Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: XgVY9idGGROBl/G631eGsA3tFbqNEPrVYB7m9Lf7kXI=
Subject key identifier: 73:13:C9:22:61:46:30:20:67:E6:D1:82:A0:2C:73:E5:31:CC:16:2A
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019EBB7DED6E754B422928DE0AA9AC83148C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 11:00:52 +0000
Manifest this update: Fri 12 Jun 2026 11:00:52 +0000
Manifest next update: Sat 13 Jun 2026 11:00:52 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: 7/jP6XggpuePeg1uS40w14GfHo0OQL8SAXYw8s9amSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:7d:ed:6e:75:4b:42:29:28:de:0a:a9:ac:83:14:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Jun 12 11:00:52 2026 GMT
Not After : Jun 13 11:00:52 2026 GMT
Subject: CN=7313c9226146302067e6d182a02c73e531cc162a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:df:8b:dd:3d:58:d1:3b:99:3e:b6:4a:ad:
e4:d1:3b:53:a4:01:75:0c:80:48:61:8e:e6:ec:12:
b0:40:e0:46:8d:2c:dc:c4:3e:fa:4c:0d:f8:9f:cc:
71:72:ce:f1:b1:62:52:b6:88:b2:9f:63:00:c6:8c:
e5:91:d9:ca:f5:0c:b7:01:6e:e2:2f:b0:7a:56:02:
72:a1:39:f9:7f:41:c8:ae:b4:09:e4:48:1b:e0:04:
04:f4:52:1f:12:a6:42:ec:77:25:90:6b:53:7f:86:
47:af:f5:35:7a:23:3d:61:32:6b:67:7a:3d:c0:a7:
e0:b1:ad:f1:92:09:a6:68:84:95:6f:c2:6e:87:2e:
96:59:40:11:b2:6b:53:4f:6c:fb:cf:1d:75:5c:4a:
fd:2f:56:ae:7a:2b:92:66:33:64:a4:e5:4d:1d:7c:
13:17:79:f1:6a:3c:60:fd:df:2f:a4:c8:a8:e6:65:
6a:75:89:43:b6:38:f8:b3:68:a6:6a:e5:1b:1e:ae:
60:9e:8a:d2:7f:f1:5a:bf:59:c9:bf:7b:41:5b:5a:
47:e1:64:80:33:60:9d:f9:ac:a6:f8:b4:fe:ef:fc:
09:f7:81:cc:2c:b9:0b:b2:e3:1c:58:41:9c:aa:12:
67:55:a5:6a:94:64:ef:c4:3d:e5:7f:3d:b8:10:ea:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:C9:22:61:46:30:20:67:E6:D1:82:A0:2C:73:E5:31:CC:16:2A
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c7:fd:fe:0a:d8:bc:dd:b8:31:7a:ef:05:da:6a:2a:97:6d:
43:43:2f:a1:6d:93:9e:99:a6:cc:3c:06:be:1b:23:8c:56:41:
f0:ea:e6:a6:6f:8e:55:fe:84:95:e8:a9:db:ee:ca:0e:c0:9e:
4f:80:2f:84:e1:d7:ad:e3:b2:d0:06:c1:b3:4d:16:b8:fd:c2:
54:ba:12:7c:c1:10:64:a1:62:68:e4:05:46:2b:82:b4:cd:a3:
93:e1:fa:c1:68:76:47:b4:8c:6c:48:00:8c:c6:b6:32:db:b6:
9d:40:de:0b:32:85:1d:87:8d:e0:79:47:01:04:1f:bf:39:76:
35:16:69:87:c0:0d:de:fa:85:cc:ac:d2:83:55:ff:7d:5c:d9:
5f:06:90:ba:7a:5d:92:f8:32:83:62:d4:41:8b:7e:5f:e7:43:
8a:bf:7d:24:8e:aa:04:4b:f5:41:8f:8f:61:1a:a1:fa:49:88:
9a:ef:f5:f9:5e:6d:19:bd:80:60:65:e2:67:d5:06:81:4e:d1:
50:c9:ff:5b:79:da:44:b4:53:c3:0d:97:22:fd:ee:e7:a2:47:
12:da:de:55:bb:1d:9d:82:22:08:7f:92:11:92:5f:86:00:f8:
96:85:d1:86:8b:25:ba:b8:46:69:8a:02:cd:ce:ff:00:1a:27:
cf:c2:13:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:06:15 2026 by rpki-client