Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: aymu6fzwxoKkpOc1HKxPRgX85bHuUFXbTrBY516YjxU=
Subject key identifier: 52:11:E4:EC:81:62:A5:DC:C1:18:2E:68:B5:DF:DE:BA:53:87:17:D2
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019ECB5F62E7D498A650DB2FEDBB077A1B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 0A8E
Signing time: Mon 15 Jun 2026 13:01:26 +0000
Manifest this update: Mon 15 Jun 2026 13:01:26 +0000
Manifest next update: Tue 16 Jun 2026 13:01:26 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: IeQZjVhf+Zx4fXp5wju8uFLZkfGF2h9a2rwVr/LinbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cb:5f:62:e7:d4:98:a6:50:db:2f:ed:bb:07:7a:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Jun 15 13:01:26 2026 GMT
Not After : Jun 16 13:01:26 2026 GMT
Subject: CN=5211e4ec8162a5dcc1182e68b5dfdeba538717d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:32:8d:77:d6:5d:d6:eb:b9:56:bf:87:a0:
12:17:d9:09:26:88:83:fb:5a:19:0e:ed:62:b1:b2:
10:e0:35:65:25:8b:08:ab:b5:86:f8:2c:e8:1d:e9:
a3:de:b7:d6:23:fb:cb:05:13:9e:72:b4:bc:c3:2a:
61:9e:4e:5f:4b:e3:b9:e7:4a:54:82:13:0b:28:db:
d3:2d:05:02:f5:a6:cc:a1:71:3f:ef:52:96:52:1c:
ce:82:df:86:0c:84:e8:26:ab:b8:2a:69:88:8e:99:
09:7e:44:8c:4e:86:0b:ce:8d:40:67:7b:cc:06:f5:
65:d1:c7:ea:cb:d0:e6:68:4d:25:9e:e0:3d:5a:e7:
3d:49:75:30:23:5b:4d:e5:b4:32:d5:ec:82:6e:59:
c6:1c:50:e5:68:bf:06:d0:c8:ee:f5:b7:4f:4f:84:
7e:64:72:8c:af:05:b2:34:6a:66:15:f2:0b:42:1a:
e7:0a:a6:12:78:7b:c9:64:b2:6c:d0:77:16:01:67:
4e:07:74:fb:1c:d5:e0:7f:0a:5b:44:76:0c:9a:4b:
db:b4:ff:0a:b1:3d:f7:bd:23:3b:7d:c9:05:36:e8:
e4:85:35:2c:9b:ec:1e:eb:5c:53:dd:98:60:c1:51:
d8:bb:68:66:9a:ea:77:a7:9d:a6:2f:51:23:0e:1e:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:11:E4:EC:81:62:A5:DC:C1:18:2E:68:B5:DF:DE:BA:53:87:17:D2
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3f:e1:d1:39:d8:24:73:d9:7f:e6:46:af:f9:66:98:84:16:
38:8c:ed:76:93:4b:6a:70:12:4e:93:3e:5c:68:5a:ef:63:c3:
80:f2:76:c6:3a:72:08:e1:71:e5:79:1c:52:e2:71:1b:76:32:
e8:77:1e:6d:82:f3:b4:6e:d1:67:af:5e:c8:c0:f8:8d:9a:fe:
8a:f5:55:00:36:44:3a:37:11:c8:43:98:e2:01:5d:68:bd:15:
93:21:87:28:4a:62:d2:7b:76:13:40:83:e5:1b:8f:bc:93:82:
1c:ba:1a:d3:b8:a9:b8:f1:16:86:b4:f7:3b:6d:2f:a5:65:a5:
8c:39:f0:8a:06:61:01:2e:4c:32:49:83:3e:39:2c:c9:cb:7c:
8c:ea:cc:9b:26:0f:da:6d:eb:63:4d:3c:3f:df:18:dc:f9:e2:
4c:f1:28:30:99:0c:ac:24:37:84:81:34:14:52:84:93:ba:82:
6e:54:98:c5:3c:b2:59:e1:c0:ad:b3:64:b9:a8:9f:db:05:25:
0d:8a:20:51:fb:80:ab:af:d6:54:e6:35:d7:ea:e7:35:7e:3c:
15:1f:69:eb:03:44:57:54:fc:ce:23:c6:60:be:3d:6b:ad:d0:
f3:5a:14:d8:7d:91:fb:f3:78:2f:4e:19:5d:e9:03:f5:0c:10:
6c:b3:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 16:52:43 2026 by rpki-client