Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: SLfa1QcvpxWgmJkCDQ7lV/7hnyTpvQh/oUJwoo3jZoU=
Subject key identifier: 89:25:D0:D6:CC:0D:F7:CC:52:2A:15:02:3E:AB:27:28:FA:EA:47:24
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019EBE112B851C13DFB214CBDF474FC06F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 112E
Signing time: Fri 12 Jun 2026 23:00:56 +0000
Manifest this update: Fri 12 Jun 2026 23:00:56 +0000
Manifest next update: Sat 13 Jun 2026 23:00:56 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: JomsCECdOHhugL8BzSXQY/Yh7eC3UJn/0KpjgfyHlTM=)
2: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (hash: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:2b:85:1c:13:df:b2:14:cb:df:47:4f:c0:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Jun 12 23:00:56 2026 GMT
Not After : Jun 13 23:00:56 2026 GMT
Subject: CN=8925d0d6cc0df7cc522a15023eab2728faea4724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:6e:0a:5c:a4:c8:27:5f:c1:9c:79:a7:8f:
63:6a:32:47:ec:f3:85:41:01:bb:62:4b:54:88:16:
20:0a:71:08:6b:e0:11:2a:63:e0:c0:0b:5c:63:ca:
2c:1d:d6:cb:66:9f:ba:de:fb:f2:2f:36:41:70:3c:
9f:b8:b2:ae:d3:61:55:83:03:f0:a0:8b:6a:77:37:
e0:5a:04:e0:56:14:b5:07:f3:b8:9a:0d:bd:15:6f:
b0:5e:2c:20:4e:84:de:ed:4e:18:95:e1:ad:58:7d:
e3:eb:33:bb:0c:51:58:3f:31:0e:88:45:28:fd:a1:
3a:9f:5e:2c:46:2f:aa:36:9b:0e:a8:78:48:3f:3c:
c0:ec:12:48:0e:a3:b3:07:5f:4b:75:ef:d9:aa:37:
cb:1c:21:62:6a:17:8f:48:39:f2:2c:d2:5d:a9:4a:
cd:35:da:ed:f3:bc:2f:2c:c0:83:69:fe:1a:a1:4f:
4a:75:86:1c:db:50:41:f7:80:84:7c:3b:87:e6:87:
a9:1b:b0:03:cb:12:09:d4:5d:0a:2d:cf:e3:4b:13:
2e:7a:82:66:fa:86:ca:de:22:46:3f:1b:d4:18:7a:
98:37:e1:6f:2e:10:09:61:cf:be:51:90:d4:d9:5b:
06:f4:49:73:a5:39:3e:f5:4e:5a:a7:10:b4:ce:01:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:D0:D6:CC:0D:F7:CC:52:2A:15:02:3E:AB:27:28:FA:EA:47:24
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3f:e4:75:5b:c8:a4:c4:8d:6d:3c:e1:d4:28:69:94:58:25:
d8:5a:b7:ab:81:44:c9:fc:9c:2a:fb:72:ac:ad:94:bc:08:84:
e2:90:1f:d6:c7:3a:6d:88:3d:76:4f:39:c9:bd:bb:94:b4:5c:
f3:27:d0:86:74:01:e6:b9:90:0d:15:fa:c2:6e:ea:02:f5:ce:
4f:c1:cc:22:85:63:b8:31:a8:70:6c:c4:b1:b5:6f:cd:e9:1a:
df:09:eb:c1:16:e3:fc:8a:26:63:a7:c5:a9:51:98:bc:62:16:
ac:99:a1:28:9b:b6:49:84:32:b1:ff:09:2d:cf:85:9f:17:fb:
2d:89:0b:66:46:bf:04:f0:8f:0a:6b:3a:9a:aa:6e:c6:35:fa:
34:27:ca:40:33:e9:8f:78:fb:2e:59:c1:f9:db:ca:f3:d1:b3:
2d:ab:d0:05:d7:bf:aa:b3:10:b4:f3:9a:52:cf:fe:32:3a:ec:
5d:21:1d:4f:2d:a8:fc:86:13:f5:bb:f3:fb:92:32:45:6c:2c:
97:a7:85:b8:df:06:93:8b:1b:93:b3:4f:7f:7c:5f:21:49:6b:
f4:16:af:8a:78:05:81:8a:93:2c:c7:cf:9c:de:ae:04:e3:d3:
ad:91:7d:1f:5a:4c:e8:c3:7e:08:2f:9d:ac:74:c7:83:fd:8c:
0e:15:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:21 2026 by rpki-client