Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
File: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft (raw, json)
Hash identifier: IzxpZ+5KfMMx09OEzB5D2ARA1fvqIGf8dA27LRFpRkw=
Subject key identifier: 79:C3:61:01:E2:C0:8B:8B:78:E4:A1:14:06:3C:95:FB:82:5B:CB:BE
Authority key identifier: F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
Certificate issuer: /CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Certificate serial: 019EC2245F53F7AD63B1A8FD3255BAD7DB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
Manifest number: 05C2
Signing time: Sat 13 Jun 2026 18:00:24 +0000
Manifest this update: Sat 13 Jun 2026 18:00:24 +0000
Manifest next update: Sun 14 Jun 2026 18:00:24 +0000
Files and hashes: 1: 1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl (hash: jlih360NlLEqSnfxbLj03XOrt/BBYhNpBxPte35+ilI=)
2: 67fn5GTCeyuZQBLDAbthDHukFBc.roa (hash: mGoog7qE1SUu5tq0Qw3ikg4XEdKFRtMMptWXJMMEWPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:5f:53:f7:ad:63:b1:a8:fd:32:55:ba:d7:db:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f98669d31a14dbdc5077159cf0a65353bfbfa20a
Validity
Not Before: Jun 13 18:00:24 2026 GMT
Not After : Jun 14 18:00:24 2026 GMT
Subject: CN=79c36101e2c08b8b78e4a114063c95fb825bcbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:79:a2:33:9e:f9:88:c3:7c:3a:7e:87:cf:df:
b1:01:8d:e9:ab:cb:d6:5b:28:ad:f0:9b:98:58:c6:
53:7c:56:b2:06:39:62:92:c1:a0:5d:37:30:f3:3c:
84:4f:3b:88:0a:ef:21:b1:0c:8d:24:6c:b6:6c:9e:
5b:3f:d0:5f:88:10:99:69:69:44:9a:8f:80:87:14:
fd:89:19:b3:c4:21:50:86:f0:82:3d:57:82:64:fd:
c2:61:1d:0e:76:a5:3f:51:f6:95:84:53:56:44:e9:
4f:47:cf:f7:06:e6:a6:29:d0:e0:c3:43:41:50:25:
59:e5:4e:3b:35:96:5f:37:25:75:c0:20:47:6f:07:
1d:e4:f1:6a:d0:64:a0:1e:4e:fa:82:d7:80:0e:d3:
6c:69:24:5b:67:ec:2b:b3:71:71:4a:85:66:d3:80:
47:fb:e0:12:45:eb:e9:29:d9:a0:68:1c:eb:4e:a8:
1b:07:da:6b:03:a6:f1:82:0c:cb:1b:9c:24:50:f6:
bb:9a:bc:d4:0b:a2:e0:c1:23:fc:71:d9:e8:82:03:
11:14:1f:58:fc:3e:dc:c7:b0:bb:dc:b6:1f:0c:20:
59:80:5e:58:10:e8:c2:a0:63:0d:49:3a:12:c3:d2:
76:3e:0e:83:40:20:93:7e:cd:b7:89:c3:1f:9a:4b:
73:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C3:61:01:E2:C0:8B:8B:78:E4:A1:14:06:3C:95:FB:82:5B:CB:BE
X509v3 Authority Key Identifier:
keyid:F9:86:69:D3:1A:14:DB:DC:50:77:15:9C:F0:A6:53:53:BF:BF:A2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YZp0xoU29xQdxWc8KZTU7-_ogo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2b417d-2869-411f-aeda-4a05bac5265f/1/1-YZp0xoU29xQdxWc8KZTU7-_ogo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:db:62:98:bb:9f:35:9a:77:e3:07:e8:0c:ec:b7:da:65:
ea:9a:5b:29:7f:7d:d4:54:14:9d:59:71:57:cf:07:32:a3:e8:
94:6c:d6:d1:db:c0:f5:0a:42:77:a9:4f:42:e5:c2:c6:f0:4e:
6f:c0:f0:b1:f4:27:2e:5e:21:4c:d5:f6:6b:b0:90:86:e8:f7:
24:48:2f:bf:81:d3:05:c0:26:c0:74:8a:f8:ba:71:b5:c6:07:
98:c8:66:22:a9:fd:3c:f3:2c:7d:88:ef:de:7a:c7:7f:70:63:
37:60:fe:6e:06:06:b6:10:3f:c2:23:1a:e2:8f:20:b5:18:85:
8e:a3:d1:dd:48:49:f3:4c:6c:df:03:2d:b1:f5:77:0e:c5:ef:
0d:66:33:dd:90:eb:0a:ac:43:0a:5c:6d:f7:e4:ce:5b:00:b5:
7b:21:1d:17:52:76:17:ca:ad:bf:44:d4:4d:38:8e:41:66:17:
98:91:ca:fb:11:f5:f4:69:4c:50:98:21:d6:f7:09:81:4c:e0:
2c:7b:da:4d:8c:da:9a:90:3a:06:60:7d:2b:84:16:5a:b9:77:
13:5a:8b:19:09:fc:12:62:df:7a:5f:58:ce:9e:9f:20:1f:c7:
62:57:ea:2e:d6:cc:e9:ea:35:3e:76:2b:1c:ea:e6:08:bd:19:
1b:ac:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:58:42 2026 by rpki-client