Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
File: yDh_A1sJ0rw5P39g12IdMAzJd9g.mft (raw, json)
Hash identifier: u8W9VQASEs0kv83OVMz38gpt25nv1zrDLWDiFw2owlQ=
Subject key identifier: 3F:F8:D1:CA:AF:EB:4B:2F:BD:CF:D5:8C:C9:31:2C:EF:82:1F:3D:DA
Authority key identifier: C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
Certificate issuer: /CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Certificate serial: 019E84C604CEA3D2E62ED9A464C9E8F0B083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
Manifest number: 1647
Signing time: Mon 01 Jun 2026 20:00:30 +0000
Manifest this update: Mon 01 Jun 2026 20:00:30 +0000
Manifest next update: Tue 02 Jun 2026 20:00:30 +0000
Files and hashes: 1: dm05ruUJUy3EB3fTlfRp28bRVHs.roa (hash: HKoH3W2n4KC9D9ffQJl5txh8NMSU8l6yIctHVJM24eA=)
2: yDh_A1sJ0rw5P39g12IdMAzJd9g.crl (hash: vc4xb4t+uYAqVvx+Z0SIpWjlOdL0hP0dBHNSnsrgxhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:84:c6:04:ce:a3:d2:e6:2e:d9:a4:64:c9:e8:f0:b0:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8387f035b09d2bc393f7f60d7621d300cc977d8
Validity
Not Before: Jun 1 20:00:30 2026 GMT
Not After : Jun 2 20:00:30 2026 GMT
Subject: CN=3ff8d1caafeb4b2fbdcfd58cc9312cef821f3dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:9a:c3:d9:eb:f3:eb:98:b6:39:0e:7c:bd:
ed:b6:64:e4:9a:33:f5:8b:f7:82:9d:d8:c4:be:27:
41:cc:ef:7a:dd:06:cf:a6:90:7b:ee:79:6d:41:82:
a2:bb:0f:6a:68:e0:73:31:e9:08:08:32:df:9a:5d:
8f:d8:ee:8e:1d:57:1e:30:c7:85:e4:2e:4e:e6:9f:
c1:53:41:f8:7e:f2:ad:e5:18:a5:75:58:04:2c:25:
de:98:d5:3c:4e:96:94:7e:3a:e0:da:9f:79:64:08:
eb:6e:80:31:92:9c:ba:ad:71:b3:43:64:03:52:c0:
1e:a3:cf:f8:5f:68:75:64:ff:e5:68:a4:fd:fd:61:
8f:09:b8:f6:0c:68:b7:73:c8:a4:b1:ea:58:3d:14:
ec:96:32:f5:87:7c:6a:e7:07:56:fb:15:52:d2:59:
a1:99:ae:0b:01:dd:c7:ae:90:51:3e:01:c4:44:cb:
d4:6b:03:8e:e4:18:d3:a1:6a:1f:c4:21:92:86:49:
91:80:9d:e0:f0:0d:71:da:9c:b3:ad:0e:60:30:84:
c7:a8:da:f6:37:8b:1d:55:9b:40:3b:68:4b:e1:68:
a8:fb:72:62:0a:5e:7f:8b:1a:19:d3:3d:9d:bb:1c:
00:c2:f2:0e:91:2a:16:d7:e3:0c:4d:66:a6:a9:31:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:D1:CA:AF:EB:4B:2F:BD:CF:D5:8C:C9:31:2C:EF:82:1F:3D:DA
X509v3 Authority Key Identifier:
keyid:C8:38:7F:03:5B:09:D2:BC:39:3F:7F:60:D7:62:1D:30:0C:C9:77:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDh_A1sJ0rw5P39g12IdMAzJd9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb090d-685e-4110-b171-c1c3c848912b/1/yDh_A1sJ0rw5P39g12IdMAzJd9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:a4:b6:d5:04:f4:3e:a8:63:b9:cf:b3:8c:36:7e:4d:fb:
07:dc:5f:7e:69:49:dd:7e:cb:ee:cd:ec:ef:78:dc:b8:18:17:
10:19:e1:78:09:0f:a2:29:df:56:67:55:26:12:04:1a:24:55:
5d:e4:b8:90:b9:12:a6:7e:11:be:7e:e4:02:07:20:43:7e:41:
82:8e:82:10:a4:af:8c:05:19:14:86:57:d0:11:a9:6e:a6:99:
9c:6c:18:c7:b8:64:31:e4:b9:92:51:2d:6a:6d:bc:61:da:e3:
bf:ad:6e:99:2d:f4:a1:95:af:aa:ca:83:43:e2:5d:b9:96:de:
c7:94:c9:df:19:27:c8:6d:f0:aa:f9:50:f8:8c:70:57:15:e4:
59:35:59:fe:d6:6e:2e:be:a4:fb:50:ec:3a:99:9a:4c:6c:b4:
4d:50:81:a8:4b:e8:5a:87:f2:57:d9:be:bf:a3:8d:15:f5:89:
ea:bd:f8:9e:3d:f1:e9:f0:5b:59:7a:06:e6:be:5a:9e:22:21:
52:31:6f:a3:ea:6c:d8:d4:13:ac:39:b7:34:eb:f0:3c:e7:31:
96:19:03:b6:bb:6d:9f:f8:65:50:83:92:c0:6d:03:3e:c2:83:
a9:77:ff:05:7e:5e:32:9d:8e:75:0e:0e:47:54:fc:b6:dc:d6:
8f:47:29:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 05:52:30 2026 by rpki-client