Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier: lK7Bm7FIS1w2EuETAfCxX/tEfmJvKPHM3fgSp8z+VLU=
Subject key identifier: 8E:11:FE:E6:A0:66:4F:A1:6A:A1:45:41:44:0F:72:1E:05:95:F2:0A
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial: 019ED3BD81948854B58FC7F80F03BF2C8611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number: 043D
Signing time: Wed 17 Jun 2026 04:01:12 +0000
Manifest this update: Wed 17 Jun 2026 04:01:12 +0000
Manifest next update: Thu 18 Jun 2026 04:01:12 +0000
Files and hashes: 1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: gAGFSVyu36GH4OXqz7YPC2KPUKqA1/i4JAVUlUTY/XA=)
3: fW8Rb2ydTpsUsTrGa2SivBYDQlA.roa (hash: R0r5msaJunREx2IGezURTBwCC6OaeIbwcDABeHEl6S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:bd:81:94:88:54:b5:8f:c7:f8:0f:03:bf:2c:86:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Validity
Not Before: Jun 17 04:01:12 2026 GMT
Not After : Jun 18 04:01:12 2026 GMT
Subject: CN=8e11fee6a0664fa16aa14541440f721e0595f20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:19:63:7e:d9:f7:43:10:1d:53:5f:4f:0d:
c6:c7:57:19:e4:21:e5:4a:68:8f:ba:4a:df:84:4b:
23:d7:b5:d9:05:63:97:aa:c5:d0:eb:8d:57:53:20:
76:25:fd:2d:da:bb:72:a4:72:d3:cb:bc:d6:40:97:
6a:90:bf:1b:ac:ce:ed:8f:2d:8d:2c:b9:19:de:8f:
4e:56:7e:59:7f:77:da:d8:3e:aa:bd:d9:07:5a:8a:
e3:1c:f9:7b:96:6f:51:93:f0:82:1d:db:6a:27:1f:
cf:11:d0:7a:47:13:b6:19:1e:5a:f5:08:76:7a:f4:
98:4e:41:b6:2b:a5:2a:95:f6:e4:05:b8:29:d6:07:
d0:8b:25:08:9f:20:14:2f:3c:36:3a:2f:a4:d1:a4:
97:65:39:5d:50:e5:de:91:e7:c8:05:bc:c7:be:0b:
8c:20:7e:55:f7:6d:5d:20:44:6e:3c:a0:d2:17:f2:
e4:68:48:7b:c2:de:6a:d7:c8:54:0a:72:3c:96:fe:
c5:3b:04:63:44:b9:cb:0d:c7:46:ef:d5:46:d0:21:
d8:01:fe:4f:ac:47:dd:48:6c:90:b3:58:bb:d2:bd:
66:19:12:15:ba:83:5f:b0:1f:0c:bd:b7:7e:96:f3:
96:74:47:52:c6:c8:e3:09:98:ab:32:72:7b:de:d8:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:FE:E6:A0:66:4F:A1:6A:A1:45:41:44:0F:72:1E:05:95:F2:0A
X509v3 Authority Key Identifier:
keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:49:7c:71:a7:a1:ca:98:b5:4b:70:03:5c:c0:a8:32:06:aa:
5f:26:50:4e:e5:25:57:ba:eb:a7:51:da:c5:2e:17:d5:4d:22:
41:63:b0:f6:a8:3c:34:c9:07:62:b0:45:4f:84:cb:2e:97:4c:
38:ba:e0:8e:27:b2:d0:ee:e9:02:d4:1b:79:c1:8c:ff:a8:cd:
7f:ce:73:8d:bf:72:c9:3a:e4:a5:cf:e2:56:9f:33:18:14:d7:
4f:df:e3:bc:e8:de:8b:6b:fc:4c:9d:db:78:d5:0f:c3:22:ff:
c2:c7:39:97:31:2d:d1:fb:6f:26:2f:1a:de:c2:c8:c4:89:a7:
e4:f5:39:57:4d:d9:a2:7a:13:6b:c1:fd:77:0a:ed:cc:6f:72:
e0:11:0f:e0:63:ec:98:01:7d:85:0d:12:17:a6:8e:2d:33:40:
83:c7:45:38:f5:b5:61:30:06:7a:84:d7:b3:c0:33:4f:a4:84:
5d:af:1b:d4:e1:7c:15:e6:95:5f:94:94:24:e8:0a:0c:12:53:
63:6b:1e:78:5a:0b:e9:31:00:70:59:22:3c:19:13:d6:03:9d:
93:0d:cf:22:a9:27:c5:24:8e:c6:25:a3:f9:3d:37:16:77:5b:
ff:a8:ce:0b:4c:0d:2d:89:e4:86:c7:a3:73:1e:f7:96:9e:b0:
62:22:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:33 2026 by rpki-client