Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: y01krTu3FqlkFAswhhwdDa7KQQhP7G7I3v8vuCJrUAg=
Subject key identifier: 7D:1A:23:84:B6:40:34:E8:D7:C0:C5:31:CF:C1:09:CB:6D:45:A7:7D
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019ED49988FDCB2BF05549E10407FABAEA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: F0
Signing time: Wed 17 Jun 2026 08:01:32 +0000
Manifest this update: Wed 17 Jun 2026 08:01:32 +0000
Manifest next update: Thu 18 Jun 2026 08:01:32 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: yt4o0SEx0RxjVgBnDJF1yzxH8OrYSlJ6/EfBI03Ybkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:88:fd:cb:2b:f0:55:49:e1:04:07:fa:ba:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Jun 17 08:01:32 2026 GMT
Not After : Jun 18 08:01:32 2026 GMT
Subject: CN=7d1a2384b64034e8d7c0c531cfc109cb6d45a77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:b4:be:5f:f8:5f:70:54:5a:ec:b8:34:f9:
32:91:e6:ce:d2:a4:53:8a:a4:d1:93:df:b5:2c:7d:
66:46:89:da:67:f6:9f:06:d1:97:23:d6:e0:6b:22:
ac:ee:c3:83:59:bd:20:bb:b3:74:14:25:9e:8c:ea:
48:ef:cc:ac:0f:14:a1:5a:d8:2f:87:b9:b7:2e:50:
f1:a2:12:a8:4c:d0:30:28:3a:fe:90:9e:73:ee:dd:
1c:27:e3:e3:bb:9b:1a:64:ab:92:60:d8:61:68:fa:
a4:79:99:12:7d:be:8b:04:d9:96:4f:50:0b:e1:3e:
22:fa:a8:ac:c4:a5:dc:1a:d3:4e:23:15:59:65:89:
c7:69:bb:9f:6a:38:f8:e4:20:b1:7a:22:26:00:03:
43:aa:c5:f2:dc:9f:e0:1c:9f:ad:5f:ed:c0:f2:69:
75:de:56:43:22:a1:6e:77:39:8f:61:28:07:14:41:
99:03:f5:35:be:80:6d:20:23:60:68:da:32:b9:16:
ef:21:60:58:df:8c:2b:5e:a9:79:37:c7:27:c3:37:
97:69:0e:5e:8e:25:d9:11:84:47:77:9d:ad:77:e2:
51:e1:47:b6:70:9c:43:66:de:27:6d:1e:7e:f9:1d:
c6:5f:e7:b0:90:dd:89:d7:95:9b:f1:21:6b:12:a1:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1A:23:84:B6:40:34:E8:D7:C0:C5:31:CF:C1:09:CB:6D:45:A7:7D
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:2c:89:ef:56:9d:74:7c:85:de:cf:3c:d4:1d:b9:a3:d9:
8f:96:a0:05:2d:72:44:e5:17:0a:d9:4b:b7:b5:22:3b:65:81:
fe:df:57:4e:1d:a3:fb:50:6c:8a:d3:0c:bc:e9:00:7d:4f:76:
c1:24:e9:e5:d2:6d:46:e7:cc:d4:04:94:70:5c:30:5a:8c:93:
99:81:4f:5b:2b:29:93:3f:ae:64:ba:b0:32:0f:c3:95:4f:16:
ad:99:37:98:ab:85:4a:d9:49:8f:4e:51:ea:f3:26:11:00:e3:
40:c3:66:00:06:4e:b4:6d:fb:60:ac:00:83:b2:27:ed:85:4d:
57:18:6d:9f:c3:e8:83:36:09:b4:08:34:64:92:23:ef:be:0a:
1e:56:8a:30:2d:6d:60:0b:02:a8:e4:1c:bb:8f:ea:d4:fc:67:
7f:20:4f:6c:36:72:f8:44:54:98:e9:66:b3:4e:e5:74:a5:63:
01:a2:08:03:ec:55:31:12:9f:29:46:91:eb:34:55:76:70:d2:
c2:73:09:27:69:08:b5:3c:74:56:a2:f9:e2:63:02:e5:a5:c4:
5b:d1:69:58:57:a3:36:ad:fc:8c:3b:1f:28:e6:48:02:0d:e9:
f9:23:d1:59:9e:cd:4a:71:e9:93:e8:a5:f2:43:2c:ce:5a:ed:
37:a7:63:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:10 2026 by rpki-client