Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
File: y9IrSt4O0dTVMo6uXzili-lT-Dg.mft (raw, json)
Hash identifier: Z0xxtUujHzgnDutkk0WkCubX+m1+ta3WK5grlhL6v6A=
Subject key identifier: 4C:1C:44:41:A6:56:D7:0D:33:C9:79:ED:5A:33:AE:10:63:2E:20:86
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 019EC2CA24F9971596B7BB6B5DADE3F27DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
Manifest number: 1042
Signing time: Sat 13 Jun 2026 21:01:28 +0000
Manifest this update: Sat 13 Jun 2026 21:01:28 +0000
Manifest next update: Sun 14 Jun 2026 21:01:28 +0000
Files and hashes: 1: YaqRyIn-AB_tvxqkStw-Njh6W2k.roa (hash: hXGurB4kvwUhGTKMC2eDgDWOU9jHumsHCcR8hZrvaLo=)
2: y9IrSt4O0dTVMo6uXzili-lT-Dg.crl (hash: UxaJn+QFWUsFHav6lSjAlWwhsNmhWdB2AqjJ0snGxtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:24:f9:97:15:96:b7:bb:6b:5d:ad:e3:f2:7d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jun 13 21:01:28 2026 GMT
Not After : Jun 14 21:01:28 2026 GMT
Subject: CN=4c1c4441a656d70d33c979ed5a33ae10632e2086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:f0:44:74:6f:74:87:29:c5:d6:ed:4a:8f:
a0:3a:f8:d2:5c:d6:9a:a5:48:77:84:e6:9e:29:8d:
0d:70:06:8d:04:f7:4e:62:68:28:3a:28:9c:73:d2:
b6:11:07:d4:87:db:85:c1:44:8a:36:b1:5a:4b:0b:
e6:8c:37:71:ce:b1:fd:9f:69:8f:d9:c9:4c:8e:ec:
2d:5a:1c:58:fc:4e:a5:e5:b9:64:b0:bf:05:92:33:
c7:65:24:09:3e:30:3d:99:77:50:a5:62:3d:bc:44:
79:29:4e:49:d0:b1:15:cb:74:f3:e4:49:59:13:81:
46:d7:81:41:f9:eb:fb:70:cd:3d:22:a1:af:53:bf:
48:05:ec:07:6d:ad:cb:ed:2f:67:3a:96:9b:7e:52:
6e:3a:2d:81:56:b7:df:4d:e8:1e:b8:f0:9a:50:55:
38:61:7e:fe:d3:12:11:20:e8:17:e7:45:fe:d0:18:
2f:47:d9:61:9f:bd:dc:6c:bb:6a:2e:d9:83:f6:bc:
37:1c:f0:b9:7f:10:dc:58:25:87:0e:41:a4:8c:75:
00:fa:9f:27:fa:ed:10:41:51:9b:40:a5:22:7f:50:
da:2b:22:80:ce:40:bf:f7:2b:82:79:3b:9c:79:cf:
f7:5e:c8:ec:63:2f:29:46:11:05:82:86:27:00:b2:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:44:41:A6:56:D7:0D:33:C9:79:ED:5A:33:AE:10:63:2E:20:86
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d9:52:f9:a7:8e:c3:cd:4c:e0:62:28:92:cd:9e:2c:71:9a:
9a:9e:e0:a7:e5:42:6f:cc:13:2d:a5:a7:e5:38:96:13:9a:ff:
eb:b7:4e:aa:08:00:e4:c7:15:2f:af:3a:67:0b:2e:f1:5e:bb:
a1:54:75:f5:b7:df:f5:02:91:32:fc:cb:ca:76:c4:9d:03:3e:
ec:0e:d0:09:10:7a:be:35:8d:f0:e8:e1:14:1e:7f:ef:50:50:
d4:54:94:ef:56:1a:49:9f:0d:ed:62:e1:97:7b:1b:5b:84:cc:
b5:7b:f9:ad:a9:69:19:30:4f:cf:51:0d:31:ac:45:de:65:4e:
d5:d2:93:84:f9:68:a5:f3:8b:0d:55:a7:b3:48:88:0a:4d:23:
d4:0f:c3:47:40:27:94:1f:50:c5:af:8e:3a:54:dd:5a:9d:0f:
cc:40:54:98:7a:ad:35:da:37:59:bb:aa:2b:c9:10:29:48:cb:
54:d6:99:d3:e5:21:26:3e:7f:6e:f5:b9:15:19:d9:8d:0c:a4:
1b:64:17:2b:3f:6a:45:5b:81:fb:8e:c5:52:90:cb:e2:69:8c:
25:54:cb:72:88:d2:4d:b7:34:6e:00:7c:77:f5:22:7f:49:83:
e5:a3:84:89:b0:1c:67:f7:72:17:52:5c:56:e6:3e:ce:60:af:
19:e2:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:58 2026 by rpki-client