Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: z1Hz6DflYu3krsKEYBVWAHLOVlSIv1umEuaJiLk3iYQ=
Subject key identifier: 3C:0F:C1:59:F2:C9:05:D8:3F:C0:AF:10:56:2F:43:51:10:C7:04:95
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019EBF5A3A8C8AAABEB53D528DC758C107DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0CED
Signing time: Sat 13 Jun 2026 05:00:21 +0000
Manifest this update: Sat 13 Jun 2026 05:00:21 +0000
Manifest next update: Sun 14 Jun 2026 05:00:21 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: AfC2NKIxF/iuEuu6aj3Wrd4G1dnpXHuiwSilYH8Ldi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:3a:8c:8a:aa:be:b5:3d:52:8d:c7:58:c1:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Jun 13 05:00:21 2026 GMT
Not After : Jun 14 05:00:21 2026 GMT
Subject: CN=3c0fc159f2c905d83fc0af10562f435110c70495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:67:81:37:73:c5:f3:89:2e:84:69:9f:b9:
05:44:6b:62:70:bd:cc:cd:14:1e:0a:1f:df:c5:1f:
9e:c0:e4:57:12:c9:52:4d:34:56:e8:9f:68:e7:91:
c0:ca:8e:08:fe:04:99:d2:61:48:7c:ef:9b:55:d4:
f1:4a:96:f4:8f:dd:cb:4d:51:32:97:f5:26:f7:f7:
f2:b8:0b:6e:85:6e:d1:35:ce:c6:cf:d2:6e:71:6e:
19:2d:e3:ec:f3:99:26:21:27:a8:d2:e6:cf:78:be:
7d:25:34:a5:70:a9:eb:3f:ac:f3:ab:4f:45:14:ec:
11:6d:3a:9c:0a:2c:8d:90:c8:9c:38:a3:44:06:54:
2d:db:ee:e9:d9:4b:85:fa:d5:a8:d5:7e:e2:c0:d6:
ea:62:ac:37:ad:61:8c:f3:4f:df:90:59:c4:24:11:
24:5f:ca:41:ee:67:23:1e:1f:3d:ed:d9:99:b7:be:
47:e2:6e:47:b5:d3:8b:7c:75:c2:3d:81:1d:89:f9:
1a:49:5e:b8:c1:ac:e7:e1:e7:49:5f:7b:28:6f:54:
e9:2d:50:f5:f6:2b:d8:94:d3:f3:68:24:4b:d1:b5:
37:3f:a2:dd:e6:6a:30:40:68:67:99:bc:de:26:a9:
d6:4c:d2:b5:04:41:e6:0d:14:2a:84:b5:a0:5b:61:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:C1:59:F2:C9:05:D8:3F:C0:AF:10:56:2F:43:51:10:C7:04:95
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:be:a7:7a:aa:02:32:ac:7b:ae:3f:88:cd:24:55:2a:ac:8d:
67:46:50:fb:59:ea:a3:20:05:1b:5b:05:9e:c7:1b:8a:27:18:
fe:f6:2e:6d:c2:60:7a:29:53:6e:0a:87:b5:ff:60:33:d0:ec:
ad:3f:18:93:ad:c8:f2:c6:19:1d:55:0d:f0:bf:7f:ab:84:76:
7c:86:e7:99:2e:6c:11:64:13:9d:5e:fa:0f:6f:4a:fa:d4:7b:
23:a2:c4:1a:72:0a:f5:04:46:ef:29:bb:20:04:3c:9d:43:4f:
6b:a3:82:a9:36:f6:04:de:a2:f1:ca:25:c1:b2:3a:b3:0e:0d:
c5:07:04:2e:a7:a0:d0:27:0e:32:dd:af:e3:59:be:bd:29:2c:
59:3a:da:52:73:d2:63:18:b4:0a:e8:8f:a5:40:0a:98:f3:cd:
07:fb:9e:25:c2:6c:78:98:0d:8f:65:d0:e0:f8:dc:c4:60:59:
f7:9a:fb:c6:e2:ca:93:02:be:61:28:f5:91:a3:79:85:02:a2:
3f:d7:3d:42:ce:4a:df:b1:57:43:cc:4f:25:00:8b:04:f0:41:
6d:04:73:eb:90:e7:31:5b:4a:6c:98:48:f4:94:09:ce:56:da:
cf:2f:1b:58:78:0d:3c:17:80:a2:67:82:42:30:b1:cd:e7:ce:
d6:f6:01:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:58:29 2026 by rpki-client