Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: ZxPYam2Io3t9rMKlMFZvxyqNjPfOHC5MlYhjd797xwk=
Subject key identifier: 81:B0:42:9B:86:4B:C9:3A:52:61:C8:8B:77:7C:F0:94:F8:9B:45:07
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019EC111F902965CD9A143FAD3CE81A4C552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 1156
Signing time: Sat 13 Jun 2026 13:00:40 +0000
Manifest this update: Sat 13 Jun 2026 13:00:40 +0000
Manifest next update: Sun 14 Jun 2026 13:00:40 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: G5b+45qKXrR95k01hcgYqjJwV/IqFR5choyIHyrlIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:f9:02:96:5c:d9:a1:43:fa:d3:ce:81:a4:c5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jun 13 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=81b0429b864bc93a5261c88b777cf094f89b4507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:eb:66:64:8a:72:50:03:4a:95:79:51:76:
52:e5:48:db:8e:9a:51:19:1f:f6:eb:20:44:76:95:
d8:03:3d:8c:a2:12:2d:8a:cc:7e:de:48:e2:81:a8:
e3:b7:37:50:00:ca:60:1f:39:f7:cd:c4:9d:02:ed:
b0:b7:13:e4:29:28:8a:ce:58:ec:71:db:81:63:94:
3b:5b:ae:19:1f:ef:95:91:8c:ca:75:ca:45:07:d5:
90:f0:58:c5:f3:80:48:c5:91:66:e9:97:08:3b:f2:
58:ca:c8:45:d0:2f:68:64:70:39:20:fb:5d:53:e1:
ba:eb:74:01:18:f6:b7:d0:42:ef:0d:24:9d:60:8f:
65:7f:71:52:66:de:85:0c:2d:17:9d:f6:c0:06:0e:
0d:b9:18:8d:ac:0b:44:7a:fa:09:79:b1:f2:e1:ae:
fc:82:0c:70:57:52:55:9f:1b:0f:51:64:35:92:2d:
a5:fc:d4:bc:55:54:51:13:82:67:fe:69:be:1b:59:
f2:12:07:55:b8:e1:fe:1e:c2:42:c0:72:dd:f4:91:
b7:86:ee:27:e9:ce:d4:ce:29:17:e7:83:f6:5e:92:
c3:96:92:bf:64:80:2c:4d:7d:e2:46:a0:80:4a:e7:
cf:b2:42:93:e1:ad:f8:34:f6:c1:7e:05:30:2e:b5:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B0:42:9B:86:4B:C9:3A:52:61:C8:8B:77:7C:F0:94:F8:9B:45:07
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a4:db:30:45:dc:b4:37:c7:9f:22:05:d9:ec:ef:91:c9:d4:
dc:89:82:2b:2b:0c:5b:59:36:fa:d1:36:32:57:7a:5a:ef:c6:
54:7c:6a:98:13:6a:78:4f:50:ee:8f:b3:00:fe:a5:e3:6e:fa:
1f:7c:8b:a0:40:68:21:cf:bf:65:35:8f:f7:4f:1e:22:85:53:
b7:33:93:a4:28:ca:50:81:94:ec:17:e0:87:78:2e:7e:a8:2f:
93:82:0a:62:37:24:86:5f:5f:bd:b6:f7:39:85:2a:84:c1:99:
64:7e:5f:2d:f5:52:d9:57:96:78:61:d7:33:60:1f:0f:af:51:
ca:8a:eb:d0:1a:9e:a4:c9:6f:18:42:aa:c2:7f:32:e2:6f:57:
94:9b:d9:27:d9:53:d7:69:9e:30:47:0f:9e:6d:00:89:7b:34:
79:b4:11:fa:d9:0c:69:5f:0d:9c:f5:16:3e:18:92:f5:a7:78:
77:e1:84:e5:7f:b2:1c:d5:35:b0:9f:c5:37:11:97:a9:aa:78:
de:34:be:fb:d4:cd:f0:eb:c6:f7:9f:a0:7a:df:0d:9c:89:15:
0b:bf:37:65:6a:44:25:d4:f6:e0:be:f7:c5:c0:1e:97:a9:45:
e6:d7:6d:f6:eb:67:47:0e:1e:2a:40:df:85:2a:e4:7b:61:24:
24:92:c2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:29 2026 by rpki-client