Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json)
Hash identifier: ZhVdJ+PUkJuWiycV0LVTEi/x5WN/9rZsXai8bVAo64k=
Subject key identifier: 3A:73:D5:AD:92:EB:18:97:31:73:BC:B3:AB:A8:F5:BB:01:E8:1C:E9
Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Certificate serial: 019EBF910B3314269CAF8D16EFC8C0ED3043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
Manifest number: 1042
Signing time: Sat 13 Jun 2026 06:00:14 +0000
Manifest this update: Sat 13 Jun 2026 06:00:14 +0000
Manifest next update: Sun 14 Jun 2026 06:00:14 +0000
Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: ejC/tiD7qxg6G194CMoMDRQHfJaGnMFBkaxah0xzD2I=)
2: XpDHF6qNAfRig2NmPZIIBwNiNAU.roa (hash: 9bFU4KF8zp5CMrxC2WFBFW2SFIScv756NVWyJZFeI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:0b:33:14:26:9c:af:8d:16:ef:c8:c0:ed:30:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e
Validity
Not Before: Jun 13 06:00:14 2026 GMT
Not After : Jun 14 06:00:14 2026 GMT
Subject: CN=3a73d5ad92eb18973173bcb3aba8f5bb01e81ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:53:16:15:5e:0c:2b:dd:ae:18:69:c9:62:
9e:0b:a6:31:45:14:36:44:71:c7:18:3d:77:76:6c:
b5:ef:be:5e:f1:e2:e5:1e:66:c9:d2:76:d2:77:74:
d8:11:76:dc:99:38:a0:a8:09:63:50:f1:77:bc:af:
16:07:b7:1f:06:a8:d5:86:54:8b:66:a4:db:5d:c0:
ea:66:d7:0f:83:ac:d7:60:82:19:71:61:9b:46:7b:
7d:c3:33:23:15:5c:a3:24:6f:61:3b:59:46:56:e6:
59:86:46:7d:fa:a1:03:8a:6b:3f:aa:52:3b:2a:b5:
6c:53:30:f2:19:4c:13:c6:d5:bf:90:64:91:15:75:
f7:f8:a5:4a:b4:2c:cc:a7:de:85:67:a6:70:52:c0:
18:17:0c:19:3b:06:e7:4e:7e:96:40:e3:ff:f7:2e:
4a:b2:36:83:38:35:67:32:14:c6:80:33:27:d1:c8:
8a:c5:76:b8:ab:00:0d:e0:68:2c:63:23:0d:44:f2:
30:03:1c:c9:06:b8:5d:af:60:4d:6f:3a:00:e8:7f:
6a:fc:58:04:96:ba:18:f0:ff:7a:22:ac:1f:e8:8b:
9f:38:dd:18:29:64:ec:43:86:fb:3a:8e:9b:ba:2e:
f5:73:1f:dd:49:d5:6a:45:9d:f6:f1:7f:6e:80:14:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:73:D5:AD:92:EB:18:97:31:73:BC:B3:AB:A8:F5:BB:01:E8:1C:E9
X509v3 Authority Key Identifier:
keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:c9:41:05:d1:0c:14:2b:d5:75:e4:ee:1a:b1:07:f2:1a:
50:6d:5a:1d:b9:f4:91:a6:88:2c:ee:da:90:ad:55:9a:c7:cb:
31:1b:96:c3:7c:1e:f0:b9:33:7f:c3:c0:e3:08:61:7a:c6:5d:
c0:b0:3a:15:22:99:fc:25:af:68:33:c6:18:18:78:cb:14:0d:
d8:bf:65:cc:2c:cc:83:8d:7d:fb:da:88:e8:38:3e:95:4b:04:
e8:2f:f3:15:cc:1f:4a:db:73:21:8e:6d:72:e5:86:ec:7c:3b:
44:4e:c1:3f:39:4c:63:b6:7a:da:08:71:f1:f4:85:bf:76:4a:
e0:c0:41:f8:84:81:5a:e8:2f:89:64:3f:35:19:e1:f9:96:a0:
56:55:2e:c8:37:71:f6:48:d0:6f:fb:0e:25:4e:14:62:79:fc:
f4:d4:75:cd:6c:af:ea:67:3d:73:61:d4:e5:ed:87:f7:82:9d:
b7:c3:b8:cf:e1:91:12:35:88:a9:53:a8:14:2f:f6:35:16:57:
62:53:90:e5:98:a0:00:4b:f3:ad:8c:b2:a7:37:21:1e:36:d3:
ae:32:6a:93:36:ff:6d:08:f1:2c:13:f1:b4:71:6c:7f:0b:66:
a0:76:8d:12:2a:fd:c2:37:af:ca:a7:42:53:cc:5f:7a:49:66:
82:e5:ac:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:50 2026 by rpki-client