d:7b:c1:c1:e4:27:85:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:28:82:EE:52:F1:4F:88:1F:F4:9E:12:2E:82:30:0B:82:53:CB
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:be:87:9d:40:ae:78:78:1f:08:49:c9:22:7c:0f:81:33:07:
06:82:02:1e:b9:9e:03:f7:96:83:7b:f9:2f:6f:a5:d6:40:e9:
87:2f:06:be:2b:48:30:b5:ec:7f:9b:79:ad:66:fc:a2:48:b2:
1a:85:5b:29:cf:f4:e9:b8:a1:c4:dd:45:6a:e2:16:95:f4:25:
52:ac:57:f5:d7:fc:5d:be:ce:55:a2:fd:af:09:bf:8a:65:cb:
01:7e:5f:c1:00:87:0c:54:d7:8a:79:6d:48:8c:fd:83:d5:de:
10:91:ac:c6:72:46:0c:57:a1:26:c5:2e:cf:2a:2f:67:e3:d8:
64:7e:f9:99:a1:7d:0a:b6:8c:9f:0f:c6:2c:92:4a:9d:bb:2c:
4f:0a:6a:d2:59:a2:9a:7c:25:33:4a:b1:e1:4c:f2:a2:cb:e5:
29:2f:c0:66:59:11:e5:1b:69:10:52:84:77:d6:bd:40:74:c2:
c1:61:ff:c7:6a:02:a0:bc:1e:0d:39:71:15:5f:b3:fb:a5:b1:
0d:8c:56:67:2d:45:b7:66:cc:3b:57:75:77:93:78:e1:3e:a8:
d1:9f:6f:ab:84:65:28:38:a6:e1:2c:c0:5d:28:b9:f9:83:fa:
f2:9c:d2:2e:1c:8f:a2:00:04:1b:41:3a:9a:f2:8e:df:a8:52:
7a:15:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:42:28 2026 by rpki-client