Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: hoyOzw9U8xahfLTNBbyHI5TPg4UQiSYImNAsFfFgD40=
Subject key identifier: 43:39:2B:24:45:5C:FC:C6:75:65:84:23:81:A4:48:85:8C:C1:1B:EF
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019EDDD39C4C92499975E8C82BC9800A0C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 1050
Signing time: Fri 19 Jun 2026 03:01:33 +0000
Manifest this update: Fri 19 Jun 2026 03:01:33 +0000
Manifest next update: Sat 20 Jun 2026 03:01:33 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: ivbI3UPQtRkx4fte2aZAgrs9IY2DXU1lgM5aqKt1QgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:d3:9c:4c:92:49:99:75:e8:c8:2b:c9:80:0a:0c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 19 03:01:33 2026 GMT
Not After : Jun 20 03:01:33 2026 GMT
Subject: CN=43392b24455cfcc67565842381a448858cc11bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:55:4d:2b:bc:e4:30:f5:d0:06:f2:5b:5f:
4a:f3:a7:09:40:48:5b:ba:0b:e0:56:3f:65:5c:c6:
0c:9b:49:36:ca:2f:55:06:07:26:3c:e8:81:21:86:
ab:6b:18:01:d5:e1:92:28:6b:7a:72:70:b3:8c:e5:
15:10:ee:f8:8d:bd:ef:84:bf:66:cf:a0:d5:a2:f5:
50:6c:33:70:7f:45:65:a9:89:e2:1c:38:b0:76:19:
6a:d2:c6:31:cc:a9:f6:60:14:ba:d7:fa:a8:3a:76:
23:5e:cc:53:c5:78:a7:86:b7:45:19:14:d1:a7:d5:
fc:c1:fc:c6:22:52:c2:40:78:ad:18:a8:9a:75:01:
4a:ce:e2:59:3c:7f:d4:3b:f4:76:fa:c0:f3:6d:33:
1c:b3:d4:2f:b4:db:cd:5a:57:5a:36:4d:bc:49:0c:
c6:4a:55:75:e6:4f:f5:ce:0c:56:33:dc:a9:65:b2:
64:8a:65:e7:ca:a7:f5:88:35:12:c9:62:07:1c:bb:
85:ce:8c:26:62:af:2a:ea:13:02:b1:70:ac:62:eb:
81:bf:65:cb:3f:6c:9a:85:6b:1f:26:30:4a:c4:14:
f2:c9:2a:2d:ae:60:61:37:f8:60:f5:c3:7e:a9:eb:
59:95:78:32:37:78:01:b2:db:4d:f6:3e:37:21:a7:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:39:2B:24:45:5C:FC:C6:75:65:84:23:81:A4:48:85:8C:C1:1B:EF
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:3a:da:44:94:ae:b5:05:6e:52:87:5f:13:b7:2e:f8:93:14:
09:c4:21:d2:46:93:a2:9c:14:c2:2a:94:10:53:9c:6d:7c:ca:
ac:6f:b5:61:8e:5c:ce:ee:9f:92:55:56:3f:ae:1d:86:e4:ba:
a5:9e:f9:2d:15:be:72:b9:12:db:47:87:49:61:21:69:a0:fb:
2d:f5:0b:e0:b6:42:f2:7f:45:80:77:41:ca:27:38:f9:1a:24:
05:cf:55:70:16:e1:14:86:f9:38:c7:07:07:b2:7a:a5:60:56:
92:0b:fd:3d:aa:2f:25:22:61:8f:31:df:1d:80:a2:ac:9a:db:
5f:78:bd:90:7a:44:e6:7a:3d:df:3d:d6:19:f0:81:28:aa:8a:
d4:ac:a3:80:5d:3e:15:e7:c2:9a:f7:3e:83:72:be:de:68:c8:
5d:e9:2a:22:f4:6f:85:5a:86:bf:09:4e:0c:7a:c3:71:82:02:
63:e6:7a:6e:3c:18:c6:38:65:02:88:09:79:c0:92:4c:bf:47:
26:b9:bc:bc:2e:6a:73:da:f1:6c:f7:b6:76:b3:37:92:e7:17:
32:d7:a5:12:36:87:25:a0:10:98:07:62:97:72:28:3c:31:ce:
a1:e0:46:dd:e5:d9:af:0e:ce:b5:7b:68:cf:e7:29:19:0c:b0:
2b:99:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:19:56 2026 by rpki-client