Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
File: yJwsxInr5I9JBYSshm_jYsQRfnU.mft (raw, json)
Hash identifier: OTTygVBJb+1DBkJOp7LMiUCE8Lu1A0XF8xp/KZ+cn/Q=
Subject key identifier: BB:2F:3E:22:76:A2:3D:E6:8F:64:6C:FE:2F:30:51:91:6D:2D:2C:01
Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Certificate serial: 019EBF5A13BCD91C7235F7FC46AE92EF2F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
Manifest number: 1676
Signing time: Sat 13 Jun 2026 05:00:11 +0000
Manifest this update: Sat 13 Jun 2026 05:00:11 +0000
Manifest next update: Sun 14 Jun 2026 05:00:11 +0000
Files and hashes: 1: F71lf1rO3_j_YrGDLp8vXCnWwNQ.roa (hash: 2T6cEG+G6vR7CgItj3CD3tb1JHo1M1LaioFUbAKMaFQ=)
2: KbGZziqCA41JgOpe8AUOSiv8rIM.roa (hash: MBAhT/6sVckMLfrlu1S3S4sTHwbcNuOAQSyBUhp+xNk=)
3: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (hash: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA=)
4: Wgv3nP3KPCzK8Vc3Ujwc5tCZFEY.roa (hash: sZiUtGsuan8lIISLSvNoUUBLxQveJeIACDPYwQFWZys=)
5: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (hash: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU=)
6: ba1PPFUfJQPbN0qUaPYUh_lra00.roa (hash: io880q/jxrQW2nbvQeP7+TanhHJv6EExV9pj2tnHEls=)
7: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (hash: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw=)
8: yJwsxInr5I9JBYSshm_jYsQRfnU.crl (hash: huZ+WHMru7YzgJxinOyuEECr4GXqy43Y/uYT1zr1el0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:13:bc:d9:1c:72:35:f7:fc:46:ae:92:ef:2f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75
Validity
Not Before: Jun 13 05:00:11 2026 GMT
Not After : Jun 14 05:00:11 2026 GMT
Subject: CN=bb2f3e2276a23de68f646cfe2f3051916d2d2c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:17:f2:0a:1b:cc:1f:12:ad:f5:86:77:fe:
b3:1c:cb:2e:9f:af:be:df:e0:7d:a6:d9:64:3f:8f:
a4:e8:c7:0b:89:b7:ea:3e:f4:03:ce:b2:9d:a8:17:
22:cc:21:9f:43:c2:c6:54:12:f3:ac:8c:69:ed:84:
60:5e:53:11:1d:a3:9c:be:0a:ec:95:25:73:13:71:
80:24:b5:60:75:cf:bb:71:00:dc:79:1e:45:a7:e6:
50:36:aa:80:fb:23:77:5d:fc:85:c2:38:88:78:17:
47:c0:d4:a0:e2:15:18:a7:e1:18:af:ee:20:04:ee:
09:39:0f:24:bd:36:64:6b:51:94:b5:f3:45:6e:14:
ac:f0:b6:e8:dd:85:a1:76:f8:23:b8:96:6a:0f:a8:
fa:b3:f5:e0:35:3f:05:02:42:76:ff:22:68:1a:5f:
7d:ef:93:5d:4b:50:23:8f:5b:91:b8:a2:a0:e5:a2:
c7:32:92:6b:35:d3:a5:1a:52:06:7b:ce:b4:a6:da:
37:1f:62:ab:3e:ae:1b:48:00:27:97:30:cd:90:45:
06:7d:15:8d:bd:4b:8f:3b:2c:44:8e:9c:c3:bb:15:
f1:33:80:63:ee:90:a4:3e:b4:9e:a7:59:50:34:57:
b0:76:86:97:e4:5c:ac:e2:43:81:26:fc:c7:45:01:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2F:3E:22:76:A2:3D:E6:8F:64:6C:FE:2F:30:51:91:6D:2D:2C:01
X509v3 Authority Key Identifier:
keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a1:b7:89:12:15:71:e1:92:93:54:4f:ba:e5:95:28:14:f3:
ce:d1:13:4a:60:43:0d:51:d8:6b:52:35:ce:6e:b6:69:0c:06:
9f:b7:64:b3:f2:2c:a8:3b:01:1a:40:b0:d4:cf:36:9a:fe:4f:
94:e1:80:87:b9:c7:bd:5e:29:bd:e1:6f:6a:9b:b4:e7:b9:23:
64:93:6e:83:c3:90:18:b4:07:86:f9:09:8b:32:31:1f:0f:a3:
8e:7f:77:ce:d9:e6:07:9b:e6:22:22:48:48:b5:a6:4d:53:25:
c7:79:be:e0:b9:d3:80:37:5c:15:e2:90:2b:34:02:31:12:46:
ef:57:55:41:5a:65:fa:5b:d1:82:e7:20:e8:99:6c:8b:23:f6:
b5:24:cc:9c:d7:00:5c:3b:a5:68:c9:12:42:4e:83:b4:e4:03:
d1:76:52:82:05:14:3c:20:9c:25:29:c5:f6:b6:6a:fd:a5:c9:
8d:ab:99:7d:90:56:2e:b0:78:16:50:11:94:8c:87:9c:e4:59:
a3:78:45:29:66:d4:76:83:99:1e:58:db:0a:88:a7:fb:4a:20:
4d:4c:6e:41:fe:a8:79:30:a3:ab:45:16:e5:84:3d:08:78:fe:
66:01:f0:74:8a:30:10:3b:24:fc:19:83:a1:cd:a8:a1:9a:70:
43:1f:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:58:39 2026 by rpki-client