Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: HEufZuys5XZEHKCh+fCPOat735s3KpQbOKpEX/AoPRg=
Subject key identifier: 15:53:3E:C4:9F:AC:16:02:39:70:19:E9:8A:29:C6:28:A0:3F:18:D7
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019EC17F9201E9102A45D0B079DD06153AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 09AC
Signing time: Sat 13 Jun 2026 15:00:23 +0000
Manifest this update: Sat 13 Jun 2026 15:00:23 +0000
Manifest next update: Sun 14 Jun 2026 15:00:23 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: ZCB3by1vOSHohrDHWApIyQdMgPCc8+xZjDXApLcB11c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:92:01:e9:10:2a:45:d0:b0:79:dd:06:15:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Jun 13 15:00:23 2026 GMT
Not After : Jun 14 15:00:23 2026 GMT
Subject: CN=15533ec49fac1602397019e98a29c628a03f18d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:b6:7c:e2:56:ce:8a:fc:32:1e:2e:ef:94:
68:9a:f1:f9:58:40:4a:9c:c5:31:4e:7e:ba:23:42:
8c:23:b0:48:d7:83:28:bb:0f:b2:34:d8:37:8e:b6:
d3:03:82:d7:a8:36:45:f0:4d:69:48:b6:8f:0f:a6:
e3:52:fc:5f:f1:f1:18:39:a3:20:15:df:ac:61:54:
67:c7:f1:67:0f:63:c1:f5:e0:d4:4f:03:49:69:89:
4f:7f:e3:9d:17:2d:04:37:69:db:1d:4c:f3:fb:cc:
a8:f9:cf:09:ad:a0:e4:81:21:30:78:ad:49:9f:d0:
73:6e:d9:d9:44:3c:e8:9a:84:3c:8f:c6:a1:09:13:
cf:51:c4:f5:37:7f:31:88:c2:45:44:b0:98:89:b1:
b1:88:f8:53:4c:54:c2:cf:2b:57:38:e0:47:44:d8:
dd:c3:8b:80:04:47:af:cc:57:e5:6d:da:23:24:9f:
06:2d:32:f8:08:ea:e1:d8:04:6d:03:7a:14:25:39:
94:77:9e:90:0e:38:d8:e9:74:0b:c9:48:c8:99:a5:
28:af:d0:e5:64:73:65:41:b3:3b:24:b4:f6:47:0f:
bb:8c:e7:b6:9d:63:5c:49:60:f0:a1:60:76:1b:de:
d2:e7:e3:50:12:20:73:c5:06:da:df:17:55:3d:03:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:53:3E:C4:9F:AC:16:02:39:70:19:E9:8A:29:C6:28:A0:3F:18:D7
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3b:05:9b:33:3d:5a:d7:80:56:7c:6f:d8:ab:f8:72:11:c1:
4b:ca:3f:2f:2b:97:85:67:4d:82:b5:fc:2c:00:94:94:66:a3:
c5:9b:a5:47:d0:de:17:d0:f5:52:b2:50:94:76:d2:cc:4b:c5:
9a:36:ae:fe:cd:8d:f7:2c:fd:3f:f0:8a:7f:f9:7d:83:da:aa:
05:47:83:c3:eb:ce:8a:db:ad:44:68:76:5f:a3:01:21:94:32:
b1:0a:c2:15:82:f4:e8:76:e6:8f:f8:42:cc:2c:6e:75:35:ac:
fa:04:40:aa:08:c3:58:ae:46:40:7b:30:01:3b:db:db:4a:13:
58:4e:b6:4c:a2:52:e6:f5:e5:35:8e:7c:33:ef:20:22:b0:1f:
3f:c6:38:2f:87:e2:b3:01:10:40:d9:f3:4c:32:0d:89:bf:44:
31:47:11:ea:bc:03:cd:26:72:71:bb:b2:58:5e:ea:9c:08:da:
8e:e3:2e:9c:80:6c:50:28:12:a1:85:f1:15:1f:90:1d:bb:0d:
e6:3e:69:98:1d:f1:a6:00:df:cb:1f:00:3e:53:7a:2d:70:55:
cf:45:20:1c:cc:09:69:84:03:a9:40:3b:db:b7:a1:38:57:1c:
25:5a:ec:9e:89:a3:af:62:08:0b:72:79:a9:60:f9:dd:0e:70:
b0:8a:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:59 2026 by rpki-client