Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: T1lV7X3dika/+fSXS8ASc9ARVDlvoBJ+Z86wy3bwoJo=
Subject key identifier: 1F:52:2A:75:DE:13:F1:B8:05:12:1D:94:EE:34:8A:AB:1D:85:4E:AB
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019EC3DC7E866C2B42EF49E43A76E58554D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 151C
Signing time: Sun 14 Jun 2026 02:01:07 +0000
Manifest this update: Sun 14 Jun 2026 02:01:07 +0000
Manifest next update: Mon 15 Jun 2026 02:01:07 +0000
Files and hashes: 1: 3Kmog7cWFs6s3S45GoXvhR3Efno.roa (hash: Iqqkv/IBYj5OUDfgj+1rxohlVAnDwSEOY17mdlZvfIw=)
2: QSgiyH11wyAURvatj9-ZAc4hYVY.roa (hash: clDL8JVxHAo7Ey2O322dbo1WNKZNfLWVEI2vSjSdkIA=)
3: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: rNW3UfubpwHIGYj+Ts81fvTPRo1nNJwp6nSd/9xmQBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:7e:86:6c:2b:42:ef:49:e4:3a:76:e5:85:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jun 14 02:01:07 2026 GMT
Not After : Jun 15 02:01:07 2026 GMT
Subject: CN=1f522a75de13f1b805121d94ee348aab1d854eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:aa:52:47:02:c1:72:b8:22:c1:40:dc:82:
61:16:8a:a1:97:70:96:81:a0:4a:b3:6b:40:a5:c4:
48:a0:ef:40:78:78:fe:35:85:03:9d:ce:bb:74:59:
0e:9c:95:72:9b:38:e7:26:c4:96:4e:fa:0b:61:4b:
7c:e7:b9:b4:51:4e:a7:e3:18:35:7c:c1:c4:79:05:
26:31:a2:fc:f0:b8:41:1a:47:af:20:bc:93:ac:62:
be:a5:0a:92:d6:a6:77:fd:11:ea:c3:a0:e7:1b:14:
3a:47:1f:6a:fe:01:26:4d:43:91:17:5e:15:3c:29:
b8:71:4d:c5:88:c4:f5:c0:82:11:2a:21:3c:66:51:
47:52:2c:26:7c:85:8a:eb:34:1b:6f:1e:15:11:ed:
7e:b9:ff:f1:4f:38:e6:0c:28:5a:df:2c:34:e3:78:
96:f8:1c:c1:19:11:9e:38:d5:a3:a7:3f:ce:76:68:
02:34:be:d6:08:01:04:1d:cd:38:8c:13:c9:b9:02:
3f:5c:f2:64:b3:1d:8b:ca:79:e4:0b:ce:97:5e:3b:
7b:71:55:ef:5d:28:15:95:4a:e5:8b:08:b9:b9:56:
a8:cd:9d:5e:66:f8:c1:46:c3:e5:08:8f:d8:6f:f2:
a7:d9:3d:da:83:1c:c1:9b:36:1b:9e:d4:52:8a:18:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:52:2A:75:DE:13:F1:B8:05:12:1D:94:EE:34:8A:AB:1D:85:4E:AB
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:b0:5e:de:0d:ad:9b:01:8a:a8:12:e8:b2:34:84:13:e3:
46:ce:49:f8:c5:c2:83:5e:d5:2b:22:b1:10:53:3c:7d:50:54:
dc:5c:10:f9:4a:67:53:3a:85:c5:a9:c4:b9:5f:08:99:6c:d7:
00:74:a5:f1:78:b9:ff:0a:21:c0:b3:25:d3:64:7f:c1:d4:36:
7c:ff:4e:06:55:05:2a:53:de:16:56:2d:fc:42:06:ee:70:d3:
5e:97:43:17:74:83:40:d3:bf:b0:3b:cf:f9:8d:65:b2:cc:83:
5a:c3:34:d8:36:a7:ac:6b:e0:35:b0:27:54:a9:7b:ab:0f:f6:
52:e5:7f:b5:fa:68:ab:21:8b:25:67:fc:21:04:a0:fb:5f:51:
93:3a:bf:2e:cb:12:b7:f4:3d:29:2b:e2:71:0d:cc:fe:b3:1c:
90:63:7a:b2:d9:e4:5f:c0:1d:d2:15:aa:35:43:69:d0:cd:bf:
7e:ce:e5:18:b3:c2:4c:37:f3:26:bd:6e:cd:dc:65:9d:d4:84:
9d:da:72:8d:04:90:d9:b8:16:8d:e9:6a:97:88:f5:de:ed:8e:
09:aa:e6:b6:79:b3:09:43:a1:45:0b:58:8d:0f:2e:df:ef:db:
96:11:de:c1:ca:46:dc:e0:18:24:d7:41:9d:fc:f3:67:31:3f:
52:b6:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:16:03 2026 by rpki-client