Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: kix1saVVudUNKDO6pMEoP3zNT4iaVMGogXaQgXkQkgY=
Subject key identifier: EF:42:EA:5C:9B:05:41:97:16:09:29:17:17:42:D9:4B:E0:18:23:94
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019EC480E2B17CF037C979BEEA9810F796E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 13FA
Signing time: Sun 14 Jun 2026 05:00:41 +0000
Manifest this update: Sun 14 Jun 2026 05:00:41 +0000
Manifest next update: Mon 15 Jun 2026 05:00:41 +0000
Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 2uolSfU/n2g9onbmUCpqCzF8WnswwSd64fON47M7F28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:80:e2:b1:7c:f0:37:c9:79:be:ea:98:10:f7:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Jun 14 05:00:41 2026 GMT
Not After : Jun 15 05:00:41 2026 GMT
Subject: CN=ef42ea5c9b054197160929171742d94be0182394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:68:6c:2a:ed:c4:dd:16:29:a5:e4:5c:6a:
ed:20:16:97:74:3c:16:33:e5:e6:be:2b:7f:42:47:
6f:31:be:b4:1b:36:32:46:f1:60:1c:53:19:82:97:
f5:ca:eb:0e:23:58:ed:26:9c:7e:b1:b0:66:04:e2:
7d:f0:34:d4:94:1f:4d:51:9d:75:a1:23:fa:4a:ff:
8d:1b:dc:7e:89:bf:27:90:6e:c3:96:12:2c:ad:80:
66:e6:db:06:89:a6:e9:79:35:a1:3f:af:54:96:07:
15:eb:e7:66:c6:8a:68:23:d0:2e:80:3f:a9:15:7b:
19:d6:f8:6a:fa:42:0d:89:9a:8a:08:15:c9:9a:1b:
f9:d4:08:33:88:7b:2e:9b:ef:84:d0:da:4e:d5:ea:
6b:14:41:02:12:0c:53:c8:06:4e:89:a1:48:51:12:
4f:42:b4:c6:6e:df:6d:78:a8:49:b4:95:fa:be:73:
a2:ef:42:3e:33:52:78:32:b0:42:09:f3:45:98:e1:
89:72:ab:00:7c:cf:e5:31:8c:91:40:9b:bf:75:6d:
3d:3a:1f:b0:64:eb:e2:37:d9:4f:01:a7:58:fd:66:
2b:68:36:17:6c:79:03:34:a4:da:68:31:e2:2e:47:
62:68:55:8b:14:de:ff:a2:70:3d:f4:80:3a:6f:66:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:EA:5C:9B:05:41:97:16:09:29:17:17:42:D9:4B:E0:18:23:94
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ca:3a:4b:7c:ba:97:71:a4:78:d8:db:7a:17:0f:ab:34:2c:
99:a8:d7:83:73:5d:f7:67:bb:1b:6a:6f:91:ee:65:97:ba:c5:
f4:28:47:da:b5:d6:05:d2:53:36:13:e8:29:df:93:40:24:fd:
2b:84:46:b9:b5:26:7f:05:bf:7f:12:fa:fd:69:d2:f8:21:e8:
e9:97:52:ee:df:05:e6:70:3b:48:fe:48:ff:c5:a3:32:62:de:
9c:6e:20:81:ca:82:d4:56:4f:29:15:a8:f6:6e:8c:76:cc:12:
34:e8:a3:83:50:88:31:cb:1a:eb:5d:ed:30:26:d5:46:87:a3:
b8:46:45:c6:4c:29:86:68:be:6b:cb:a0:f2:9e:65:10:25:d4:
6f:96:c9:98:fb:8f:22:d1:a9:ad:d0:c5:0c:5b:8c:cd:a6:f5:
87:7b:b9:1b:0a:ad:8e:f6:09:1a:b6:9c:2a:12:d6:b6:b9:ef:
20:83:04:07:b5:74:1e:83:17:0d:e3:1a:57:e1:26:07:35:a6:
af:d3:35:a1:01:37:cd:1f:47:36:af:51:ab:36:53:35:25:9d:
99:38:f1:80:93:dd:3b:a8:e0:f7:c3:58:30:09:3e:9f:21:c8:
27:44:3c:9b:30:5b:e0:d8:e0:53:3a:eb:e4:40:08:01:ba:5a:
e2:f2:47:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:09 2026 by rpki-client