
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
File: yrA45ZL6UsHkYzhP-TL75bDMcKk.mft (raw, json)
Hash identifier: e/5wajn1+6bQ2k4fpAf/+8noXIdkoMdLoAdREAvWvzs=
Subject key identifier: 9E:26:39:8B:81:64:AB:DB:C3:7E:C7:DC:BF:C7:85:7E:A0:9E:6C:1E
Authority key identifier: CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
Certificate issuer: /CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Certificate serial: 019EBF5AAA8785416DC169617C1E7CB38176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
Manifest number: 03B1
Signing time: Sat 13 Jun 2026 05:00:50 +0000
Manifest this update: Sat 13 Jun 2026 05:00:50 +0000
Manifest next update: Sun 14 Jun 2026 05:00:50 +0000
Files and hashes: 1: 9ZaI8P7W_rtc492x3ky7rPk83Y8.asa (hash: MzLmuEES291ExAirdiJ6+pNE6IoqMZTiHB+WGFxcNOs=)
2: BtoXyxMSDIQKMTy6jmmOzPMifBs.roa (hash: 8KwO1lQ/lrfb32wFNdnAhNa5nkjafPNwoIk1Z923QrM=)
3: yrA45ZL6UsHkYzhP-TL75bDMcKk.crl (hash: fkJQQCzoJcaBp4xyMwqqk1a4KPceK2b9PFFYUyUXTOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:aa:87:85:41:6d:c1:69:61:7c:1e:7c:b3:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab038e592fa52c1e463384ff932fbe5b0cc70a9
Validity
Not Before: Jun 13 05:00:50 2026 GMT
Not After : Jun 14 05:00:50 2026 GMT
Subject: CN=9e26398b8164abdbc37ec7dcbfc7857ea09e6c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:dc:dd:31:d6:b1:52:eb:a0:1a:87:4a:5e:
7b:14:e5:05:4b:d8:01:e2:20:fc:be:92:d2:11:36:
6e:78:d0:a2:bc:a5:c5:95:33:3a:c6:14:dc:1b:42:
05:6d:70:b1:c5:e1:71:e1:31:00:9f:5e:4b:fe:e8:
32:fd:62:c6:60:81:1b:10:c5:73:50:7a:40:7d:41:
93:87:1e:21:4c:d4:53:f9:ff:61:dc:11:9e:25:67:
f5:ab:ae:0c:82:df:1c:88:49:ba:c5:be:3e:65:1a:
7d:f4:13:e6:7d:64:dc:84:cc:0f:d6:e4:7a:c0:b8:
e4:f4:51:64:c5:b8:af:a2:0b:5f:99:62:76:b3:26:
cf:b8:57:0d:c5:bc:da:0e:29:a3:0a:84:ee:27:b0:
18:5a:c2:3b:02:22:25:6c:44:09:50:34:52:58:d7:
49:d3:50:14:a6:2c:e7:f6:c1:2b:12:59:78:ca:36:
01:06:e3:54:e7:46:a7:80:fc:90:4a:8c:92:30:de:
1a:9f:66:bf:b8:df:79:70:2d:9c:21:a0:4f:87:9f:
7b:90:5f:1f:91:81:6c:0b:11:fa:6f:a0:26:4a:73:
38:05:a1:cb:e6:49:6f:91:99:23:f6:9d:41:a5:7f:
85:f3:f3:b1:16:af:e2:0d:70:f2:93:f3:80:1c:b2:
af:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:26:39:8B:81:64:AB:DB:C3:7E:C7:DC:BF:C7:85:7E:A0:9E:6C:1E
X509v3 Authority Key Identifier:
keyid:CA:B0:38:E5:92:FA:52:C1:E4:63:38:4F:F9:32:FB:E5:B0:CC:70:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrA45ZL6UsHkYzhP-TL75bDMcKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/71d667-11f8-4a6d-849d-897a4cc92922/1/yrA45ZL6UsHkYzhP-TL75bDMcKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:a8:69:e8:50:69:12:12:ab:50:a5:78:49:b5:78:db:89:
39:1d:88:d5:1a:55:45:61:ec:df:63:c0:35:a3:1a:80:1e:1b:
cc:c1:74:ad:47:2d:8f:f1:c0:ce:c3:5b:e2:f4:3d:e0:87:74:
7f:e7:13:1e:ec:c3:7f:b0:4e:7e:3e:d1:47:68:e3:c6:aa:0e:
dd:67:1f:e1:ab:97:84:56:36:52:87:15:66:73:a3:3b:ae:e9:
85:71:55:a1:1e:79:5b:ff:5c:24:c0:d1:1e:81:d3:72:1c:08:
9e:22:f8:1b:fe:8b:20:ec:15:05:73:88:fa:4a:7e:89:61:b1:
6d:8c:2f:26:2b:44:99:e0:3c:92:0b:16:b5:39:70:48:23:85:
fa:f1:7f:8a:a5:be:06:db:01:8c:e6:97:a7:f7:ff:d2:53:c1:
1b:64:46:46:af:36:4b:15:ef:db:fa:96:b5:f7:e4:77:2e:7b:
da:37:88:cc:62:bf:a4:49:2b:54:ba:da:a8:05:86:10:04:0a:
76:ac:b2:87:ed:ae:b9:94:d0:72:b4:25:ba:11:dc:18:8f:bb:
7b:99:7d:f3:bb:d9:13:0e:73:b3:f8:38:60:bb:93:2b:23:41:
65:fe:52:0f:9e:cb:8d:3c:22:cb:04:de:47:25:ad:b9:80:bf:
76:5e:4b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:16 2026 by rpki-client