Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
File: y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft (raw, json)
Hash identifier: hCxtzgyuywFGXASiNRFGBl1hiTHY3Sgiwh5btJReUrw=
Subject key identifier: 33:9C:C4:54:98:22:14:34:FE:D7:3F:A2:6C:54:4A:45:95:0C:73:FD
Authority key identifier: CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
Certificate issuer: /CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Certificate serial: 019EC0DB330DB43938F8C4D181F512715B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 12:00:51 +0000
Manifest this update: Sat 13 Jun 2026 12:00:51 +0000
Manifest next update: Sun 14 Jun 2026 12:00:51 +0000
Files and hashes: 1: kvnj2cNsUgWmKqruiHTj8IAxW0w.roa (hash: 2sBzVhGKmjkLG0YmT86Sdiztaegp2q/NY0RQl2BxzZI=)
2: sMktTpfGHbgv6HFYRTILiDr3y4Y.roa (hash: pIuZdKxK8yFs7L1CCJy6Vhhj+nazdkwlFtFaPKVuzK0=)
3: y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl (hash: VCZrd77VyBOBonrrGTqo4zd5KU1Ryt4luV5GMMXZAs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:33:0d:b4:39:38:f8:c4:d1:81:f5:12:71:5b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb662ceeb726774b1b44c51ff1fc0df908bdebbc
Validity
Not Before: Jun 13 12:00:51 2026 GMT
Not After : Jun 14 12:00:51 2026 GMT
Subject: CN=339cc45498221434fed73fa26c544a45950c73fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:50:69:2a:47:df:3c:1f:c7:b6:9f:a3:a0:
2d:77:92:19:32:9e:dd:e0:ab:5c:81:3e:2d:5e:d3:
7a:ec:59:37:89:63:90:e1:19:02:18:69:12:4f:d9:
e0:31:6f:04:ff:21:09:e9:2a:56:16:2e:05:06:e8:
57:fd:c0:c8:8f:12:97:29:c7:ed:3b:35:65:7b:78:
4a:a0:ad:60:d4:3e:be:25:3b:c8:95:a7:82:51:30:
d1:77:e2:a0:52:98:c8:78:28:ff:e5:91:57:65:81:
77:4a:cd:17:ec:d3:dc:d2:f2:fc:8e:a3:60:83:48:
ee:dc:64:38:48:9f:46:12:13:f3:98:bf:65:07:c5:
12:3b:32:71:72:7c:dc:f3:18:e6:d6:f0:ea:8d:c5:
c8:1f:a6:a3:16:fc:8e:44:70:d9:72:38:77:2f:09:
51:50:8a:0d:38:4b:1c:b4:06:b9:6b:94:be:fa:1b:
54:b8:f9:02:a0:84:15:f7:d6:bc:39:76:94:f9:c9:
83:0c:3a:72:5c:eb:dc:e9:55:29:7b:89:ed:26:78:
c9:61:83:8b:1e:9f:41:52:aa:04:6e:88:32:71:60:
b3:0a:55:45:3a:ae:d9:54:b8:0b:d5:36:d0:a4:36:
18:b5:84:42:ae:ed:62:86:91:0f:06:20:a9:1c:fa:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:C4:54:98:22:14:34:FE:D7:3F:A2:6C:54:4A:45:95:0C:73:FD
X509v3 Authority Key Identifier:
keyid:CB:66:2C:EE:B7:26:77:4B:1B:44:C5:1F:F1:FC:0D:F9:08:BD:EB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2Ys7rcmd0sbRMUf8fwN-Qi967w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a962a9-abff-4495-86cc-b56c8ccb2935/1/y2Ys7rcmd0sbRMUf8fwN-Qi967w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:57:4c:28:4c:fc:51:f3:b9:9e:ee:55:ce:23:0e:81:a8:21:
e4:00:90:72:2f:7d:fa:cc:9a:6c:b8:2f:ec:e9:b2:71:87:2d:
9a:75:a6:bb:db:f5:2c:ec:64:4a:55:77:67:22:d4:b6:ed:cf:
a3:51:c8:af:5f:78:00:ea:9a:bb:78:43:c8:0f:dd:f5:0b:e8:
1e:73:0a:56:5e:43:96:d4:2b:d9:66:a6:c1:72:1a:a0:c8:27:
97:a4:57:3e:95:6a:c9:5e:80:6f:57:35:51:d5:9d:67:97:20:
fb:4c:ca:0e:35:c0:80:21:a0:7c:b5:e1:5f:fb:59:20:0c:95:
37:2e:29:53:4f:e4:fc:90:03:90:21:70:b7:3b:3a:df:5f:f4:
b7:3c:f9:ae:e6:bb:32:f2:6f:e5:2c:ce:ba:4c:bb:7c:96:06:
a2:b7:53:85:ad:6d:03:67:ae:20:a0:dc:a4:1a:4e:1b:f6:67:
16:a4:f4:86:ef:d4:fc:62:55:e8:7e:dd:a4:5a:81:60:2c:fc:
5b:8b:c9:d0:44:cc:d9:61:16:53:cd:8a:b0:29:79:3c:ef:77:
c1:28:43:79:ba:56:7d:4b:cb:fe:6c:1a:f6:c3:41:eb:aa:b0:
19:6b:35:c0:14:43:6a:e2:5e:ee:ab:c6:2b:f0:41:29:e9:90:
8c:64:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:28 2026 by rpki-client