
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: U4iX2E/ws5ZZh8wz8vYW5fUQ3JJmaeYrk1Zi77VvHWY=
Subject key identifier: 78:74:1F:31:0B:E7:F9:CB:7D:AF:62:C1:B4:7D:BB:B7:5C:F9:41:9C
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019EBFC91B8AC6462AE458FD0A942CDD1077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 1245
Signing time: Sat 13 Jun 2026 07:01:28 +0000
Manifest this update: Sat 13 Jun 2026 07:01:28 +0000
Manifest next update: Sun 14 Jun 2026 07:01:28 +0000
Files and hashes: 1: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: ykdluQNP5+L/Vq5PiqtpvHPv6C0gitbhULOTivY+mhk=)
3: yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa (hash: W/jGAjTWq86NyJWeIokb5Yic1QQn0pxHCXE2Q3AfgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:1b:8a:c6:46:2a:e4:58:fd:0a:94:2c:dd:10:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jun 13 07:01:28 2026 GMT
Not After : Jun 14 07:01:28 2026 GMT
Subject: CN=78741f310be7f9cb7daf62c1b47dbbb75cf9419c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:59:02:e7:17:b2:06:80:bc:eb:df:6e:46:
77:6d:4b:c3:50:6e:72:eb:ca:eb:2c:4d:54:28:a9:
11:4f:79:b4:b7:5c:7e:85:39:1d:5b:29:3a:62:2e:
a0:fd:85:0c:32:95:f1:ba:bd:1d:03:3e:4d:e7:c9:
f3:31:ec:28:50:63:6c:c5:84:61:ef:b4:e6:30:14:
e9:cd:bb:4e:d1:b9:88:3b:78:3f:71:eb:80:03:82:
b0:5d:88:ee:8d:ea:e8:c6:33:8c:4e:2f:09:ce:0d:
65:24:64:4b:e2:af:06:c5:ca:ad:51:c3:b8:2b:9c:
10:48:25:5f:a1:5a:a7:62:9a:30:b0:87:c5:a6:2a:
25:bb:94:78:4f:5e:3a:af:f4:83:2b:42:70:5c:54:
f5:18:9f:12:42:22:d6:e2:46:c0:63:c4:01:c8:ed:
e6:39:60:53:cc:56:fd:83:4f:8a:c2:6c:59:24:c9:
d1:ec:8e:40:1d:00:29:f5:a8:71:d4:16:ef:3d:43:
7f:c4:24:9e:41:1a:ec:92:80:12:53:ae:52:14:ff:
f4:eb:6a:a5:ae:35:52:27:74:e3:a6:63:7e:58:32:
e4:a7:46:f0:de:94:30:88:e9:a7:5f:0f:21:9c:3c:
dd:c9:c3:f5:64:f9:1a:d7:ee:20:9d:99:84:db:c9:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:1F:31:0B:E7:F9:CB:7D:AF:62:C1:B4:7D:BB:B7:5C:F9:41:9C
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:55:55:1f:1a:c8:2c:2b:d5:26:77:cf:60:25:7c:7c:d1:ab:
6a:4d:c4:48:48:ef:41:dd:22:12:b5:6c:ef:81:96:09:8f:a0:
b4:26:29:e8:d5:70:a2:3a:00:f1:24:56:6a:5b:3f:2b:de:f1:
2b:02:d2:4c:f1:76:d0:de:12:21:11:a3:e3:04:2b:d1:2e:e2:
6a:c2:26:55:6c:b7:dc:19:96:e1:69:cf:4e:7c:b1:03:cf:8c:
16:fb:ab:6b:00:b5:e9:9a:8b:39:96:3f:d6:20:18:5b:a6:01:
b1:de:35:a8:29:53:31:e4:e9:c8:30:57:80:21:d3:6d:cf:b8:
5c:9c:ff:c9:a4:22:90:62:c1:85:aa:50:29:76:b7:21:aa:96:
d1:0d:8d:c6:1f:a6:d1:43:95:ee:22:c5:2b:d2:9f:6f:0b:af:
ba:f7:64:ef:90:00:bf:6c:6c:84:6d:98:f1:10:f8:8f:f7:57:
77:da:e9:48:d3:45:83:a4:45:f5:20:3d:eb:81:0c:93:43:bb:
e3:f6:09:77:41:2b:4d:c3:96:36:09:26:29:99:2a:bd:aa:a9:
c4:98:19:33:2c:de:14:ae:7f:8a:4f:e5:49:74:85:c5:c5:23:
03:e8:1d:5e:fd:90:93:75:70:e1:04:01:31:72:76:d6:e2:c2:
a0:ea:16:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:32 2026 by rpki-client