
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: 8Oja9Kz9JUuFZMlpUhbzkwvCFkFCJArUjwhi7ssRTbU=
Subject key identifier: 42:F8:31:2F:B6:92:08:CB:4B:01:7A:82:A7:40:D0:20:F2:DD:35:B8
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 019EBFC86D5CCE2A6201A1DB7A67466C44F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 0858
Signing time: Sat 13 Jun 2026 07:00:43 +0000
Manifest this update: Sat 13 Jun 2026 07:00:43 +0000
Manifest next update: Sun 14 Jun 2026 07:00:43 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: dxoq9xEKwrWntR91jLffxIU3H+Nl+WuuqJ9nS0wbdoI=)
2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:6d:5c:ce:2a:62:01:a1:db:7a:67:46:6c:44:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: Jun 13 07:00:43 2026 GMT
Not After : Jun 14 07:00:43 2026 GMT
Subject: CN=42f8312fb69208cb4b017a82a740d020f2dd35b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:d8:07:db:4f:0d:82:d6:40:84:33:12:92:
f0:aa:96:d8:4e:8b:23:87:14:22:93:8d:01:2b:45:
e2:c1:3a:6c:e9:fb:2d:1b:1e:81:47:5a:6c:2f:e4:
3e:8b:1f:78:62:79:0a:8a:eb:7e:99:77:35:7f:4b:
e8:3d:fe:5c:fe:2d:aa:b3:27:ea:0a:87:08:8b:2c:
5a:c5:ee:be:87:b8:7d:dc:32:24:ad:9c:94:51:a4:
e5:8e:53:a4:af:d1:38:c9:44:02:b0:c9:a1:2a:27:
aa:bd:44:71:72:f4:b1:b4:ff:ad:60:4a:a8:f0:b3:
08:9e:f7:a9:2a:9f:b6:ad:2e:a7:55:d0:c0:80:c2:
2f:4c:2b:f7:36:c3:54:f9:41:35:17:e6:bc:5f:9f:
91:ac:ef:22:f2:36:ee:ec:93:07:9e:de:a0:a0:a3:
58:66:0f:27:d7:d0:08:57:ac:a0:48:63:85:59:3f:
96:25:61:36:26:a5:7a:80:8e:b0:25:fc:87:52:66:
ef:38:c0:f6:35:0a:c6:79:27:d0:fd:68:10:62:8f:
75:e5:3b:01:5b:36:69:13:fe:cb:37:96:ca:e1:5a:
c5:42:de:a2:b0:87:5c:fc:38:19:4d:90:9f:c1:f7:
74:e3:1b:18:5c:5d:07:d7:9c:d3:47:8f:7e:34:00:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F8:31:2F:B6:92:08:CB:4B:01:7A:82:A7:40:D0:20:F2:DD:35:B8
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:14:8b:3e:69:a5:57:05:72:c3:eb:b9:68:4d:39:7a:cb:97:
d0:78:54:49:eb:2f:e4:c3:57:25:02:a4:d5:4e:f4:56:97:00:
39:1e:26:2b:5c:f7:5e:22:2f:e6:bc:bb:16:e0:21:7a:d8:30:
f8:f5:99:34:5e:f9:57:f0:57:c0:19:20:51:ac:e3:01:a4:84:
0b:db:5b:60:1f:df:fd:7c:a3:f4:85:a5:c2:52:6d:54:66:22:
4b:e9:fb:b4:31:4d:23:b4:66:c5:de:90:5c:12:1f:4f:4f:f3:
91:da:e1:fa:1b:c5:f2:cc:72:f2:04:72:04:6e:bd:c2:eb:14:
4c:91:d7:b4:00:76:aa:76:f2:e3:0c:9a:31:87:cc:91:b2:01:
89:c3:a2:55:e8:50:33:00:12:70:4e:44:c3:f7:c5:a7:a7:31:
2c:08:ba:44:55:37:01:a4:e6:f1:63:d1:1d:57:0a:bd:84:cf:
0d:30:43:c4:74:b0:5b:e5:66:9c:04:a6:b9:61:9e:22:e1:65:
5b:79:d5:34:00:c5:e3:ed:39:fb:02:37:5e:d2:81:99:0c:c4:
70:77:24:3e:dc:21:9c:ac:86:b4:2d:79:e7:2a:2f:c1:96:a1:
e4:fc:0b:c5:fd:94:a5:d6:21:18:a2:00:0b:ff:39:1d:bb:36:
29:a9:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:54 2026 by rpki-client