Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: X467+Wyp+GccN4B1Pi0+kobvzKaMHl5wDgWxLlYWK48=
Subject key identifier: E2:2D:F7:AE:1D:44:21:04:97:68:E0:63:78:7D:26:76:F3:37:93:6A
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019EBFFF431994181832CAFAE3AFA390CBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 0327
Signing time: Sat 13 Jun 2026 08:00:37 +0000
Manifest this update: Sat 13 Jun 2026 08:00:37 +0000
Manifest next update: Sun 14 Jun 2026 08:00:37 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: sFLcEWOfPwbCSOLkN4ucx/sKbgp0aLnnoNia0zFr/P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:43:19:94:18:18:32:ca:fa:e3:af:a3:90:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Jun 13 08:00:37 2026 GMT
Not After : Jun 14 08:00:37 2026 GMT
Subject: CN=e22df7ae1d4421049768e063787d2676f337936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:eb:bd:fe:0a:11:0c:92:2f:f1:4e:b4:0c:
5a:e0:ea:fe:ff:11:d5:b3:e4:2c:1c:98:65:3e:76:
1d:f4:fe:81:e8:df:97:02:f0:51:50:51:37:d8:87:
e8:34:66:93:c6:0d:db:b8:00:5f:12:48:0f:63:61:
26:77:78:33:62:72:d0:fe:2b:9b:37:18:b4:9e:76:
ce:ed:c4:ea:d6:97:36:6b:a8:0b:d3:35:5f:42:f6:
2d:f7:dc:c2:ff:90:58:45:49:7f:01:d9:b5:4d:90:
05:43:85:29:e0:b9:1b:4e:2b:80:c9:3e:fc:a4:12:
e1:8a:66:5a:67:0f:b3:9f:b0:26:87:ff:52:0f:4a:
d3:5c:b0:b9:0e:fe:5a:07:7e:71:44:b6:2f:2a:8c:
a6:af:f6:66:6b:b2:ca:b4:d3:0a:da:77:9b:e8:3d:
99:4c:af:c6:e7:c1:f7:ee:d8:4f:96:79:d6:cb:1b:
58:5c:21:51:86:ce:85:6d:85:fd:d7:25:65:1a:ba:
0d:ba:0a:fe:88:c3:06:00:04:f5:6b:14:dc:15:a5:
d4:ca:dc:eb:9d:c6:22:76:c0:7f:cd:b7:93:10:6b:
6a:c3:32:e6:d2:e2:2d:85:2a:b8:72:35:61:02:ac:
04:fc:8d:41:b0:69:56:c9:e2:e1:b1:60:c0:be:dc:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:2D:F7:AE:1D:44:21:04:97:68:E0:63:78:7D:26:76:F3:37:93:6A
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cd:09:03:39:71:73:98:ac:31:40:c7:6d:8b:1d:2e:a3:74:
70:16:c8:d1:93:13:16:af:b9:7f:e5:53:bb:83:c1:97:9a:fd:
a5:40:94:fd:a9:70:b2:10:e3:76:87:83:08:3b:6c:09:ed:52:
a4:35:56:74:58:6c:05:c7:6f:db:c3:8c:84:03:3f:01:0a:3d:
51:c3:60:96:1e:20:2f:20:7a:0f:30:a2:25:1d:fd:99:7c:0f:
c0:15:0e:ff:ca:c1:cb:13:ff:d4:8b:2a:f2:bf:b2:1e:ce:ba:
fa:36:10:96:fd:43:74:c3:06:07:61:e2:a2:1c:e1:63:8d:26:
75:75:e5:2a:ce:a3:f2:8c:c4:32:dd:45:40:9c:a5:7f:78:00:
70:39:7f:88:a6:04:f7:da:46:5e:d5:35:25:f4:c0:4d:76:00:
7a:d0:e4:7c:70:d6:de:6c:0b:81:5a:a9:fd:d0:54:e9:08:d8:
64:be:5c:1d:27:a3:e3:e5:01:30:6c:e9:c5:28:c8:d6:ae:9b:
59:cb:bc:87:fe:0c:e8:59:32:14:b4:ae:6f:e8:97:80:b8:31:
d5:8c:9b:27:21:23:06:94:c8:29:1f:ac:8a:ef:ca:4b:ce:9a:
52:cb:32:a2:ff:a3:a1:fa:62:f0:93:9e:02:46:98:49:de:31:
1b:e8:a6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:25:31 2026 by rpki-client