Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
File: yjNIUNrzcSIFIBmSKevekO8osBg.mft (raw, json)
Hash identifier: bLWc12Vf6d/y+KZdi8j0nzgCP46iYl4VM1aAxsZ68cA=
Subject key identifier: BD:20:09:3F:B6:4B:EE:23:CA:5A:71:AE:88:7E:FB:0F:D6:27:90:32
Authority key identifier: CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
Certificate issuer: /CN=ca334850daf371220520199229ebde90ef28b018
Certificate serial: 019EBDD9D7063C27CE12D6B67CCE103810EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
Manifest number: 09D6
Signing time: Fri 12 Jun 2026 22:00:30 +0000
Manifest this update: Fri 12 Jun 2026 22:00:30 +0000
Manifest next update: Sat 13 Jun 2026 22:00:30 +0000
Files and hashes: 1: XQZYtmJX7BpNzPu03srU_4VYUsc.roa (hash: Bjg0iayeOq8sVWJ1lC2MT+jpchRq5ORWkMqvwpb8VDY=)
2: yjNIUNrzcSIFIBmSKevekO8osBg.crl (hash: 9t2J6uYzoYiBSIX9uxTEsCUArGwZND45rQQTuAX+l0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:d7:06:3c:27:ce:12:d6:b6:7c:ce:10:38:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca334850daf371220520199229ebde90ef28b018
Validity
Not Before: Jun 12 22:00:30 2026 GMT
Not After : Jun 13 22:00:30 2026 GMT
Subject: CN=bd20093fb64bee23ca5a71ae887efb0fd6279032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:53:f7:cc:db:c4:ee:72:22:ab:8c:ff:13:70:
8e:ca:35:c6:c2:9a:c7:65:79:f7:82:c4:ff:19:a5:
ba:fe:46:c9:1e:1f:74:bc:6b:5a:a8:23:38:83:ab:
10:bc:8f:8c:1a:43:a7:b0:2e:9f:9a:26:3b:f1:45:
da:82:64:dc:3f:8f:31:b4:73:d9:bf:29:0c:07:bc:
30:63:e5:eb:fd:6b:fa:53:20:39:04:48:4b:e6:8d:
6d:78:01:fb:29:b5:21:36:7c:03:a4:3a:2e:27:95:
bf:21:5a:4a:57:a5:74:fe:d5:40:a1:1e:4f:d4:5e:
4c:c9:7e:4d:ab:6a:9e:bc:c7:b8:bb:6d:a0:3c:07:
ae:83:c1:13:78:e1:c5:9f:5d:cc:92:8d:f7:fe:eb:
f8:03:7d:dc:3e:5a:65:98:3a:be:4a:f6:c5:67:15:
ab:ed:40:ec:de:05:29:43:81:72:11:e4:95:2b:eb:
9b:40:8d:fc:ca:c1:bf:95:22:ea:ff:77:80:e4:c7:
9f:78:b3:cf:49:d3:ef:81:38:60:8a:a1:b9:df:03:
1e:11:3a:35:57:52:62:d0:4b:d5:81:03:35:29:fb:
4f:98:46:1f:e5:de:41:a9:e6:83:52:4f:5a:0f:e1:
7d:fe:6d:c3:3a:f2:0e:23:7f:59:67:e6:90:fe:6f:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:09:3F:B6:4B:EE:23:CA:5A:71:AE:88:7E:FB:0F:D6:27:90:32
X509v3 Authority Key Identifier:
keyid:CA:33:48:50:DA:F3:71:22:05:20:19:92:29:EB:DE:90:EF:28:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjNIUNrzcSIFIBmSKevekO8osBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee5e47-4e29-4603-b962-0e0046c8a87b/1/yjNIUNrzcSIFIBmSKevekO8osBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:96:f2:69:09:6f:f9:ca:e8:4b:ba:eb:c4:db:5c:d5:a0:34:
bc:33:16:48:07:15:25:52:0b:90:5c:1f:0e:7c:10:8b:ba:1c:
bf:f2:02:7b:8c:15:ff:fd:e8:3f:04:7b:65:a4:dc:ee:03:0c:
e7:f4:0b:62:de:16:80:54:54:2a:fc:f8:8a:91:ee:95:de:07:
17:ef:c6:84:9b:3f:a3:b6:47:95:61:e0:16:ee:07:cc:1b:5a:
b9:94:b6:fe:b2:50:1f:de:05:de:f9:0b:63:2c:22:cb:ea:a4:
77:63:94:98:d1:8b:27:48:08:ef:c4:e1:af:d9:28:b2:bd:c1:
d3:4a:20:f4:b4:59:9d:56:60:41:a3:4b:ff:a1:a1:2c:ca:5f:
53:ce:08:ad:b6:f1:07:a8:eb:66:0a:b4:e7:7c:c5:f5:e5:f6:
60:58:8f:85:dc:b6:06:a1:39:7a:fd:90:98:26:f8:3a:4f:47:
01:36:50:20:64:4e:12:68:21:ba:7f:51:7b:a5:2a:e0:ac:9a:
7c:a3:1e:4c:3a:ca:b6:98:ce:6d:c3:95:09:3d:58:9b:1d:26:
40:e0:64:4c:86:24:fa:ea:f1:63:aa:c8:ac:70:51:b8:bb:88:
75:57:7f:d8:d8:d9:5f:e6:94:41:a2:0c:75:51:cd:d0:69:5a:
6a:ce:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:55 2026 by rpki-client