
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
File: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft (raw, json)
Hash identifier: z5A+peJB6VsC6dvxZ0AJLw3VgZKffSpOYRIA2EKodzI=
Subject key identifier: ED:8C:8E:54:7F:4D:39:FD:34:E1:50:0C:A4:81:BF:D5:03:9C:F8:47
Authority key identifier: CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
Certificate issuer: /CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Certificate serial: 019EBFC89623E5E97F8745887CA2DC7CB94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
Manifest number: 54
Signing time: Sat 13 Jun 2026 07:00:54 +0000
Manifest this update: Sat 13 Jun 2026 07:00:54 +0000
Manifest next update: Sun 14 Jun 2026 07:00:54 +0000
Files and hashes: 1: E_xpCOpsZ5-t1WX6WrI9YENITng.asa (hash: bNhbXuXh50hasGOTMO13Tz9lkiSAHuwhJ2TJlWd+gwg=)
2: yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl (hash: cmcO5afY84HnXD8NO8meREoFqu2qEPnPJ6+Q77rlkwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:96:23:e5:e9:7f:87:45:88:7c:a2:dc:7c:b9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca2487f59f8b3af8bf2a5924672021b65080f4b1
Validity
Not Before: Jun 13 07:00:54 2026 GMT
Not After : Jun 14 07:00:54 2026 GMT
Subject: CN=ed8c8e547f4d39fd34e1500ca481bfd5039cf847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:cc:ed:3d:59:ad:08:55:40:14:40:dc:a2:
75:32:bf:b8:4b:b0:4a:b0:ee:14:29:2c:3f:19:ea:
77:2e:27:7d:2c:11:29:04:c2:5b:8c:8f:e6:43:15:
6e:83:fe:a5:04:e2:7c:49:e7:b4:13:57:29:e3:67:
be:2a:f8:2b:92:6b:31:3b:99:ef:80:eb:c6:8b:ba:
f9:54:63:2c:7c:f0:fd:b8:da:aa:a1:bd:68:11:f4:
e9:71:a0:44:6d:dc:4d:09:c8:d1:8e:01:95:b1:dc:
72:ef:83:4b:c1:dc:ea:8f:19:b4:14:d9:eb:18:57:
19:ae:b6:59:13:95:65:ae:8c:f0:9c:b0:e7:74:71:
67:e3:e6:1c:90:a7:8f:9b:ab:80:15:c7:e0:f9:09:
ae:59:11:c8:12:e2:c1:5c:9d:52:cc:bb:e2:ff:37:
62:d8:31:7a:b3:7f:9f:49:47:d3:f4:a7:f0:12:2e:
aa:77:73:d6:99:61:ba:b4:06:34:36:db:be:d2:01:
11:37:36:fd:7a:60:6f:30:95:e9:30:f2:2e:b9:03:
1f:75:69:eb:e3:c8:97:94:dc:9f:c7:f6:b9:6d:06:
64:88:ed:02:2c:48:76:57:84:30:27:7f:bc:bc:4e:
a4:53:78:4c:20:2d:f4:41:11:1e:b0:62:ea:a0:73:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8C:8E:54:7F:4D:39:FD:34:E1:50:0C:A4:81:BF:D5:03:9C:F8:47
X509v3 Authority Key Identifier:
keyid:CA:24:87:F5:9F:8B:3A:F8:BF:2A:59:24:67:20:21:B6:50:80:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/05f30e-7cfe-448f-9fa4-041e89798471/1/yiSH9Z-LOvi_KlkkZyAhtlCA9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2f:e0:45:d9:65:b5:81:fd:6d:5a:2f:4c:80:3d:83:6c:9b:
7e:20:c6:b8:4c:44:e4:08:72:89:b2:d3:24:1e:6a:70:e8:16:
95:00:47:00:0e:0f:2a:3a:7d:b4:61:91:24:7b:a4:2e:c4:38:
be:02:1a:72:b5:0f:34:bf:1c:08:b4:47:03:1a:2e:db:22:45:
19:93:dc:bd:d4:e3:48:87:29:e2:81:7b:4d:67:17:8a:f9:64:
11:c4:af:36:ae:58:11:dd:92:18:5f:f8:f2:99:15:bb:f3:25:
4b:01:b3:83:73:40:e2:63:d8:5b:2d:ed:3c:98:97:0c:bc:6f:
d8:7e:e4:c8:7c:6c:4f:74:2e:86:46:22:2d:56:79:64:e0:f9:
f6:2a:02:b8:cd:68:1a:2c:fb:4b:e6:65:3f:a2:10:9d:c6:4d:
6a:fa:2d:db:eb:38:a5:18:ee:ab:6a:47:d8:d0:00:b3:0d:3e:
10:1e:6b:90:47:ab:4c:40:fb:62:ff:60:0f:5a:af:86:a5:a8:
bb:35:c7:81:5b:b1:2d:76:ab:bb:06:70:31:7e:53:e2:1c:79:
b9:aa:dd:eb:d7:3d:49:71:50:03:b3:c3:f8:1e:95:52:86:3e:
77:e5:7f:e5:4b:73:e0:40:a5:16:4f:ec:7d:34:a3:c2:8c:79:
a4:14:c9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:27 2026 by rpki-client