Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
File: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft (raw, json)
Hash identifier: ItA+K5DGHeJxk4IXlix7kYYrKN+uclupMRSDAg/oEaY=
Subject key identifier: ED:65:AA:72:F4:6C:74:6D:1E:ED:E6:4D:41:6E:42:81:F8:B9:D6:A5
Authority key identifier: CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
Certificate issuer: /CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Certificate serial: 019EBDA35E5FBE6DFE089F4A08C9FFB13628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
Manifest number: 2E
Signing time: Fri 12 Jun 2026 21:01:00 +0000
Manifest this update: Fri 12 Jun 2026 21:01:00 +0000
Manifest next update: Sat 13 Jun 2026 21:01:00 +0000
Files and hashes: 1: GhcMjny1TXWebHNpG3nX8AJ_o6M.roa (hash: 01RJ2qPd/9qIbm6XQe9IYI6taQh/cgn9v6zBF39c34w=)
2: KN1P7f4-fZ68qRby6mZLX1tWgW0.asa (hash: 0n8VR2PiEEkjwezMbWPkeVd4UEHLDcTD8uRHdIeNCic=)
3: y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl (hash: PX6u4Zag5YkbYzuXiPOUHXSImHremnJQkeh+Ny042kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a3:5e:5f:be:6d:fe:08:9f:4a:08:c9:ff:b1:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb5dfb950d6048fdc798f6e0d3fda517ecbc648
Validity
Not Before: Jun 12 21:01:00 2026 GMT
Not After : Jun 13 21:01:00 2026 GMT
Subject: CN=ed65aa72f46c746d1eede64d416e4281f8b9d6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:de:04:21:b8:09:5a:9a:5c:a9:fe:83:65:
38:13:8f:55:ef:b7:70:2a:9d:4e:6b:54:b0:c2:12:
75:d8:11:5d:0d:20:47:68:96:0b:02:34:a3:c4:3d:
f0:8e:f8:cc:01:ec:5c:aa:0b:4c:12:29:f6:15:ed:
26:1a:29:be:fa:86:ef:5f:1c:ee:ad:47:6d:a7:08:
64:07:f5:f6:8b:de:33:da:0e:7f:78:39:c3:53:de:
fb:08:48:bb:df:2b:6e:6f:03:a1:65:1c:6a:cb:8d:
17:19:3a:e4:17:fb:b1:c7:3b:d1:b3:b2:7f:4d:25:
39:f7:4c:f6:a3:c1:a5:fd:d0:6f:f7:f5:74:a9:80:
11:62:a3:ec:55:22:0b:0d:57:f1:66:ae:06:0d:d6:
72:ff:9c:94:72:23:11:50:fc:ca:e7:b8:39:55:81:
4c:64:53:7f:54:d9:fe:56:30:6e:51:9b:7d:0d:3b:
bd:ca:21:6e:86:3b:ed:63:aa:fc:61:d8:33:26:8a:
dd:1f:79:25:d7:c4:69:b0:47:34:d8:ed:0d:08:b0:
a3:e1:ac:86:ca:f1:ff:74:3b:ff:75:1a:86:9d:fe:
6d:1f:29:4e:fb:ab:16:4d:5a:48:9c:84:df:ba:03:
70:24:e4:fb:03:2b:82:3f:3f:3e:98:ce:7c:c7:84:
79:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:AA:72:F4:6C:74:6D:1E:ED:E6:4D:41:6E:42:81:F8:B9:D6:A5
X509v3 Authority Key Identifier:
keyid:CB:B5:DF:B9:50:D6:04:8F:DC:79:8F:6E:0D:3F:DA:51:7E:CB:C6:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ee7165-eb63-4346-a8df-5f5a93da50f8/1/y7XfuVDWBI_ceY9uDT_aUX7Lxkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:98:21:eb:7b:4d:25:9a:ef:eb:1e:1d:3a:f9:02:81:3f:ba:
77:c6:34:48:75:be:bb:95:b0:20:39:49:16:c7:5c:1c:f3:68:
ae:6a:81:c5:f1:7c:a7:7a:56:0c:e9:41:5d:1a:cf:1d:15:9b:
64:a2:82:98:35:af:af:a1:e6:1e:a8:2a:85:cd:ac:57:75:24:
0e:1e:20:47:aa:e7:c3:75:fc:7c:e1:98:d6:59:ca:38:33:fa:
9c:e9:19:72:b3:7a:70:b9:73:19:2a:17:32:91:0e:ac:25:f7:
48:83:63:3c:a7:fc:3f:2d:cb:5e:ea:c7:dd:48:b2:00:30:3d:
ec:9d:09:3e:f8:3b:40:3f:df:ee:67:41:da:e1:7e:06:46:f7:
ba:49:70:39:42:cf:ee:5a:b1:90:2d:c2:0d:33:4b:df:43:e2:
82:5c:72:3d:be:8a:18:cd:cc:0f:7b:7c:10:19:47:43:dc:2c:
82:9b:a2:fe:66:88:1b:11:e4:fc:df:a7:4f:14:56:75:f6:4e:
76:b5:4e:39:ad:41:2d:2e:60:06:e9:1b:9c:fb:2b:4a:45:5c:
de:a5:65:e6:79:18:78:13:60:f0:01:14:07:40:55:bc:58:d2:
ad:10:d7:05:a8:61:58:53:32:b6:03:17:ba:bb:36:1a:be:c3:
ce:99:e3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:49 2026 by rpki-client