Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: sifENzFJk9lfAM4/JV3XB5oog50cY51UCX8gk12xhyg=
Subject key identifier: E6:68:D8:81:9C:A8:F4:31:0D:D0:34:89:33:36:6B:64:43:33:B5:F8
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019EC3370D552DBB0C93315B0F863FDA6324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 09D3
Signing time: Sat 13 Jun 2026 23:00:25 +0000
Manifest this update: Sat 13 Jun 2026 23:00:25 +0000
Manifest next update: Sun 14 Jun 2026 23:00:25 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: ornpArY3yD4G7Y/Wi6Fw4E8Rzp+pJN+hjgtUJ8Jppls=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:0d:55:2d:bb:0c:93:31:5b:0f:86:3f:da:63:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Jun 13 23:00:25 2026 GMT
Not After : Jun 14 23:00:25 2026 GMT
Subject: CN=e668d8819ca8f4310dd0348933366b644333b5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:76:d9:cf:8b:94:52:56:bc:22:cf:23:0d:
c0:4a:98:5b:88:65:de:0d:78:61:d1:2d:fd:1a:10:
cc:1f:a2:18:3b:95:bb:ff:fb:f2:d4:98:b9:ae:65:
c8:d6:7e:3a:73:82:40:95:d0:55:82:d8:42:9b:fa:
c7:85:97:02:fc:3f:08:6b:26:16:d9:b5:0f:ac:58:
86:57:c8:44:d7:e1:ea:b6:85:54:d6:fe:57:b1:bd:
6c:38:f7:4c:76:9e:88:46:5b:08:fd:72:9d:17:ed:
97:3a:11:06:b2:36:62:a0:76:ec:e7:c4:c6:74:44:
ad:f2:9b:78:81:d0:7e:4d:5e:6b:de:65:0e:9a:f1:
8b:dd:da:34:98:30:14:a5:84:cf:9c:6e:40:68:9f:
42:38:f2:8f:4f:a4:1b:14:8b:1d:23:ec:22:95:45:
54:2a:f8:f0:11:a5:e8:f6:ff:a0:1f:31:fb:d8:20:
7f:dd:c5:0c:38:d5:fb:f1:18:2c:1c:bb:5c:74:22:
83:98:f7:e0:7d:e4:a5:44:dc:e8:50:ae:5f:f6:95:
94:b7:3e:c0:18:2a:a5:bf:13:5b:72:7c:4c:b1:0d:
1b:62:d8:a7:98:09:ba:44:55:57:92:95:d5:42:46:
42:72:ea:2e:3e:70:28:cb:aa:7b:9a:79:4c:1a:53:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:68:D8:81:9C:A8:F4:31:0D:D0:34:89:33:36:6B:64:43:33:B5:F8
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:33:21:b5:27:52:96:3b:09:6c:66:88:83:75:29:78:be:2e:
4f:13:14:2f:52:ed:d9:e2:e3:d5:b9:4a:46:46:d4:35:91:0c:
c5:aa:ec:12:1f:30:31:6c:cb:42:0b:f5:08:ec:2d:65:5c:62:
98:13:85:4b:e7:8f:00:38:3f:5d:b9:07:03:e3:dc:0a:bf:fd:
b4:7a:91:79:ca:0d:7e:05:e2:c2:f2:1b:f7:01:35:4b:da:8a:
64:ac:af:02:f4:e6:a5:90:56:9c:a8:b5:a0:34:2a:b2:99:7a:
86:db:d8:a4:bf:d7:d2:08:d1:b1:14:2e:c5:e0:16:59:22:c5:
29:d5:d1:e1:d3:aa:4a:f7:3b:86:b2:8a:b5:0c:3a:af:e4:11:
e5:48:02:0c:be:ab:e7:a9:b0:95:fd:4e:94:c7:03:c3:cf:ba:
b5:2e:53:08:cf:7d:31:77:a7:60:56:2a:3b:06:7e:0c:21:eb:
52:b5:e2:fe:bf:1c:18:b1:c2:28:92:0a:84:cf:35:30:06:d7:
1c:1a:b8:e4:48:c7:1c:4d:bd:b1:95:01:42:74:a1:38:39:8c:
41:4c:26:a4:99:78:f8:3f:12:26:ae:9b:a1:2c:55:1b:b9:ae:
2f:26:89:c3:54:3f:26:d3:7d:a8:e0:cb:d6:61:23:ac:18:94:
26:7b:75:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DNw1VLbsMkzFbD4Y/2mMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4
ZTYxZTUwHhcNMjYwNjEzMjMwMDI1WhcNMjYwNjE0MjMwMDI1WjAzMTEwLwYDVQQD
EyhlNjY4ZDg4MTljYThmNDMxMGRkMDM0ODkzMzM2NmI2NDQzMzNiNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBd22c+LlFJWvCLPIw3ASphbiGXe
DXhh0S39GhDMH6IYO5W7//vy1Ji5rmXI1n46c4JAldBVgthCm/rHhZcC/D8IayYW
2bUPrFiGV8hE1+HqtoVU1v5Xsb1sOPdMdp6IRlsI/XKdF+2XOhEGsjZioHbs58TG
dESt8pt4gdB+TV5r3mUOmvGL3do0mDAUpYTPnG5AaJ9COPKPT6QbFIsdI+wilUVU
KvjwEaXo9v+gHzH72CB/3cUMONX78RgsHLtcdCKDmPfgfeSlRNzoUK5f9pWUtz7A
GCqlvxNbcnxMsQ0bYtinmAm6RFVXkpXVQkZCcuouPnAoy6p7mnlMGlNEpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZo2IGcqPQxDdA0iTM2a2RDM7X4MB8GA1UdIwQY
MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt
ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz
LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTMhtSdS
ljsJbGaIg3UpeL4uTxMUL1Lt2eLj1blKRkbUNZEMxarsEh8wMWzLQgv1COwtZVxi
mBOFS+ePADg/XbkHA+PcCr/9tHqRecoNfgXiwvIb9wE1S9qKZKyvAvTmpZBWnKi1
oDQqspl6htvYpL/X0gjRsRQuxeAWWSLFKdXR4dOqSvc7hrKKtQw6r+QR5UgCDL6r
56mwlf1OlMcDw8+6tS5TCM99MXenYFYqOwZ+DCHrUrXi/r8cGLHCKJIKhM81MAbX
HBq45EjHHE29sZUBQnShODmMQUwmpJl4+D8SJq6boSxVG7muLyaJw1Q/JtN9qODL
1mEjrBiUJnt1pg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:46 2026 by rpki-client