Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: ViUXgfcQ/6DUMjGi3xohEASxJ8jEXpaS3xVBiCdi96Y=
Subject key identifier: 4E:EB:9C:D0:2D:8F:BC:A6:76:63:14:C1:16:3B:EE:30:90:B4:F2:6D
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019EBF9124D05A30B05509F766A9DB51AC35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0FDE
Signing time: Sat 13 Jun 2026 06:00:20 +0000
Manifest this update: Sat 13 Jun 2026 06:00:20 +0000
Manifest next update: Sun 14 Jun 2026 06:00:20 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: h65RT2VG0yFkv5+fdDigE4krsGh2YH70WPZumy01wcc=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:24:d0:5a:30:b0:55:09:f7:66:a9:db:51:ac:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Jun 13 06:00:20 2026 GMT
Not After : Jun 14 06:00:20 2026 GMT
Subject: CN=4eeb9cd02d8fbca6766314c1163bee3090b4f26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:4d:82:5d:e1:65:83:f3:26:e5:ea:0e:8e:
99:cf:d9:23:21:9d:32:25:a3:f0:18:29:e8:e9:7c:
7d:80:11:49:0b:51:65:17:43:b0:95:81:c3:88:48:
32:34:22:5d:44:06:00:3d:21:b7:98:fb:44:42:ad:
93:35:fe:b9:f4:e8:03:9c:df:0b:f3:11:b0:b8:69:
b0:27:e5:67:51:58:7c:63:80:d3:ba:db:26:95:98:
21:f4:6a:9b:83:31:1b:02:03:93:d5:96:6c:2c:47:
a6:22:05:80:c6:3f:7e:4a:30:6a:b4:17:7d:85:7c:
5b:dd:cb:47:74:6e:8c:a3:2c:b8:55:64:d3:de:d1:
bb:0c:7d:3c:96:c6:47:43:f7:b0:79:8b:1f:21:d2:
1a:2b:f5:24:56:4c:01:60:ed:6e:4d:ac:1f:a2:c5:
89:ce:02:73:01:4f:14:ab:73:98:e8:44:d4:70:00:
33:fa:b1:4b:44:c6:4c:2a:d3:ad:cc:e4:fb:98:b2:
e4:64:65:3c:17:3f:0f:f7:e4:3b:a3:2d:94:46:6e:
f0:ba:db:dc:84:ad:78:35:dc:b4:4e:8d:67:a8:e7:
5f:dd:7d:49:06:f8:34:7f:9d:78:2d:54:23:c2:e8:
3b:12:b9:5e:25:42:cd:22:f9:94:3a:c1:1c:84:43:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EB:9C:D0:2D:8F:BC:A6:76:63:14:C1:16:3B:EE:30:90:B4:F2:6D
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ad:a7:d0:3b:e3:79:cc:d7:2e:c5:8c:47:7c:80:d2:b8:3e:
04:e5:2d:48:30:2e:c6:e2:26:4b:ae:a3:b0:5a:03:18:94:31:
bc:95:d7:4e:13:36:3d:71:4b:64:55:93:04:e5:09:50:c8:19:
40:37:b8:4f:9e:62:d1:59:20:e9:fc:ad:6e:80:8f:6a:a8:2e:
c0:ae:42:71:e6:26:9a:9d:d2:27:0c:9b:40:c6:71:b7:a7:28:
5d:fe:18:db:da:c2:97:04:7a:d0:7f:31:5c:b1:0d:49:05:17:
b2:95:ce:94:3f:52:7b:f1:6a:ad:5c:ee:a5:12:08:b1:7c:58:
88:16:1a:ad:fb:fc:43:dc:73:3c:d1:04:51:98:c1:60:a3:dd:
d3:dc:04:57:c6:ca:30:73:64:64:f8:71:00:2f:c0:81:d3:06:
e1:d2:93:bf:b6:d8:88:9a:93:e1:0d:7a:b5:87:6e:62:d1:d8:
66:07:c8:bc:fb:b7:47:30:48:6d:56:db:ad:f8:d5:c6:c3:a4:
6b:ee:20:ae:b3:53:f8:68:07:89:9d:b3:fb:1b:d1:b2:0c:61:
c1:81:f9:a3:34:ae:b8:86:01:19:50:86:cc:bb:cc:c6:5a:01:
4d:5f:b3:c0:10:83:16:85:86:0e:d1:cd:c9:d1:60:f5:58:20:
d2:ac:8e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:49 2026 by rpki-client