Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File: yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier: SIdPdp4ofEknkyzWAH/mwRgriBGhNO3aySsLuk5Kyy0=
Subject key identifier: DB:94:CD:A7:BD:57:A9:73:69:91:C4:F5:08:0E:64:35:42:98:E4:4B
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer: /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial: 019EC148FFABBA0A7D3CF76B2B14ED0CF41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number: 1966
Signing time: Sat 13 Jun 2026 14:00:47 +0000
Manifest this update: Sat 13 Jun 2026 14:00:47 +0000
Manifest next update: Sun 14 Jun 2026 14:00:47 +0000
Files and hashes: 1: 5L2g6nDW06irIUq83phIZ53C1IA.roa (hash: JbdTWcKtL0GeFigj6GMvD4sLu582tKI8ZbvVxkhlvCI=)
2: AeVrZINs9Mwgw--CeQuhBL48V9o.roa (hash: tOULrw1qQEUkRt4Egsmhx0JNl0n1ptX0coLHQFBvARg=)
3: AzSbSNEJjHOAmPD-lEIirqfh5dg.roa (hash: ZHEBSxcyGtvAyqmQJ49m4K5zjUBmt85+2wE9Fs3EpwQ=)
4: UcKG60X0bY06GvhRzuyCZXPPpEs.roa (hash: CiNS7tumSY9kA1IK1COc42ZCVYSO1Vjftuq3lKqZ0Tg=)
5: VB7XO0ymTrFmXwqFwsQgqVfLeRw.roa (hash: 7CJ7QikKkqwN0XgN8t0cIqxMckNcSYUmDfhH8CM9bnM=)
6: c0IiT_bhf4sAeq2ZJ69mDEiSeKE.roa (hash: WC6msRGLImOXKWuJcuzV4dtFJSxBDOZv82faENvIVf0=)
7: f-sruYLmLAQF45fvBkTZ4sUoHrs.roa (hash: 8P04B1C9VS8sjuPoAqAxmLe2sS/eh9nL22FO4SV0ZsQ=)
8: rGoiQCmdvS4XmAkVedOPWx6pvfc.roa (hash: NENGKfJhaegTvTeAkQES6pzY2mWvrE4Gty5ShbLzPEM=)
9: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: 9H6EFL4EEqEAb1fVHAgXHjsV012CN1AfQcCTYey9E60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:ff:ab:ba:0a:7d:3c:f7:6b:2b:14:ed:0c:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Validity
Not Before: Jun 13 14:00:47 2026 GMT
Not After : Jun 14 14:00:47 2026 GMT
Subject: CN=db94cda7bd57a9736991c4f5080e64354298e44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:db:2a:c0:5a:7b:0a:29:81:41:62:54:d1:
d5:dd:23:f7:c7:1a:48:6a:45:9d:9d:f2:52:db:e4:
45:59:70:c6:fe:77:13:1d:c7:f9:46:8d:e8:08:3f:
3b:c0:25:dd:2c:b4:b9:61:02:4a:c0:14:2a:f1:a6:
af:a2:e6:39:da:66:b8:81:67:09:dc:73:f8:1a:67:
80:47:d1:c0:0a:ee:61:d0:85:7c:48:4e:7a:39:a5:
39:83:03:fa:48:c1:88:c9:27:f4:03:52:fb:99:e3:
d6:50:6d:9c:19:f2:cf:44:ae:61:12:b5:10:41:0c:
01:49:bd:2d:14:24:2b:2b:96:f1:4f:a5:e9:ea:e7:
ba:d7:29:32:8e:1a:d4:34:77:34:7b:58:68:10:8e:
8c:59:e7:3f:9c:d7:d5:51:cf:30:08:34:10:ba:d8:
e2:aa:b7:ac:fd:1d:1c:2e:ca:0a:33:ab:34:4f:7b:
df:2e:0a:3b:64:94:64:36:b9:c8:9e:32:2e:49:9c:
55:00:2c:4d:74:40:45:98:a3:c7:45:01:be:0d:66:
64:0f:47:f4:8d:28:44:8f:60:05:0c:36:a1:97:fd:
9e:ed:25:3e:0e:55:0c:0b:e0:cf:12:79:3c:72:f0:
e0:bd:9c:47:cb:fb:83:38:0d:52:75:37:29:f1:6f:
2c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:94:CD:A7:BD:57:A9:73:69:91:C4:F5:08:0E:64:35:42:98:E4:4B
X509v3 Authority Key Identifier:
keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:b6:de:88:5a:98:49:ca:00:3c:cd:4d:10:b5:e7:85:05:
7b:2f:9c:b1:74:1c:ab:79:26:be:39:80:43:c0:07:3b:59:12:
be:76:81:9a:17:3b:8d:c2:01:f1:fc:5d:2c:a2:19:d0:22:68:
c0:fb:90:f3:cd:60:c7:9e:3c:42:a3:9c:37:30:ab:7f:b5:b7:
97:51:43:8c:e4:90:e6:c7:35:32:d1:1f:7c:56:3c:b9:5c:c3:
15:fc:ab:09:44:e5:7a:89:a4:62:71:a7:13:fc:e9:eb:41:fd:
5f:5e:68:8c:f7:40:15:75:23:e9:8d:b9:a3:80:8f:7d:60:c2:
d5:7a:f7:01:30:29:1c:b8:78:ce:3e:c3:ab:30:de:c0:a5:c7:
47:63:8b:48:90:8f:28:a4:b8:97:9f:b5:c3:47:42:5f:3c:16:
04:3c:b9:30:74:d8:c8:b4:67:83:52:7a:14:54:96:18:df:9c:
fe:38:7e:13:ca:d6:aa:23:e0:99:84:95:f7:79:4d:60:81:5c:
44:cd:3c:39:28:b5:38:18:c9:76:3e:7b:c4:8c:57:b5:58:24:
82:1e:c7:19:54:03:cd:eb:5d:47:0c:70:e6:2a:7f:fc:90:e4:
ec:5f:a1:f9:d1:49:49:35:ad:33:bf:b7:b4:0b:a7:ac:02:c4:
5a:d7:0e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:47:20 2026 by rpki-client