Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
File: _Yk4EweuXjsbqGWM2n7iraQUFEc.mft (raw, json)
Hash identifier: hdsUNHY6An8vbI9WUW+vIfvu1nOEpYd8OQie50Je0xw=
Subject key identifier: C8:74:FB:21:C7:5E:9A:D9:FF:84:4A:B9:37:D5:DE:72:CF:62:E5:3C
Authority key identifier: FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
Certificate issuer: /CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Certificate serial: 019EC48080CB871A6F5CD3048CD5EBB78872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
Manifest number: 147C
Signing time: Sun 14 Jun 2026 05:00:16 +0000
Manifest this update: Sun 14 Jun 2026 05:00:16 +0000
Manifest next update: Mon 15 Jun 2026 05:00:16 +0000
Files and hashes: 1: _V1LSsZtamsE4WXP60Yw8QNvv70.roa (hash: 86294W5FbZlicyPxaf1Bh5Vh3kJ1iu3Y1KxTGDfYWAk=)
2: _Yk4EweuXjsbqGWM2n7iraQUFEc.crl (hash: m81YfUW3Ornj2e7Gak/2ZJJlPzDIk/7ZNm45E/W40JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:80:80:cb:87:1a:6f:5c:d3:04:8c:d5:eb:b7:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89381307ae5e3b1ba8658cda7ee2ada4141447
Validity
Not Before: Jun 14 05:00:16 2026 GMT
Not After : Jun 15 05:00:16 2026 GMT
Subject: CN=c874fb21c75e9ad9ff844ab937d5de72cf62e53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:3c:39:fa:37:5d:e5:2d:7d:95:42:60:7c:
e5:c9:6d:54:73:12:b0:56:3f:e9:f3:be:be:02:2b:
27:da:eb:16:53:ff:d7:70:41:5b:68:de:16:24:27:
51:29:b1:3c:78:4e:0d:71:5d:03:65:e5:5b:84:96:
91:00:db:1e:af:2b:89:b8:07:ef:1c:12:e9:29:b7:
1b:f8:1c:94:3b:60:55:34:40:16:5b:b5:87:48:91:
24:b0:8f:b4:4b:a0:8d:29:f5:f9:47:73:4c:22:93:
79:2d:ab:f0:20:7f:b9:ad:14:e7:cd:94:80:cd:52:
ba:c3:66:f5:bb:95:c9:bb:5d:33:1f:cd:8e:8c:fb:
82:20:75:5f:3d:25:d8:9b:dd:e9:be:c1:f3:47:26:
7c:1b:aa:5f:23:2b:27:ce:23:39:43:e4:e8:10:d2:
2d:10:ad:01:8e:20:bf:e3:7e:ea:9d:6a:31:a2:b6:
38:d6:40:28:fd:ee:3a:0b:e5:60:58:65:75:c8:24:
7b:f2:70:99:35:7a:5f:80:de:fe:b0:a4:51:cd:a9:
bf:d7:e0:1c:4e:1d:33:ad:5e:d2:7c:ad:1a:60:70:
00:4b:b9:fe:3e:35:94:35:75:af:7a:b2:0f:0a:60:
3c:ef:83:4d:e3:3b:1f:0b:e1:5e:a1:98:d8:2e:30:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:74:FB:21:C7:5E:9A:D9:FF:84:4A:B9:37:D5:DE:72:CF:62:E5:3C
X509v3 Authority Key Identifier:
keyid:FD:89:38:13:07:AE:5E:3B:1B:A8:65:8C:DA:7E:E2:AD:A4:14:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Yk4EweuXjsbqGWM2n7iraQUFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/dcf9b7-6d72-475a-baa7-646ee6dfa6b6/1/_Yk4EweuXjsbqGWM2n7iraQUFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:86:96:81:f6:48:be:fc:d1:1a:38:68:1b:c7:b4:ed:b7:31:
62:e3:4a:c7:cc:55:7a:80:23:53:c6:18:eb:13:01:9d:29:05:
d5:b4:8f:be:44:75:c0:40:ee:73:6c:f9:05:da:ed:da:19:8f:
01:3c:40:df:38:b8:d4:bd:eb:84:c1:99:29:34:b4:c2:91:20:
4f:26:ec:62:40:ce:cc:ba:a5:19:6e:4e:f5:0a:11:ae:1e:49:
1b:7e:91:62:00:f1:7c:51:23:6a:21:b9:67:2d:c5:40:3a:8c:
f2:62:76:5f:cf:a5:a8:8d:aa:62:66:ab:e5:c5:37:cd:d5:bb:
b0:52:d0:09:c8:22:77:3a:b5:18:c1:a1:5a:92:5b:90:27:8d:
29:97:57:be:b0:dc:f2:fe:0e:4e:f4:ec:7d:49:c3:1b:5a:58:
8a:35:1b:9a:a4:93:eb:10:24:1c:7a:50:92:cc:94:d2:0b:ae:
c4:80:8c:7f:61:0e:bd:73:33:f3:19:4d:4b:05:b1:1c:03:b3:
f7:a3:e8:9c:a0:e6:1a:d8:be:f5:3e:8f:ea:5c:4b:43:57:79:
8b:45:3d:75:06:c0:3e:32:a1:c7:d0:b8:e7:92:bd:18:36:0e:
b4:e6:65:fc:90:33:b9:82:cd:88:c6:3f:a4:76:a8:20:5b:0c:
dd:67:5f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:12 2026 by rpki-client