Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
File: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft (raw, json)
Hash identifier: UFKqNOp//4lExM2Wl0jo0SoS10jLKICDrpKFXBwWXN0=
Subject key identifier: C3:80:45:6C:1F:B0:0A:A4:79:A7:49:CF:D6:BC:06:40:1E:10:B6:05
Authority key identifier: C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
Certificate issuer: /CN=c8544c778152f0fd85e5dcb44904f001e5987424
Certificate serial: 019EBAA2A1DE60DBF22A26B1F448873BB039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
Manifest number: 0A03
Signing time: Fri 12 Jun 2026 07:01:20 +0000
Manifest this update: Fri 12 Jun 2026 07:01:20 +0000
Manifest next update: Sat 13 Jun 2026 07:01:20 +0000
Files and hashes: 1: H1VE2ZkBqR8y9rnIA-ZTuzeFoCk.roa (hash: 3CEpvrN229vRpcqITP4Y01YD4936c1DOC0Lixuq0wEM=)
2: qRXAdJp0xbYo0FT6eucc0rsG8Yw.roa (hash: fUKa/Z+tq+35Z3GUfMU3rii79affOtxwZwlAfn3uJ6U=)
3: yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl (hash: zkNEst6O6LWSsCF80fH/R1TScgykOU8bmF4jwVYK4FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:a2:a1:de:60:db:f2:2a:26:b1:f4:48:87:3b:b0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8544c778152f0fd85e5dcb44904f001e5987424
Validity
Not Before: Jun 12 07:01:20 2026 GMT
Not After : Jun 13 07:01:20 2026 GMT
Subject: CN=c380456c1fb00aa479a749cfd6bc06401e10b605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:d7:58:38:3d:c7:87:47:be:97:e0:22:26:
cb:43:3d:9b:0b:01:87:b8:e3:41:e8:ec:e7:d1:a5:
a4:b0:ba:ac:5e:6d:b2:5d:28:4f:05:6a:d9:0c:d1:
f3:1d:9b:27:a4:26:fe:2d:49:a2:d9:fe:14:e6:32:
97:f5:2e:ab:9b:31:aa:c9:51:7f:81:e8:5c:bc:07:
79:73:15:71:23:6b:15:72:9f:2b:cc:2a:1b:ca:35:
22:4c:10:98:e1:cb:00:1b:29:6c:d7:df:4e:85:d3:
ec:f0:f5:7e:75:25:bc:bc:84:3d:bb:8a:0b:ee:0a:
01:8b:7e:eb:75:08:24:83:47:f6:d0:c0:53:7a:95:
a4:fa:d7:53:65:02:3a:3a:a8:58:35:00:0a:bd:0a:
de:92:f9:07:a4:18:ba:ce:2d:27:da:42:c2:9f:ce:
11:67:e5:8f:b5:ae:92:f6:e4:6d:ca:2e:74:17:7f:
fb:a4:03:fd:ef:04:97:a6:f9:ac:3b:ae:fd:5b:06:
ca:39:c0:b1:a5:19:6d:f3:af:40:7b:c2:95:b8:48:
9f:6f:ca:84:9f:08:7c:f8:e5:93:1c:57:1b:79:cd:
4f:89:a1:b1:04:86:c2:d9:ff:25:52:85:61:50:ff:
fa:e5:12:ea:0a:d4:74:da:fd:eb:71:1e:54:88:fb:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:80:45:6C:1F:B0:0A:A4:79:A7:49:CF:D6:BC:06:40:1E:10:B6:05
X509v3 Authority Key Identifier:
keyid:C8:54:4C:77:81:52:F0:FD:85:E5:DC:B4:49:04:F0:01:E5:98:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a1f351-42fd-4d44-a9b3-d940050e56ca/1/yFRMd4FS8P2F5dy0SQTwAeWYdCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:34:de:48:ec:07:bc:cf:1d:c9:5c:a7:63:13:8c:2b:85:86:
f9:61:c7:57:f8:4f:7e:96:17:87:ca:ee:0c:65:d3:a8:5c:93:
2f:95:97:ab:cd:a7:75:24:81:db:59:b3:b0:d6:be:54:3d:30:
3d:f8:bf:0b:31:32:6a:7d:89:c0:da:17:d9:d9:b8:83:a3:8c:
6f:bc:cf:69:1e:1d:e6:ca:1d:01:2a:d5:8d:e0:88:fa:b0:21:
5f:44:b2:0c:61:72:cf:05:68:90:1c:e2:b3:14:67:61:ec:5a:
de:17:e1:6b:0e:b5:d0:38:7d:7f:b4:b1:95:09:d0:1d:3c:e1:
25:c7:20:8c:43:f2:d8:cd:71:55:96:e0:88:71:c0:23:44:03:
d9:96:e7:5d:dc:4a:65:38:05:c7:4c:a9:81:15:1e:95:0d:8e:
ca:63:4d:62:08:73:9f:96:c4:f9:2c:75:de:e1:cd:31:8d:b3:
a3:96:f2:aa:a1:91:d7:21:a1:5b:9a:a8:06:f7:0d:43:27:d1:
e0:6c:1a:ac:1a:72:bd:60:1b:e7:af:82:7c:14:62:d6:54:7a:
40:27:43:dd:dd:c3:49:92:cb:ec:22:9a:db:95:0d:a7:eb:11:
e9:0b:6f:fb:2c:17:2d:1b:7d:e9:04:96:ba:ab:3c:75:b4:18:
b3:36:a6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:49:46 2026 by rpki-client