Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: 8X2NIP62EjkEpOZwSpky2iq09wnwMU104KdaeKwS3ZE=
Subject key identifier: 28:7E:F8:E9:76:91:F9:56:44:EA:20:69:89:E2:4A:07:52:71:26:0C
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019EE77BF59714FB96A30B1A31BDAD2F4087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 1055
Signing time: Sun 21 Jun 2026 00:02:01 +0000
Manifest this update: Sun 21 Jun 2026 00:02:01 +0000
Manifest next update: Mon 22 Jun 2026 00:02:01 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: eMAP92xh36bGHUaB4wus3TS37xkyAjh/38pkj50dGpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e7:7b:f5:97:14:fb:96:a3:0b:1a:31:bd:ad:2f:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 21 00:02:01 2026 GMT
Not After : Jun 22 00:02:01 2026 GMT
Subject: CN=287ef8e97691f95644ea206989e24a075271260c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:e8:8c:86:e5:de:0a:42:bb:27:6f:79:86:
28:9c:bc:0a:09:54:6f:56:ca:0d:89:b5:63:6f:e7:
91:21:94:e6:bd:cd:21:01:e2:1e:9b:2b:99:d7:a3:
6d:81:a5:77:f2:1a:bd:a3:af:60:8d:40:48:4f:02:
26:b7:73:65:5d:3d:b2:a1:c8:38:7f:45:c5:75:b9:
68:b5:f6:c3:75:52:29:dc:96:8b:9a:94:f6:fd:27:
24:b4:3f:f3:e4:c7:b0:e7:ca:0d:3b:37:fa:60:8b:
ba:41:75:17:83:28:2f:a7:8a:82:80:5a:52:3d:7d:
a5:54:eb:90:19:bc:3c:ff:65:8a:6e:2c:3d:8e:ad:
eb:bd:0b:73:fe:9c:0a:e7:3b:8d:a1:87:a2:3d:f7:
32:5e:ff:e4:09:9d:56:d9:e8:32:95:3b:96:42:0d:
6a:1c:53:f2:a7:54:68:c2:67:ac:ac:92:6b:1c:5a:
67:2f:b0:53:16:f3:9f:ce:3d:01:01:11:c8:3d:62:
c8:71:b0:57:16:49:0d:1e:44:bc:93:6d:34:5f:7d:
c6:f9:4c:e8:11:3f:66:43:7f:e2:4f:d4:70:8e:92:
68:0f:02:1a:a8:00:f1:ae:29:43:b9:89:92:df:6d:
84:03:04:4c:03:a7:13:8b:ec:9c:83:6d:95:61:d3:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7E:F8:E9:76:91:F9:56:44:EA:20:69:89:E2:4A:07:52:71:26:0C
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:d4:c8:de:e9:88:a1:5c:34:71:59:17:ed:8a:43:42:e6:9d:
08:79:11:35:5b:62:7f:c4:83:56:dc:43:70:94:26:b0:0f:86:
69:43:95:6b:d7:e8:2c:b7:d4:32:24:e3:30:d9:45:6e:85:3d:
d0:80:6f:c1:ee:49:a4:84:82:2c:ad:f9:f7:2a:9a:15:f7:d2:
e4:27:db:d9:e0:ff:61:8e:79:2b:13:b2:76:56:64:31:f6:6f:
1b:b9:3e:95:d7:78:0a:63:08:6f:a5:64:2e:4f:60:bd:2c:82:
4e:1e:5c:75:83:2d:45:9a:b5:72:d7:6c:2f:58:8b:c5:97:ef:
d7:c9:4d:b3:2a:65:8e:97:4b:c0:82:e9:87:ed:45:aa:20:27:
74:f3:97:26:0f:57:50:8e:c5:06:7d:e2:30:fb:63:62:57:10:
29:e1:e2:a4:44:35:96:5b:c8:f7:a2:5e:7c:6d:61:b9:3e:0d:
7a:0e:1d:d6:c7:a5:c7:29:9f:12:9c:d1:91:30:7e:20:49:ad:
ba:d9:5d:0d:e4:8a:c0:c0:bf:c0:41:dc:95:c8:4e:23:85:72:
60:60:de:66:c3:8c:c1:c9:5e:84:78:e4:a7:93:c6:0e:1c:ac:
6d:6e:78:76:5e:ad:eb:51:7e:f6:ee:7f:7a:3b:af:a5:74:af:
e6:8d:b8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:20:07 2026 by rpki-client