Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: VscgusZRkdT7v1S4YZ3l7Va/zMRjMc2NT3cZ4D+5T00=
Subject key identifier: F3:87:76:67:28:C0:54:2B:B2:9D:3C:81:CC:D7:C5:F2:E1:B3:F8:6C
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019ECAF1B95E3626148D4E003FDAAFB73E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 05CD
Signing time: Mon 15 Jun 2026 11:01:39 +0000
Manifest this update: Mon 15 Jun 2026 11:01:39 +0000
Manifest next update: Tue 16 Jun 2026 11:01:39 +0000
Files and hashes: 1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=)
2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=)
3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: co2gz3oqvvCzQUA4wPg8plkb1U0oXCOkNe2LO2VXPDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:f1:b9:5e:36:26:14:8d:4e:00:3f:da:af:b7:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Jun 15 11:01:39 2026 GMT
Not After : Jun 16 11:01:39 2026 GMT
Subject: CN=f387766728c0542bb29d3c81ccd7c5f2e1b3f86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:ad:f3:f1:8e:b6:9f:65:3f:77:a1:a7:d3:
e6:d8:21:49:64:93:86:63:d1:39:64:6e:4d:f2:31:
d2:1f:83:ba:55:32:83:2d:23:16:06:b7:95:56:5a:
b5:5d:44:fd:87:7d:73:7c:4a:08:d0:65:e6:d8:34:
bc:ca:45:b5:d7:24:a2:f8:5b:db:05:1b:8c:c3:c3:
1e:be:e1:2f:60:b5:27:7a:3f:ad:ef:93:03:d7:67:
8f:1f:13:a2:c0:b0:95:ea:cf:ad:d2:51:83:f9:19:
f1:35:fc:64:be:2b:b5:1b:82:8f:c1:12:76:20:fa:
27:c5:ed:c9:12:52:94:bd:39:9f:57:8e:61:5d:e0:
a7:c4:92:29:62:5b:8b:29:48:90:95:81:48:25:a4:
d0:ba:96:19:d2:f8:b9:5c:92:b6:f2:85:b7:68:56:
74:7f:a3:fb:97:aa:72:54:5b:8b:07:f7:5b:bd:f7:
11:cc:95:57:ff:6b:3f:8f:7e:be:ed:9f:78:b4:20:
6d:8f:e6:95:38:34:f2:ed:09:ce:39:07:7c:0b:d2:
65:a8:ce:dd:7b:09:2f:3e:6d:9c:69:f5:9e:ca:9b:
42:e6:e2:35:8e:d7:a4:36:99:fd:e0:af:0f:40:a0:
95:98:83:ee:b4:63:11:34:f0:8e:77:cc:d2:41:38:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:87:76:67:28:C0:54:2B:B2:9D:3C:81:CC:D7:C5:F2:E1:B3:F8:6C
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:03:da:18:07:e7:16:53:be:de:94:e8:47:64:65:61:86:
f5:5b:e0:80:fb:01:6e:ae:59:8b:38:c6:13:3f:34:e9:05:9c:
c2:43:ab:9b:da:b7:7c:50:56:28:6d:03:11:b2:80:47:05:b9:
7a:23:a9:18:bc:db:fa:21:53:60:b2:7f:ee:3f:42:91:ca:c7:
7b:f2:c5:ec:27:f6:f8:70:cf:6d:77:14:71:22:bf:67:76:e3:
e4:33:c0:09:73:81:72:d5:95:a9:4c:97:06:f0:89:a4:6f:af:
81:e9:c7:53:69:fc:64:07:85:cf:bd:37:60:aa:f3:f9:f4:16:
1b:7b:ee:98:d2:14:9e:84:26:f9:ff:f5:10:f7:ed:47:1b:f1:
ff:4f:0d:ba:d9:00:e5:5d:3c:5e:a3:aa:f5:65:ba:34:e7:7b:
62:03:d0:fe:e4:55:24:b7:2e:8a:76:a8:b4:5a:8d:27:57:a1:
60:01:fd:3b:66:7e:43:a6:da:2b:a5:1d:86:9e:a3:db:4c:08:
d6:3a:58:cc:8e:74:74:8e:d9:ad:e6:be:db:70:73:96:55:e6:
1c:fc:5f:ff:f8:53:4a:dc:e4:17:b7:3b:1a:7a:b7:04:cc:35:
12:76:35:89:64:93:11:ec:f3:70:37:4f:de:67:29:7e:bb:61:
10:ad:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:38:35 2026 by rpki-client