Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: 9JOO/cHYfz/4pyLeeYWDvs0dwNyewTHCcffgDRC9gJ4=
Subject key identifier: A9:B9:2E:8B:AB:D0:50:3C:00:59:CA:49:19:87:61:9C:09:31:8E:E7
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019EC17F7B37DAD39FEC09E5BC4FA55994C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 15:00:17 +0000
Manifest this update: Sat 13 Jun 2026 15:00:17 +0000
Manifest next update: Sun 14 Jun 2026 15:00:17 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: K1IFMdrrK8ovhUzVBp2FJBetrK4SsplP/m4k4IURNYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:7b:37:da:d3:9f:ec:09:e5:bc:4f:a5:59:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Jun 13 15:00:17 2026 GMT
Not After : Jun 14 15:00:17 2026 GMT
Subject: CN=a9b92e8babd0503c0059ca491987619c09318ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:b5:5b:b5:b6:10:40:a5:32:c3:d5:bd:24:
8d:24:5d:7f:0b:1a:7d:59:f3:d3:c4:f5:dc:2b:56:
53:ce:b4:91:ab:56:e8:02:4b:e0:37:e3:f2:e1:ee:
02:59:28:e3:38:fb:36:d1:19:b9:e9:1a:a8:24:97:
7a:21:71:3b:77:2d:fd:4b:1b:79:ec:07:04:4d:b3:
8e:9b:06:cd:bb:cf:74:5e:2e:d1:4f:f3:c6:b9:88:
0b:8b:2b:71:24:b3:22:c3:a5:2e:b7:92:75:4f:0b:
35:2b:f1:d3:8a:2d:9d:77:df:ab:c9:d0:1f:7b:48:
61:30:0c:3a:c0:22:33:4f:c9:56:82:c0:c0:ef:94:
fb:5b:3e:c6:52:3b:aa:65:36:b0:b1:b3:3a:da:d2:
b5:8a:59:56:98:24:99:09:bf:21:1d:93:68:e9:e3:
b8:21:d8:15:3c:95:ca:d3:6c:88:26:9f:41:f6:f8:
42:94:93:fe:00:f3:53:dd:f7:2c:d6:23:fa:fc:af:
bd:1d:89:4e:3f:56:23:a1:34:85:07:3a:3a:fc:27:
3a:2e:e9:71:3c:39:88:31:0b:1b:6f:78:91:b8:29:
55:17:69:3e:94:d8:c5:51:b6:8f:4b:fb:fd:c4:50:
3d:01:44:9e:c1:bf:87:a0:f8:c8:c1:8a:bf:3a:88:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:2E:8B:AB:D0:50:3C:00:59:CA:49:19:87:61:9C:09:31:8E:E7
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f3:af:d6:99:59:b4:c3:50:a6:15:65:6a:49:29:da:66:4f:
83:2f:a1:a7:b9:2f:b4:68:45:8d:26:af:17:68:1d:54:e5:30:
57:04:59:da:b3:5a:af:5a:21:5d:e0:96:86:12:5d:13:f6:51:
82:09:b2:b0:e7:ef:09:28:aa:5e:ec:bb:34:41:bc:8d:4c:82:
2b:26:29:13:93:db:e7:9f:60:ef:5a:8f:a6:fd:c1:eb:82:97:
1f:d5:d5:15:b1:3c:45:2b:ef:5f:b4:5b:0a:f5:53:d6:db:c9:
a8:17:d6:52:b2:2d:fa:dc:5e:6a:3e:71:ff:f9:76:f1:14:37:
2b:2c:34:ba:ef:31:96:03:f8:e0:50:43:e4:a2:34:9d:e7:8b:
b3:68:83:76:bc:35:f6:ec:41:85:71:e1:45:d7:cd:dc:b3:e8:
90:fc:8c:33:a7:c0:4f:4c:25:5d:ca:83:e1:1b:ab:c4:44:cd:
a8:91:58:6f:12:f2:03:0e:91:90:fa:19:25:d2:cf:1b:9a:3f:
33:d8:77:f8:78:e5:c0:3c:51:01:d5:c3:c0:95:b7:cb:b0:97:
87:1a:65:af:44:dd:20:71:ef:e8:09:50:77:25:dc:b0:81:01:
de:dd:a8:1b:67:a4:89:bb:64:bd:b8:9b:2a:d1:29:e8:8d:61:
9c:c8:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:23 2026 by rpki-client