Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: K7kdLKPM53ZI7x0wA00SrAQY/dcrUM+D7YZIu/J1yQY=
Subject key identifier: 95:20:72:4B:1E:30:19:F2:76:17:CC:BC:C5:F5:6A:CF:AB:54:2E:D2
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 019ED3F3FED168D241087A7DA2B3E3F86A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 09B3
Signing time: Wed 17 Jun 2026 05:00:43 +0000
Manifest this update: Wed 17 Jun 2026 05:00:43 +0000
Manifest next update: Thu 18 Jun 2026 05:00:43 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: KL4xm7DET61cCrvwyEiItZaW4zaaddpxUsG/8lqJyH4=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f3:fe:d1:68:d2:41:08:7a:7d:a2:b3:e3:f8:6a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Jun 17 05:00:43 2026 GMT
Not After : Jun 18 05:00:43 2026 GMT
Subject: CN=9520724b1e3019f27617ccbcc5f56acfab542ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9d:d8:41:76:60:42:b2:0c:37:35:8b:87:45:
6a:22:0f:b8:25:82:66:5f:49:76:2b:82:b8:ae:75:
00:75:4e:1e:b3:b5:1e:38:b3:88:6f:9c:50:ad:f7:
c5:89:68:da:f4:77:67:38:61:14:ec:ff:3b:be:4e:
34:1e:86:ed:f8:bf:61:e5:50:44:d1:2d:d9:01:83:
4e:69:45:e0:c4:3c:4b:c3:c5:cd:cf:9d:99:3d:df:
4a:68:0b:9f:ba:70:db:67:e3:90:2b:65:36:fd:60:
ce:8b:ba:f5:d6:73:dc:18:b3:cd:34:6f:b5:8f:1c:
d9:61:d0:a4:7c:59:f6:33:0e:70:57:db:99:a1:e0:
ab:05:9e:4b:d5:21:6b:50:6b:f6:cb:cc:8d:8f:84:
1f:ad:50:ca:d3:00:4c:83:dd:46:6f:6f:02:c8:6c:
96:d6:13:1b:ae:a7:e6:f1:a6:53:9c:09:2d:b4:b1:
f5:5b:99:32:27:51:a3:8f:2d:3e:d7:88:96:bf:88:
95:47:f8:61:c8:a6:87:47:cf:6e:10:14:cd:f9:72:
c3:18:40:4f:d9:39:13:67:1b:b2:d7:70:d9:65:4f:
be:ae:84:e5:f4:83:52:80:54:b9:94:b4:c3:32:f4:
b1:f5:40:3f:3e:89:1c:db:0e:59:65:dc:57:95:5c:
54:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:72:4B:1E:30:19:F2:76:17:CC:BC:C5:F5:6A:CF:AB:54:2E:D2
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:66:1f:f9:9f:db:16:59:5e:18:2d:88:66:17:9e:27:94:a4:
0c:9d:f6:6b:d1:7d:9d:d4:76:57:ce:af:57:8d:0a:dc:bc:b6:
7a:c2:d3:91:e2:72:a5:7c:65:a6:2a:eb:2a:70:57:3f:06:98:
ee:04:30:30:27:fc:37:24:ec:0a:92:02:61:f8:23:bd:98:68:
d4:a2:c2:52:88:bb:17:14:a8:18:87:60:e3:8e:6a:a6:65:3a:
d5:3f:9e:b9:bc:e4:4e:da:fe:89:20:5f:c8:1c:b3:ce:b9:4f:
36:de:66:2f:64:7e:46:93:99:17:dc:08:f7:cb:a5:e2:b1:fa:
8e:97:ba:a4:42:1f:dc:36:61:95:e3:26:2e:4a:90:c5:91:e0:
ac:87:ef:b2:50:c4:63:29:ce:ae:19:14:52:2e:cc:b9:0c:bc:
36:34:50:e3:c8:2b:5f:2c:18:20:bf:3f:d1:46:83:a3:c1:12:
f0:4c:60:b2:b1:8e:7c:e9:0b:92:6d:2d:aa:d4:c0:e0:49:cd:
5a:fb:82:16:07:ff:8a:3b:c7:73:d1:78:96:f0:75:1d:95:83:
73:80:e9:56:e8:e2:fa:d8:72:4a:a3:0b:b8:e8:7d:8d:2f:17:
11:91:47:1e:06:8a:b0:a0:55:1e:50:76:3e:d1:a9:de:e4:49:
bb:e6:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:42 2026 by rpki-client