Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
File: yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft (raw, json)
Hash identifier: meDXrA4SYVqhWqaMlKielWftU8B9XEhh2VrRwXHJAVA=
Subject key identifier: 4A:B1:B2:70:73:36:63:0D:FE:E0:D8:3E:20:3E:93:FE:2F:37:E7:71
Authority key identifier: C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
Certificate issuer: /CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Certificate serial: 019EB8EAC5CC9F7010286C4F54E09C7C1F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
Manifest number: 15DB
Signing time: Thu 11 Jun 2026 23:00:54 +0000
Manifest this update: Thu 11 Jun 2026 23:00:54 +0000
Manifest next update: Fri 12 Jun 2026 23:00:54 +0000
Files and hashes: 1: xJ9oLhi0jZ3bx5rEVTQJ-Dbq8Ic.roa (hash: 8Hl158eCXhXx4gFRUokLsBxI0i7haKKmOz5b/bBgdPg=)
2: yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl (hash: Uqcq0gaBDQBedz/3CN9AvUgKNSNuxzSjtBsUK6xzJKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:c5:cc:9f:70:10:28:6c:4f:54:e0:9c:7c:1f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8289535e7e4d23e63e178e3fb5bf056fe8ae277
Validity
Not Before: Jun 11 23:00:54 2026 GMT
Not After : Jun 12 23:00:54 2026 GMT
Subject: CN=4ab1b2707336630dfee0d83e203e93fe2f37e771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:0a:bc:f4:27:fc:4f:ea:27:2b:10:89:aa:
57:41:6d:b8:22:7c:96:39:a7:e5:05:ba:cf:0e:fa:
ad:13:77:41:5c:9a:67:b0:d8:74:c1:0b:da:bf:47:
a6:35:e2:40:53:1d:3d:5e:d8:72:c4:50:3c:89:30:
c4:43:47:60:6b:0a:98:1b:fa:39:2d:fd:10:75:ed:
ba:f0:e3:8d:fb:56:8e:48:01:eb:71:b6:48:7c:12:
1c:fa:b0:e2:6c:7b:86:80:77:61:f4:b7:c1:b6:6d:
be:1a:1a:25:86:cc:b5:71:3a:3a:cf:10:ec:8e:43:
66:6e:cc:88:f9:6e:80:ae:85:9c:eb:7c:9c:7d:c8:
23:11:32:90:d8:9b:89:09:f8:7d:76:ec:4a:3d:c0:
db:45:25:08:3a:07:03:e0:c3:09:af:49:f1:b3:aa:
4d:c7:e5:c3:00:ab:80:98:1f:da:a1:59:f5:b2:2a:
77:d3:02:22:99:1a:ff:66:ff:ae:1c:79:e8:01:a8:
4c:47:d2:56:82:ba:07:7a:cc:78:0b:54:ff:c9:b2:
08:c2:f6:30:d4:3f:8b:b2:19:4e:73:4c:10:9f:eb:
6e:44:5a:c1:bf:4e:54:78:55:70:f5:12:85:e2:4c:
cb:f5:ff:83:50:77:a6:e5:f7:83:25:93:0f:c7:70:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:B2:70:73:36:63:0D:FE:E0:D8:3E:20:3E:93:FE:2F:37:E7:71
X509v3 Authority Key Identifier:
keyid:C8:28:95:35:E7:E4:D2:3E:63:E1:78:E3:FB:5B:F0:56:FE:8A:E2:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCiVNefk0j5j4Xjj-1vwVv6K4nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6dcedb-ca0b-483a-a664-66a5ecc84616/1/yCiVNefk0j5j4Xjj-1vwVv6K4nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:26:70:47:c4:74:55:c8:62:8e:55:ab:e2:c9:89:96:7d:87:
3a:99:01:fb:e5:28:8e:9d:3f:9e:af:a0:eb:e0:71:ac:ea:a4:
ac:00:be:48:3d:e8:a7:c6:4c:a7:52:dd:97:a8:26:10:eb:9c:
f7:85:f1:b2:e1:fb:17:29:66:06:29:87:2f:bd:c0:3b:0e:c8:
1b:01:90:f3:3c:a5:4d:25:4b:e9:40:df:a2:87:35:8b:d6:38:
da:d4:a4:10:3b:f0:5b:06:3c:92:f9:05:33:41:a5:9c:39:f6:
67:1e:74:82:78:dd:a2:27:a4:5a:18:01:c6:2d:e2:79:0a:54:
61:df:ef:d8:fe:eb:b5:2c:43:45:bd:ad:04:bd:89:02:df:30:
77:eb:d4:9a:20:91:9a:9c:09:5e:58:8b:05:02:22:b6:5d:1d:
df:c4:d7:35:e3:5d:c4:d1:b5:43:71:36:73:67:43:8e:3c:56:
cc:2b:36:f5:fc:20:60:b6:62:88:6b:25:21:f8:53:50:76:f4:
65:ee:6e:df:ec:8f:26:20:b4:77:fd:47:65:02:a9:ea:1c:9e:
30:bb:47:10:fc:97:22:a6:bd:38:ab:f0:15:fa:fe:f0:73:14:
4d:c3:c5:1e:fb:32:d7:af:d2:b0:9a:60:7f:f3:7f:f2:b0:b8:
20:f2:2d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:12:31 2026 by rpki-client