Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
File: ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft (raw, json)
Hash identifier: dpoVVaIfrn7DkGWS46fIswBOGXz6MS/yZ+dbQmDJJHQ=
Subject key identifier: 02:D0:81:1F:F2:E5:B6:6E:AE:2C:A9:ED:09:28:30:C0:D7:F0:81:39
Authority key identifier: C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
Certificate issuer: /CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Certificate serial: 019EBEB5D2DF872383F31298C47065597A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
Manifest number: 22
Signing time: Sat 13 Jun 2026 02:00:47 +0000
Manifest this update: Sat 13 Jun 2026 02:00:47 +0000
Manifest next update: Sun 14 Jun 2026 02:00:47 +0000
Files and hashes: 1: L6cWexgMIbqFul3AirbjsOAefEg.asa (hash: 1nOkALqCPFQsioiwLDdO7OlhwTmnqBbLFbvH6uqIpPw=)
2: X2DmUx0pbN5guKhNJtTsv2u4c3Y.roa (hash: VTwewHc51dPE2RalZVl+hHr3MWkt8tZDjDqcqb8c2w4=)
3: ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl (hash: 6to/IuUOt6suRRjM9uF/JXz4sdxjPnbVlUAx6KRYbyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:d2:df:87:23:83:f3:12:98:c4:70:65:59:7a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9224208eeaf3ebdaf53727734e12191b931fb53
Validity
Not Before: Jun 13 02:00:47 2026 GMT
Not After : Jun 14 02:00:47 2026 GMT
Subject: CN=02d0811ff2e5b66eae2ca9ed092830c0d7f08139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:31:05:4f:15:d2:68:37:9b:da:eb:ca:5a:
76:3d:3d:01:29:a2:a5:d4:e3:f8:d2:d2:53:9a:0d:
4e:b2:18:72:c7:42:96:57:89:29:f0:89:72:26:49:
c1:ed:03:05:25:2d:a3:20:7d:06:c4:6c:fe:3c:72:
c0:d1:14:77:9c:c3:42:7c:0b:32:f7:3b:49:a5:f0:
0d:9e:57:de:c8:9b:61:85:c6:36:9f:f3:48:53:48:
c3:b1:d2:93:7b:a9:40:af:48:ba:f2:94:ed:03:82:
38:7c:65:4c:57:fc:b3:c2:49:25:d0:ce:f9:71:0b:
8f:2c:e7:73:24:c5:a3:d4:ce:e3:c2:53:b9:d2:41:
0b:51:91:70:54:a5:dd:92:bd:84:a7:d1:d8:ae:84:
7d:9b:1a:03:27:91:a6:a1:5a:8b:27:5e:17:e8:d7:
af:a6:9e:a0:66:6e:d4:c0:76:ba:74:73:5f:22:b9:
3f:8c:ce:ac:1a:b9:84:08:06:52:e1:64:71:bf:46:
8f:6a:d3:12:c4:66:fb:0f:a1:92:b4:e6:9c:2a:68:
6f:cc:5b:bd:2d:fa:a2:b9:fa:fc:06:b4:50:ec:2c:
96:46:f7:fd:89:e6:2b:da:88:a8:c3:49:01:37:0b:
e4:78:b4:27:8d:75:1e:3d:96:cc:fb:dd:98:cf:8c:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D0:81:1F:F2:E5:B6:6E:AE:2C:A9:ED:09:28:30:C0:D7:F0:81:39
X509v3 Authority Key Identifier:
keyid:C9:22:42:08:EE:AF:3E:BD:AF:53:72:77:34:E1:21:91:B9:31:FB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySJCCO6vPr2vU3J3NOEhkbkx-1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/75fa91-6794-4c21-8d48-3e5e5b315ec6/1/ySJCCO6vPr2vU3J3NOEhkbkx-1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ab:cc:93:ff:a9:ba:d1:b8:e6:c9:d8:4d:8f:0a:4f:d6:38:
d1:25:7c:f3:eb:af:5c:39:ad:aa:85:a0:94:3d:af:b3:d4:4f:
27:ec:5a:30:3d:c4:74:ce:44:32:53:d3:9d:60:6f:bb:e2:e3:
2f:5c:c1:df:09:57:70:25:98:22:e5:40:1a:ea:28:0b:cf:6e:
f1:5f:86:e3:da:eb:94:7e:46:9a:2e:d4:dd:3c:59:bd:d3:b3:
52:a9:45:e2:6b:83:db:ef:a2:48:2c:c1:53:5c:97:d3:d8:7b:
fc:a7:db:97:64:b8:db:a2:e9:75:d2:58:c7:5e:03:16:0c:1f:
f8:c9:44:75:f9:87:9f:b8:5d:f4:ed:51:51:76:76:c4:6e:cd:
4e:f8:e4:38:75:69:46:75:c7:72:28:30:e8:e8:57:ad:3f:a0:
3c:35:09:09:ab:6f:35:ac:a9:02:a2:a9:14:ba:de:84:33:50:
c6:fc:73:14:aa:e4:57:40:c3:1d:68:72:c5:73:ab:9e:da:23:
f0:cc:25:e5:6f:ad:e6:50:79:d9:fa:51:52:b2:c4:91:a8:34:
bf:77:67:39:54:91:2e:98:f6:8d:35:ae:8d:cb:99:b2:7d:3a:
30:1a:39:0e:26:15:78:54:1f:0b:0e:0d:3f:39:5c:60:7c:10:
70:58:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:12 2026 by rpki-client