Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
File: YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft (raw, json)
Hash identifier: 9lABwzHkrf0oeJIE143TDiHHXJoZ4zTpTFGnsK5dyMM=
Subject key identifier: 3D:C4:60:50:E6:FF:65:28:7F:8D:E4:06:DF:8C:D3:5E:00:0A:BE:6A
Authority key identifier: 61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
Certificate issuer: /CN=61a14553cacf103274d433e6b268066e01541b25
Certificate serial: 019ECAF0E83977EF157D02F2997A69CA3417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
Manifest number: 188D
Signing time: Mon 15 Jun 2026 11:00:46 +0000
Manifest this update: Mon 15 Jun 2026 11:00:46 +0000
Manifest next update: Tue 16 Jun 2026 11:00:46 +0000
Files and hashes: 1: 6ptl5zZN6otvqTbmcxR9jeeyPTw.roa (hash: eOlv0gEoszbDU9BU/wQCemEUN+a4Reu5tk2gCPSosDY=)
2: U2pubs2iBylOl3mQStn1NV5HAeU.roa (hash: 3j+LrDTQ4DdD50DNjrhLgobkQoPmqtoqS9thhekJ5tY=)
3: YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl (hash: hv+BSaevXe0A3+rQsvanYPaWG6wBJ21d7eW6n76kYOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:f0:e8:39:77:ef:15:7d:02:f2:99:7a:69:ca:34:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61a14553cacf103274d433e6b268066e01541b25
Validity
Not Before: Jun 15 11:00:46 2026 GMT
Not After : Jun 16 11:00:46 2026 GMT
Subject: CN=3dc46050e6ff65287f8de406df8cd35e000abe6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:25:42:4d:4d:50:93:bd:a5:4d:e0:9f:0b:
78:1d:47:98:81:37:c9:b5:ef:3f:3a:6a:b3:e6:a8:
76:67:8a:2f:bb:45:69:af:74:35:6b:e2:a7:3c:99:
72:7e:a4:eb:3e:a0:52:4f:e1:3a:82:2b:1c:ce:b7:
21:fd:76:98:c5:16:d8:c5:1e:b2:9d:1f:51:25:d9:
5e:06:12:12:12:a2:46:9a:e7:df:31:99:16:0d:eb:
b1:ef:7a:58:8c:0c:7e:1c:8f:ff:cd:f8:9c:bc:85:
ae:84:89:35:9a:be:b5:af:32:d4:90:a3:63:e0:65:
8e:b4:0c:51:10:46:6c:85:ef:fb:e5:26:41:57:ee:
8c:c6:5a:2f:6c:92:86:7e:1d:cc:27:2b:b2:76:44:
4c:55:91:71:d4:3b:91:6c:05:f4:23:d4:12:1a:3c:
0a:fa:53:ca:a2:e2:97:c2:ad:a4:e3:c3:e8:82:66:
82:1b:4c:fc:de:ce:f6:dc:5d:8b:8d:94:59:da:19:
09:36:62:ac:d3:27:c7:e9:4e:f2:1e:34:9b:49:c6:
ef:2d:11:d7:9c:fc:c3:e9:d4:b2:ee:a6:21:c4:fb:
13:ec:72:af:56:dc:81:2e:a3:66:68:bd:ab:75:27:
d2:43:02:61:8f:8d:4d:65:12:bc:b4:17:71:6c:b3:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:60:50:E6:FF:65:28:7F:8D:E4:06:DF:8C:D3:5E:00:0A:BE:6A
X509v3 Authority Key Identifier:
keyid:61:A1:45:53:CA:CF:10:32:74:D4:33:E6:B2:68:06:6E:01:54:1B:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YaFFU8rPEDJ01DPmsmgGbgFUGyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8dd051-e2e7-496c-a9d0-fa266bb72f73/1/YaFFU8rPEDJ01DPmsmgGbgFUGyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:c6:55:30:98:4d:03:b8:c1:4b:ef:65:95:19:ad:36:da:
87:19:47:04:31:5c:72:bc:fe:a7:a6:b2:3c:6e:80:08:33:f7:
59:00:49:be:2f:56:2a:c8:13:4a:9c:fa:25:2c:ae:66:ab:20:
18:5e:2d:c6:82:3a:10:16:fd:9e:a6:86:6b:38:89:7d:64:c9:
25:83:71:ff:49:21:43:fd:ea:67:8e:83:10:82:6b:d9:6b:33:
0e:23:1e:fc:6f:0e:58:69:3a:a5:8e:e6:1b:95:a1:54:52:42:
b8:4f:d3:24:5e:00:a9:48:a3:74:9e:5d:1c:0b:d9:3f:45:a3:
35:a2:2d:57:be:b2:06:1d:90:c4:fa:9d:d8:50:53:c2:8d:c1:
60:bc:16:01:1b:3f:47:f4:e5:e4:ff:8d:8b:6e:b8:37:a3:ca:
ca:eb:11:1b:3f:7b:66:fe:b5:5c:c1:ae:12:4a:59:85:89:fb:
08:63:e4:d2:39:2c:7e:ba:62:c0:bb:96:21:ae:3b:28:a9:c4:
fa:15:1d:0d:98:59:62:52:c6:80:74:81:19:3c:48:4a:43:10:
cb:9d:47:c8:a1:e5:a0:92:e3:8d:e6:cf:f0:3e:dc:54:26:d5:
ac:b5:00:32:7f:f8:5d:89:14:2d:2d:b0:36:b1:a2:1a:ac:e0:
38:e6:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:36:57 2026 by rpki-client