Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: 8CHWWobsbuFiN4nS/lm/omLrMuo6hhNtjbO+WLwGt8w=
Subject key identifier: A0:61:B6:2B:48:42:14:F8:61:59:E3:14:02:6E:6C:A8:1E:9C:0B:78
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019EBF911BCED443AA01AADB18A28B585F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 1247
Signing time: Sat 13 Jun 2026 06:00:18 +0000
Manifest this update: Sat 13 Jun 2026 06:00:18 +0000
Manifest next update: Sun 14 Jun 2026 06:00:18 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: wfVuUF91qisAS5oB7emC12DqDPgrJUxjZ7VH9YZ+rYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:1b:ce:d4:43:aa:01:aa:db:18:a2:8b:58:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Jun 13 06:00:18 2026 GMT
Not After : Jun 14 06:00:18 2026 GMT
Subject: CN=a061b62b484214f86159e314026e6ca81e9c0b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:13:de:91:ae:47:0a:7b:0a:f8:b6:45:18:5b:
49:6a:98:88:f4:29:0c:13:e7:ff:f7:be:61:14:da:
a8:60:2b:40:31:f3:1b:c2:25:90:df:48:17:86:2c:
4a:2a:8b:99:c1:a9:ac:87:74:b5:3a:63:82:b1:fe:
a4:d1:b9:6b:63:e6:3a:8b:92:6a:32:eb:e5:78:0a:
12:94:b0:2d:67:d3:02:f1:ba:7e:6e:f9:eb:60:6b:
ef:0c:51:54:65:1f:13:2f:a7:1e:d7:94:92:89:a7:
4c:d1:b5:d3:5f:80:71:0d:a3:fe:c5:54:9c:bb:ae:
3a:09:7b:bd:47:f1:50:45:1f:00:ca:3e:4d:52:13:
67:06:06:06:07:5b:99:eb:dc:55:6d:e2:db:f3:d2:
fd:a4:4c:c4:f5:4a:2b:0b:26:02:a2:23:ba:9c:cd:
83:d6:e5:53:dc:ba:76:09:31:e3:26:51:40:4b:48:
7d:5a:f0:90:e3:3e:a5:20:08:c8:83:3b:6a:81:ea:
a4:2f:a4:c7:42:30:38:e0:ed:2d:a0:4f:ca:c2:4f:
d5:e2:26:5c:85:11:4d:5b:84:65:1d:ed:25:73:65:
c8:68:fc:01:97:85:14:7a:fe:a3:ad:0b:5d:c2:d4:
c5:ae:f0:00:42:27:54:92:0d:5d:bf:cb:27:9d:9f:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:B6:2B:48:42:14:F8:61:59:E3:14:02:6E:6C:A8:1E:9C:0B:78
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:83:e2:2c:b9:0a:8f:96:84:e4:27:a4:17:0f:eb:9f:7f:60:
db:8c:7b:b0:0b:86:de:13:1b:3d:b9:14:9a:28:ec:e8:fa:b4:
fa:1c:08:11:a7:5e:bb:c5:5e:d8:45:76:ef:61:15:4b:f8:08:
20:a5:00:98:7b:88:65:20:03:fb:06:5f:9a:de:40:bd:5c:07:
06:b2:f3:4c:a4:e4:8d:24:0e:1a:db:7f:2c:0c:a0:44:fa:5b:
f6:e6:0c:6f:43:72:08:4c:8c:43:40:54:78:5b:73:97:6d:28:
d0:97:df:e2:98:e2:81:7c:c6:62:f4:67:12:56:14:3a:4a:a9:
c1:87:67:88:2c:59:89:ab:66:86:27:e2:cb:3b:d0:1f:65:08:
50:9f:17:ae:5d:1b:a2:ae:e4:d6:dd:8b:43:0b:9b:e2:4a:10:
e5:20:7b:32:fd:00:d4:d4:c8:2e:15:f5:3c:dd:02:53:50:e5:
8d:7f:61:24:37:87:27:5b:cf:69:64:f1:4b:ad:8a:bd:0f:f3:
13:35:c0:76:f2:31:45:59:31:38:2c:bf:d7:fa:d7:f9:9c:21:
9a:72:68:4a:50:08:de:68:55:13:36:6b:2c:0e:1d:9a:c0:f0:
59:fe:4b:28:7c:e9:51:15:ba:9e:59:08:80:19:a8:e2:e2:ff:
44:9a:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:59:40 2026 by rpki-client