
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: TerCYpktBIMTmOs5vlFEl9hINrizgYTpm83bqVOerX8=
Subject key identifier: 01:BF:6F:8C:35:42:39:EB:A8:E8:FF:C1:86:F8:04:71:FE:A3:C9:F1
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 019EC03699B3B7031F5E9A10EB0C1E24FDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 18CF
Signing time: Sat 13 Jun 2026 09:01:04 +0000
Manifest this update: Sat 13 Jun 2026 09:01:04 +0000
Manifest next update: Sun 14 Jun 2026 09:01:04 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: F3CSpkitEdXX0Zcncwl4dqanBQ5e5swTQ8ReTJYzC9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:99:b3:b7:03:1f:5e:9a:10:eb:0c:1e:24:fd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Jun 13 09:01:04 2026 GMT
Not After : Jun 14 09:01:04 2026 GMT
Subject: CN=01bf6f8c354239eba8e8ffc186f80471fea3c9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:3b:44:49:85:25:bc:d5:60:50:67:24:ac:
8d:5b:50:65:57:d0:24:fe:4a:49:80:1c:88:d9:c5:
6b:39:14:a6:1f:27:e4:04:96:b7:c6:65:d3:aa:ec:
17:f4:c5:7a:97:da:bc:93:06:1d:89:fd:0a:9d:cf:
3e:b9:6c:24:8a:2c:0e:ad:6e:95:ba:1e:c0:ee:08:
fb:1c:ef:f7:82:1a:c8:e9:1a:c6:5e:17:f6:0a:2e:
be:1f:00:55:1b:04:5c:28:72:7a:6c:e6:85:89:cc:
72:50:dc:50:8e:33:48:6c:15:93:da:40:db:d8:79:
15:a8:1b:22:bb:70:f8:d2:28:60:fb:bc:b6:4d:ed:
ec:03:7b:19:fb:95:0c:a8:bd:20:22:c7:65:bb:ed:
90:13:79:9e:68:49:64:d9:d0:58:f9:a0:fc:69:3d:
b2:61:98:d1:28:de:f8:1c:52:c9:a3:8a:16:6b:e9:
7f:01:2f:24:af:da:09:1f:96:86:a3:b4:75:95:be:
1c:29:67:b2:ea:0b:7e:05:b1:a4:67:e3:5c:23:64:
9c:ff:3d:2c:08:cf:49:7a:0c:61:50:ea:05:a2:fa:
36:de:08:e2:2d:4e:77:8b:0e:ea:dc:7c:ea:85:4f:
dc:7c:27:c8:34:30:a3:c0:4e:71:66:07:25:8b:ea:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BF:6F:8C:35:42:39:EB:A8:E8:FF:C1:86:F8:04:71:FE:A3:C9:F1
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4a:bf:f4:0b:6d:bc:e5:5b:5d:91:a9:1f:e4:64:01:e2:3a:
b1:94:7a:46:62:03:3f:b7:e2:22:76:b7:d0:40:d0:46:f9:90:
6c:b5:d8:10:b5:a5:cc:b4:1d:80:20:40:f8:69:b8:17:a5:0a:
41:da:73:2e:ab:ed:a2:43:38:6d:87:e2:d4:17:9b:46:43:03:
49:84:41:79:e7:ce:c6:e9:2c:f8:0a:dc:4c:03:c9:3f:1f:a8:
18:e8:00:73:65:f0:21:19:f9:c7:f3:64:29:c8:fa:d4:8d:c6:
b6:8d:b6:90:0a:1b:dd:d5:46:b6:3f:63:33:bb:de:7a:29:46:
d6:2f:a9:63:7d:d3:d1:02:2f:1d:4d:6e:b3:b3:4b:6c:0d:80:
e0:fa:b9:11:8e:c2:45:65:64:ad:6f:96:0e:ff:24:2f:87:89:
8e:a6:b5:51:fd:e9:a0:3c:44:3d:0c:e0:16:9e:93:9c:30:e4:
56:87:88:ef:17:4e:ad:d8:2d:18:c4:72:5d:ff:c5:10:2e:2f:
3b:21:7d:b8:4e:a2:a2:8b:62:33:da:55:a4:5e:a9:89:66:67:
75:99:cd:c4:ee:df:06:3a:d7:39:82:b2:ac:b9:65:6f:d6:4b:
b0:98:f3:98:7d:2d:37:da:da:83:28:63:38:44:56:d9:34:d2:
a7:98:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:03 2026 by rpki-client