
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File: ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier: vIVokWlH2hj+cXOl5gC+SP4aBSl13bCTT2G/LC+vJK4=
Subject key identifier: 05:21:20:BD:EA:BE:13:47:29:0D:15:7A:E9:DE:FC:CD:EF:50:FB:E5
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 019EBE7F58F75BFDD3056DE678D34DC10247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number: 12C3
Signing time: Sat 13 Jun 2026 01:01:17 +0000
Manifest this update: Sat 13 Jun 2026 01:01:17 +0000
Manifest next update: Sun 14 Jun 2026 01:01:17 +0000
Files and hashes: 1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: kRs5eqgAEbJEHo+mCY43cVSisH/2GHPjk8kLBz4xCoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:58:f7:5b:fd:d3:05:6d:e6:78:d3:4d:c1:02:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jun 13 01:01:17 2026 GMT
Not After : Jun 14 01:01:17 2026 GMT
Subject: CN=052120bdeabe1347290d157ae9defccdef50fbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:20:b5:55:7c:63:9f:75:98:3c:1f:22:7e:9b:
e5:8c:0b:c6:0f:32:f4:58:ba:61:13:87:be:49:22:
70:d9:a4:eb:6f:cd:ec:72:09:92:fa:2c:9b:35:6c:
da:af:f2:1b:0a:15:6c:17:9e:5f:e4:79:83:78:00:
9a:5c:9c:61:9a:22:0d:18:78:45:f4:5e:b5:1d:67:
79:c2:b2:42:79:87:3f:af:cc:ad:ce:ac:76:b4:22:
36:2a:80:c2:ba:0c:1f:79:08:7e:8b:0a:b9:3b:41:
c0:4b:d2:33:2d:3d:51:ad:9a:5a:64:e5:41:16:64:
86:86:b5:f8:87:5d:9e:90:9e:c0:8f:0f:a7:20:db:
dc:84:49:d8:97:9d:2b:a0:23:94:8e:97:06:34:43:
5e:15:91:c5:6a:36:c4:45:bd:ee:b5:fb:a6:6b:2f:
f6:33:96:ca:55:59:ae:91:87:28:8d:63:56:74:96:
2b:9d:f0:0f:30:f9:d2:8b:8d:68:1b:86:9c:94:06:
e0:d7:7a:fa:9b:30:9f:81:23:72:8a:df:9d:61:29:
3c:8b:8f:31:62:0a:92:ba:b5:bf:57:73:8e:79:96:
cb:45:38:a6:8e:f1:e3:58:42:0b:9a:f6:1b:02:81:
02:a8:d6:4f:31:0d:b1:82:ac:37:46:ae:83:31:61:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:21:20:BD:EA:BE:13:47:29:0D:15:7A:E9:DE:FC:CD:EF:50:FB:E5
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8a:16:29:20:0a:8c:39:4c:18:e5:35:17:02:ce:3a:11:fc:
1a:a8:a7:0d:6e:4e:19:8b:40:bc:c7:ac:ff:7e:8d:69:36:e1:
65:99:eb:9a:37:9f:00:35:95:9e:a5:31:4e:af:e9:ab:48:04:
cc:aa:e1:4d:d1:df:fb:e1:1a:92:8b:e4:ae:c5:54:bf:d5:38:
1f:81:52:2c:03:74:80:b8:d1:e1:a5:9e:a1:db:70:7e:4d:a6:
4d:18:0c:af:4c:81:b1:ff:7c:00:79:26:4b:b1:d8:d3:2c:72:
b3:1b:8a:76:ff:4a:58:d7:9d:f8:f5:9f:26:02:f4:5d:d3:d3:
6b:f6:74:f5:53:ec:ba:77:64:ba:3a:69:d2:e3:7f:97:b4:13:
a7:ce:da:12:be:1b:77:93:5d:f8:b1:6d:c2:d6:4d:4f:f6:85:
20:47:b3:a2:54:ba:fc:64:38:64:6e:ca:77:91:a3:10:e1:d7:
c0:3f:7d:7a:91:4a:f0:ae:50:a9:b9:6d:f7:42:64:88:f1:2e:
3f:c5:59:c7:19:2b:76:22:c6:3a:c9:a1:46:64:f5:1a:c6:29:
4e:db:de:4a:81:8d:b4:19:23:ea:39:b1:b4:8b:73:31:3a:a5:
44:fd:4a:10:55:5b:61:c4:45:e1:f5:d1:e3:1d:fb:e8:b5:a8:
53:a4:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:00:58 2026 by rpki-client