Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: JTIhs8xIIvV+RaSJwv8CFk4L/QAJjMkp9ZDzmWiK620=
Subject key identifier: EE:7F:7B:DB:5D:2D:0D:A4:AC:8E:FE:15:04:21:06:9D:49:49:9C:38
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019EB98F3D314A439392E1CCBAAD7DD96A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 19BA
Signing time: Fri 12 Jun 2026 02:00:32 +0000
Manifest this update: Fri 12 Jun 2026 02:00:32 +0000
Manifest next update: Sat 13 Jun 2026 02:00:32 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: 0MQFbA11dzRCidYkRna7GPYZgpaJdjSpjHuWTCbl6XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:3d:31:4a:43:93:92:e1:cc:ba:ad:7d:d9:6a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Jun 12 02:00:32 2026 GMT
Not After : Jun 13 02:00:32 2026 GMT
Subject: CN=ee7f7bdb5d2d0da4ac8efe150421069d49499c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:d5:7d:97:74:8f:3a:85:dc:e9:92:07:02:
2b:fe:65:ec:0e:00:0a:29:44:b7:83:96:4a:ce:cb:
5c:b2:0a:0e:85:75:2e:0b:db:41:80:63:5d:0f:96:
6d:e1:5c:0a:8c:73:f4:8f:de:98:25:85:d4:4d:75:
58:87:2a:48:1a:1d:67:44:6f:d5:11:1e:8f:ce:09:
95:45:41:37:11:ab:2a:7e:d0:f7:f8:27:5f:22:91:
5d:87:7e:0e:f9:dc:0f:bc:4a:dd:5b:7e:f9:2e:ab:
4a:1c:50:70:b0:5e:92:61:27:4a:9c:dc:a3:cf:02:
13:bb:64:6d:4b:9a:3a:40:2f:d3:b4:c6:82:6a:06:
18:e4:eb:31:4c:6c:80:9a:5e:1a:23:6c:39:92:60:
a2:a8:1c:d4:aa:60:25:36:cc:3c:a4:4c:6b:93:07:
f1:9c:49:a7:19:77:e4:cb:f3:df:0b:4f:de:a2:d5:
47:29:77:f5:3e:91:43:7e:3c:0e:f7:12:e7:51:e7:
37:26:50:22:c1:a0:e6:d0:1b:28:19:48:49:e7:07:
b1:14:28:70:7a:9f:af:24:0c:35:55:33:58:1a:72:
4a:f0:d2:4a:92:0b:0e:70:08:8f:ee:39:80:ee:46:
ba:51:59:ce:12:a3:e1:55:ab:83:24:26:67:13:5f:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:7B:DB:5D:2D:0D:A4:AC:8E:FE:15:04:21:06:9D:49:49:9C:38
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ea:41:55:04:db:0b:b5:e3:1f:ce:fe:8c:76:c0:41:9b:6f:
8d:67:fa:9e:7c:e4:ac:77:75:8e:29:03:5e:6c:bf:98:20:d6:
52:d6:41:82:1a:12:29:53:c6:e9:a0:04:ea:12:b0:34:5d:3d:
a2:76:4f:8f:a1:ce:84:ef:95:f7:d2:27:b6:2c:85:6d:46:1c:
f9:35:b6:32:fa:09:f1:cb:8e:cd:b3:d2:ab:07:e2:0f:28:10:
80:ed:78:ca:ac:c5:c6:1d:e8:55:cb:7e:54:9a:d0:8b:51:23:
95:23:21:54:ca:23:25:7f:48:ee:0b:8c:06:6e:d5:f9:87:3d:
8f:a1:d2:98:c9:50:23:ff:72:7d:4e:a5:3f:54:19:36:63:99:
c6:ab:00:b2:06:2b:9d:76:d8:86:39:c3:ad:c3:21:c3:b6:02:
d7:20:05:07:f9:94:5f:20:e6:58:12:dd:42:ba:70:da:3d:c5:
e0:eb:0e:03:c0:c9:7f:19:21:71:1a:8d:2d:f8:d7:22:51:95:
73:61:7e:24:f6:c8:d0:53:6a:b0:66:6e:ad:f1:d1:52:33:1d:
05:d2:a9:ee:b8:a2:a1:81:a3:92:9a:44:34:f4:10:b5:7f:89:
e7:1d:5f:64:1b:62:17:2c:16:cb:46:53:63:58:72:7e:92:ee:
c7:4a:6f:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65jz0xSkOTkuHMuq192WqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGMyNWVhM2EwYTcyOWVkOGU2ZTlhNzNkYTg5NmQ4NGY5
NTQzOWMwHhcNMjYwNjEyMDIwMDMyWhcNMjYwNjEzMDIwMDMyWjAzMTEwLwYDVQQD
EyhlZTdmN2JkYjVkMmQwZGE0YWM4ZWZlMTUwNDIxMDY5ZDQ5NDk5YzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQHVfZd0jzqF3OmSBwIr/mXsDgAK
KUS3g5ZKzstcsgoOhXUuC9tBgGNdD5Zt4VwKjHP0j96YJYXUTXVYhypIGh1nRG/V
ER6PzgmVRUE3EasqftD3+CdfIpFdh34O+dwPvErdW375LqtKHFBwsF6SYSdKnNyj
zwITu2RtS5o6QC/TtMaCagYY5OsxTGyAml4aI2w5kmCiqBzUqmAlNsw8pExrkwfx
nEmnGXfky/PfC0/eotVHKXf1PpFDfjwO9xLnUec3JlAiwaDm0BsoGUhJ5wexFChw
ep+vJAw1VTNYGnJK8NJKkgsOcAiP7jmA7ka6UVnOEqPhVauDJCZnE1+szQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5/e9tdLQ2krI7+FQQhBp1JSZw4MB8GA1UdIwQY
MBaAFMvcJeo6CnKe2Obppz2olthPlUOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUt
MjJjNzlhZWExMjdjLzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81ZGExZTYtMjQ2Zi00NDkzLTk5MmUtMjJjNzlhZWExMjdj
LzEveTl3bDZqb0tjcDdZNXVtblBhaVcyRS1WUTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIepBVQTb
C7XjH87+jHbAQZtvjWf6nnzkrHd1jikDXmy/mCDWUtZBghoSKVPG6aAE6hKwNF09
onZPj6HOhO+V99IntiyFbUYc+TW2MvoJ8cuOzbPSqwfiDygQgO14yqzFxh3oVct+
VJrQi1EjlSMhVMojJX9I7guMBm7V+Yc9j6HSmMlQI/9yfU6lP1QZNmOZxqsAsgYr
nXbYhjnDrcMhw7YC1yAFB/mUXyDmWBLdQrpw2j3F4OsOA8DJfxkhcRqNLfjXIlGV
c2F+JPbI0FNqsGZurfHRUjMdBdKp7riioYGjkppENPQQtX+J5x1fZBtiFywWy0ZT
Y1hyfpLux0pvUQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:10:35 2026 by rpki-client