Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
File: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft (raw, json)
Hash identifier: gDorXk+g0mjXLQjC2Z2d+0KYwHAgzcGS1o9xs/QMwBU=
Subject key identifier: EE:85:F2:B9:7C:FC:95:FB:83:2B:E1:0B:DE:28:97:21:40:B8:8B:8E
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019ED3F422354DF780691981170A05E964DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
Manifest number: 17AC
Signing time: Wed 17 Jun 2026 05:00:52 +0000
Manifest this update: Wed 17 Jun 2026 05:00:52 +0000
Manifest next update: Thu 18 Jun 2026 05:00:52 +0000
Files and hashes: 1: YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl (hash: be1qcx4RmlKzc6PfbxN91+X7ZYWhaGdGsXl/hIY+KXI=)
2: tCO87qgLeHdiJcQ1IV_bd46Jvho.roa (hash: 2SSHDUuNwyIUrIbmZYF0QjOFxPKwxanOkPswUq79oUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:22:35:4d:f7:80:69:19:81:17:0a:05:e9:64:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Jun 17 05:00:52 2026 GMT
Not After : Jun 18 05:00:52 2026 GMT
Subject: CN=ee85f2b97cfc95fb832be10bde28972140b88b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:ec:88:43:7f:25:4a:03:1e:b5:37:d9:f6:
c7:54:8d:67:b0:cf:54:ad:40:8c:0d:e4:34:d2:43:
ff:d6:4f:9f:56:ac:d3:48:7e:8c:0b:9b:ee:79:b8:
5a:10:14:69:34:c0:a9:2a:d7:90:8f:b3:5c:2d:7c:
d3:8b:64:25:ab:0f:79:20:6a:59:53:60:d3:6b:ae:
eb:9e:3a:d7:d3:07:a5:5d:e6:9d:fb:0d:f5:9b:79:
ab:21:a4:9c:05:3e:9b:09:21:2f:fa:27:57:d6:89:
9b:08:69:9e:05:24:8e:eb:c4:a1:05:ae:cf:1e:6e:
38:82:cd:23:6d:d7:35:00:d7:fe:f4:1a:40:db:e8:
67:18:e6:b7:4f:3e:99:94:ae:21:fc:cc:90:48:54:
c8:e9:05:66:99:f4:b0:77:95:ed:ea:97:be:30:19:
79:a8:d2:a8:1e:57:e3:43:07:4f:f2:00:0a:ae:55:
4e:b5:be:58:2e:1c:b7:09:7c:04:81:29:fa:95:50:
ba:0e:56:5f:e8:88:ea:7d:e6:bf:41:c7:63:06:11:
d0:30:cf:52:5e:d4:cd:05:2e:f0:34:c1:74:b5:e2:
17:e8:f5:e6:16:84:67:c2:10:30:16:c2:db:ae:04:
33:06:39:b4:ac:d7:33:b9:36:51:f5:03:30:2a:76:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:85:F2:B9:7C:FC:95:FB:83:2B:E1:0B:DE:28:97:21:40:B8:8B:8E
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ae:fb:53:da:9a:c2:e6:32:ee:77:ef:33:bc:f8:a8:fc:71:
a7:2d:5a:6a:b2:f0:9f:03:7b:93:a0:f5:06:67:f9:de:8e:a1:
73:98:95:09:03:5e:98:e3:4c:7b:bf:9f:d9:19:93:ad:98:1b:
89:da:4c:97:7d:56:f4:e8:b2:1f:79:6a:d4:fc:40:a0:84:2f:
28:6b:80:c5:20:4c:38:b2:d0:2f:cb:00:c5:c7:6c:4a:41:90:
43:77:b8:b9:21:1e:d1:9d:ad:81:cf:15:d0:df:f9:85:96:21:
0a:c3:c6:45:0b:85:39:f1:0c:08:9d:6a:62:8c:76:50:60:b4:
14:14:d6:4b:5a:35:28:a5:7b:ae:08:df:81:4a:78:f9:cc:f3:
a0:a4:c6:8e:b1:ea:54:4c:76:18:15:4a:df:cc:8e:32:64:10:
91:55:12:e7:5b:5c:da:a2:6c:52:90:a0:fc:20:e1:6d:a1:8b:
5e:71:f9:08:e1:42:f4:a6:f8:7f:c3:0e:bc:f6:40:75:42:58:
21:a1:e4:c4:fe:00:b7:25:02:a3:64:5d:1e:03:bc:65:15:26:
56:f1:60:4f:5b:0e:61:5b:74:07:5a:5b:85:c3:3b:8e:08:a8:
f7:99:55:37:33:6b:ed:bb:43:8b:63:0e:ae:a5:2c:46:73:f9:
1a:04:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:22:45 2026 by rpki-client