Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: NjI3wRiDdPL6ecAYgiBO0VFpU8tyd+l8GQwjhFW+8Ug=
Subject key identifier: 84:BB:9B:6F:71:14:54:6A:5F:C5:C7:AD:DB:A2:27:F0:9A:B6:1A:C6
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019EBF5B2861492DC58E836B4FB10E2E8627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 143A
Signing time: Sat 13 Jun 2026 05:01:22 +0000
Manifest this update: Sat 13 Jun 2026 05:01:22 +0000
Manifest next update: Sun 14 Jun 2026 05:01:22 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: F+FXpI5TiKzgSuIs6JPtDE7Sz4bep8EFU9vMlzH8TF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5b:28:61:49:2d:c5:8e:83:6b:4f:b1:0e:2e:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jun 13 05:01:22 2026 GMT
Not After : Jun 14 05:01:22 2026 GMT
Subject: CN=84bb9b6f7114546a5fc5c7addba227f09ab61ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:2c:60:8b:05:15:84:bb:a8:81:77:4a:5d:
e7:dc:33:94:1e:00:08:1e:ff:2a:6a:1a:ac:d9:e9:
af:f7:7c:9b:5d:c0:17:a3:19:e9:58:7b:4e:ac:95:
dd:c3:da:05:d0:ae:52:cd:c3:e6:3e:ad:5d:5e:a1:
4e:68:a0:fb:4f:47:a7:5b:9a:68:95:4b:6a:d9:fd:
87:b1:56:a4:f4:e1:d1:39:74:bc:5b:33:2b:2d:b8:
ee:48:3e:cd:57:13:93:03:7c:45:e7:40:80:ac:45:
5c:cb:d4:a2:fb:b1:91:6f:99:62:fe:ab:bb:18:72:
f3:61:52:2f:34:aa:9e:06:2b:b0:9c:6f:e8:40:98:
5c:f7:8c:8e:9f:a7:2d:25:89:c5:1c:2c:51:12:5c:
15:87:89:5e:2a:c3:f9:72:fb:33:a2:28:01:e6:6e:
7e:3d:b3:12:d4:1a:ee:3a:af:c0:68:74:03:26:56:
af:91:f8:9d:ab:68:83:74:88:85:02:d1:7b:19:b0:
5c:a8:25:d4:cf:69:dd:4d:e5:87:a1:1e:a7:e7:53:
18:7e:1d:5b:d7:36:2f:a3:59:5a:1b:e6:dc:f7:f3:
82:65:98:64:f2:ed:27:1c:08:a3:b0:bb:04:5a:fc:
ff:6a:af:fb:c0:bf:8e:9e:71:f8:d8:04:35:3c:34:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BB:9B:6F:71:14:54:6A:5F:C5:C7:AD:DB:A2:27:F0:9A:B6:1A:C6
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1d:ac:8e:5c:d7:f9:6e:57:4c:c3:44:d0:83:cf:04:cb:81:
90:06:d4:ae:5a:c1:a8:39:c6:94:89:cc:a6:00:69:28:80:74:
8e:fa:63:34:d0:ac:6d:54:0e:6b:e7:16:a9:94:79:a9:8b:b1:
32:d1:14:27:d6:9d:6c:23:f2:76:58:f5:3a:cb:75:ec:6b:74:
ec:69:2e:01:03:3e:e0:b8:55:bd:0b:45:ad:fb:ce:02:d5:a4:
65:9e:0a:ba:0f:0a:a5:55:35:44:4b:a2:e7:4c:da:76:1a:c3:
b5:db:5e:27:cb:b8:45:f8:e9:77:62:6a:87:3f:e9:52:38:91:
c2:aa:4a:7f:53:26:0f:c7:2c:01:2c:b4:03:a9:e5:fb:f0:2e:
6c:a0:57:5e:d9:f6:f1:98:e3:30:5e:e9:d1:f7:f2:a0:b6:c7:
7f:46:fe:28:ca:78:be:79:71:d8:20:5a:88:b8:1c:72:a8:a4:
b5:ad:e7:26:47:e8:47:84:67:b9:1a:ad:4a:07:d8:0e:89:d8:
eb:1b:8c:f3:15:18:8d:20:b1:14:88:02:85:bf:90:68:8e:ba:
39:74:69:a2:59:20:df:ee:ef:06:76:b9:f3:75:7c:2f:46:d4:
db:08:68:ec:54:82:f7:22:e1:bc:75:67:40:6c:be:a5:f9:b8:
89:8d:80:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:18 2026 by rpki-client