Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: J56OX11yJvU9Dnf/vOZJtupt8+9NSGGdysDwH1hjVQs=
Subject key identifier: 75:85:C3:D1:B4:CB:24:C5:90:79:5F:42:20:6F:EB:6C:F2:32:EE:BB
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019EC1B6DC4F634513B0FF5C94C1CE74EEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 097B
Signing time: Sat 13 Jun 2026 16:00:47 +0000
Manifest this update: Sat 13 Jun 2026 16:00:47 +0000
Manifest next update: Sun 14 Jun 2026 16:00:47 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: XQknfYQqnFnoEwTCnlkpb3RehGEn2gr4FNtMt8/Fjzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:dc:4f:63:45:13:b0:ff:5c:94:c1:ce:74:ee:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Jun 13 16:00:47 2026 GMT
Not After : Jun 14 16:00:47 2026 GMT
Subject: CN=7585c3d1b4cb24c590795f42206feb6cf232eebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:9e:a4:c1:79:e8:a8:95:b7:d9:f3:23:0c:
ed:83:86:a4:05:c5:68:2c:08:ed:9b:64:06:85:5c:
d7:17:60:93:c4:e4:c5:0a:1f:8a:e1:5c:8e:96:59:
11:20:d9:42:78:40:92:be:74:ce:d1:de:f4:0b:57:
50:b7:06:95:ee:d3:e5:8f:87:b9:21:bf:17:bf:48:
1f:23:17:1d:3b:d5:7b:db:12:6e:c2:80:11:d8:e3:
44:cf:e5:3d:ba:40:37:2b:eb:54:8e:1a:88:6e:d6:
38:30:f8:97:25:f5:6d:62:0b:8f:30:b4:89:01:9a:
97:30:26:13:20:30:f6:2d:cb:a2:eb:54:08:61:29:
df:fd:ed:bd:38:ca:dd:88:39:a6:9a:3b:88:53:09:
55:3f:69:48:6e:2e:0a:4d:2e:47:19:9f:ff:ff:82:
97:23:80:96:15:8d:0e:ba:78:ff:1a:a0:c5:3d:a6:
82:f6:f9:9c:a2:57:95:f2:ad:4b:03:f3:62:01:64:
60:91:e2:50:3a:d0:ac:36:db:d7:21:44:b1:43:cd:
f5:e2:78:f9:eb:94:01:1b:ef:dc:18:74:98:14:65:
8c:21:13:75:2f:de:7a:c0:30:b4:b6:d0:3c:77:27:
5c:bf:75:18:53:ff:45:96:a9:59:5e:81:c9:58:35:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:85:C3:D1:B4:CB:24:C5:90:79:5F:42:20:6F:EB:6C:F2:32:EE:BB
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:28:8e:27:89:71:92:3c:18:ac:99:21:bf:62:59:2b:41:4d:
06:2e:a0:17:06:74:c5:bf:13:ad:fb:27:a6:6f:d0:f6:70:34:
d1:bb:92:0e:64:2a:14:e7:9c:29:95:c0:ee:2f:e4:bb:81:e6:
d6:e6:f2:cc:84:e4:5b:75:99:3d:66:c8:20:bc:20:d5:db:7a:
5e:9f:27:51:0a:c8:0b:0f:80:5c:98:80:e7:b3:2d:26:23:90:
30:19:d9:74:58:4f:49:ab:82:63:b0:5f:b9:cf:50:3a:9d:68:
97:fb:cd:b2:4f:db:a1:4d:ac:0b:0d:32:26:fb:52:97:98:86:
44:9b:7f:58:ca:71:92:49:c7:1b:9a:9d:d9:59:a3:ca:f5:f7:
4e:bd:f7:d5:48:bc:cc:bc:2d:1f:ab:b9:6a:ee:ec:c9:b3:38:
27:40:03:6e:d8:c4:50:3b:9c:07:49:8b:c7:d2:9c:da:c3:e5:
52:7a:cb:ca:12:08:e7:b6:8c:24:c8:49:6c:c1:73:db:b0:fb:
9f:aa:e1:9c:70:d3:c1:7d:ae:5d:7b:5c:74:8b:f6:f1:d7:00:
16:9e:75:ca:65:0c:86:63:fe:bf:fc:77:61:47:a5:73:75:8e:
1a:91:c5:af:18:e8:90:96:5e:73:1b:fb:b9:b9:ee:7e:74:69:
f2:fa:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:29:52 2026 by rpki-client