Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: zD1GXbcexSCv6MRhUz0sD3Advv49gbOpUNTGtPzulrc=
Subject key identifier: 4A:B3:51:A5:66:D2:5A:F1:08:59:9F:1A:EF:D8:1A:F5:66:68:D0:FC
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019EBF5A4765CBE21E19ED6A8971A8559147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 09D1
Signing time: Sat 13 Jun 2026 05:00:25 +0000
Manifest this update: Sat 13 Jun 2026 05:00:25 +0000
Manifest next update: Sun 14 Jun 2026 05:00:25 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: bx2z/sAwUFYqvwZwk8AXinKJh4c3zZQd3d5RmKfUXe8=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:47:65:cb:e2:1e:19:ed:6a:89:71:a8:55:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jun 13 05:00:25 2026 GMT
Not After : Jun 14 05:00:25 2026 GMT
Subject: CN=4ab351a566d25af108599f1aefd81af56668d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:ce:12:60:fe:dc:61:57:e2:f8:a9:37:ac:
80:67:28:c7:a2:91:97:59:cf:47:81:08:78:6a:39:
a9:21:f9:08:f3:11:41:22:ad:71:4b:4a:62:bc:a3:
d3:d4:e1:8b:13:70:4b:22:26:57:24:06:ac:47:9d:
a3:50:7b:8c:4d:3d:fe:2d:50:df:69:c2:fc:88:ce:
c3:74:1e:c5:62:a2:c7:f7:4f:b6:f1:47:b8:65:a6:
c8:26:a1:f3:90:e5:21:dc:cf:5a:23:0d:78:54:c2:
1a:91:59:80:c4:9d:e5:0f:b0:93:b6:48:01:a6:bd:
d0:a3:93:a4:e6:37:d8:3a:c6:2f:cf:05:40:fa:dc:
7d:52:26:39:6b:66:3e:f3:83:49:b5:b6:95:23:8c:
27:9f:a4:6a:fb:6b:df:a4:86:11:66:e6:b5:94:2a:
73:cd:b2:8c:28:31:ee:a7:10:09:50:32:f2:e2:5c:
ce:17:74:d3:2a:91:6b:39:3b:74:d6:c2:2c:ad:8a:
78:f1:b1:41:2c:27:85:1f:4c:33:25:4e:c9:ce:f4:
9c:a7:62:4c:c0:07:68:d8:18:31:17:67:54:0e:2c:
16:40:0c:67:bf:1a:13:44:25:49:53:ab:7a:0b:1a:
14:7e:9b:7f:7c:57:1b:6e:72:d6:b0:44:25:83:de:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:51:A5:66:D2:5A:F1:08:59:9F:1A:EF:D8:1A:F5:66:68:D0:FC
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:57:1a:c9:35:39:77:90:0b:ad:49:f6:94:f1:b6:14:6d:d3:
92:62:c8:14:5b:80:6f:b0:91:12:a9:85:58:03:69:58:cf:2a:
fb:1c:f3:6d:4d:f0:0f:76:21:bc:3c:93:36:94:12:b3:7a:d4:
24:91:88:97:6c:c1:73:37:64:42:bb:cb:7f:27:29:8c:a9:79:
f8:fe:2d:2b:e4:1d:7b:cc:46:ae:96:93:7e:7e:9b:c7:d3:dd:
96:24:5b:3e:bc:aa:f6:f1:9a:77:6a:ca:ca:93:eb:00:6c:2c:
0f:0a:97:77:59:9e:58:6f:29:e3:ab:c1:40:44:2d:ef:98:f3:
46:5e:39:f8:c4:92:7e:8d:11:fe:8f:d7:21:d9:64:1b:8f:bc:
02:00:cc:0d:b1:27:86:65:33:28:1e:af:93:54:1b:4d:be:2d:
5a:41:87:85:81:a7:c6:25:13:22:1f:ef:af:e3:e1:8b:49:a3:
17:86:88:b7:e6:fa:39:ff:40:c6:47:41:3e:9b:4c:84:dd:c3:
d9:e3:3a:72:71:25:61:c9:5b:1c:35:89:2e:ed:51:b5:c7:ab:
5a:8e:55:09:1e:b3:a5:c8:ba:a3:f8:fd:70:52:8c:b3:5c:c7:
66:44:97:46:52:51:ca:54:4e:b9:4c:89:e0:42:6c:c9:a2:48:
e9:9c:29:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:33:24 2026 by rpki-client