Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: JZV5gxWXUAAuw6knhD0b8FyzyMX2tK8dpzhkVjE4XB4=
Subject key identifier: FA:88:92:87:6A:76:B7:95:32:EB:98:45:D2:5A:65:C3:8A:3D:32:7D
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 019EC17F8DA4E06C7332B487555267C84B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0F28
Signing time: Sat 13 Jun 2026 15:00:22 +0000
Manifest this update: Sat 13 Jun 2026 15:00:22 +0000
Manifest next update: Sun 14 Jun 2026 15:00:22 +0000
Files and hashes: 1: DT8ZHpsnu95pA077Bij5e4AaTEY.roa (hash: QTft8cX4BupKj8g0B2lC6ytondXy0rFBo523NlqKQRE=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: nsWdBOfQ7rfGBcz2gz+8ZqrwfF5CjTu+2T7upTbUSYI=)
3: qluoOzLyxaccQSwrFa90RFqcqxg.roa (hash: qpMAcoRGSm/EZYI6/sZIFBd3qkp/MdqT0v4KuQ94Pkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:8d:a4:e0:6c:73:32:b4:87:55:52:67:c8:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Jun 13 15:00:22 2026 GMT
Not After : Jun 14 15:00:22 2026 GMT
Subject: CN=fa8892876a76b79532eb9845d25a65c38a3d327d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:86:9f:d2:7c:d6:56:79:4c:df:79:1a:98:
62:f1:5e:8b:7e:df:83:1f:09:42:f1:51:d5:61:3a:
1d:01:43:52:39:1a:9c:2b:a3:45:0a:29:fd:4c:d0:
e9:0b:9d:65:19:1f:03:3d:3b:2c:c4:0b:e8:43:49:
82:dc:41:31:b6:70:8a:99:ec:3c:76:6f:ca:d7:3a:
b6:78:84:48:b5:73:02:6b:84:1c:06:5d:8d:7b:e3:
19:a3:90:2d:22:82:96:63:ed:50:df:b6:e8:ae:3c:
4a:a6:3c:4f:59:b4:98:fa:6d:2a:63:77:73:84:48:
63:59:81:43:22:fb:9e:16:ca:f0:bc:a1:6f:5a:a0:
af:e8:cb:07:98:b5:78:c9:d2:64:e7:af:59:dd:42:
c2:9b:b7:c3:81:b4:9a:b8:7b:c3:99:1d:ff:be:11:
14:b5:8d:9f:6c:33:2e:57:3d:1c:e2:d7:1e:20:d4:
37:fc:1f:51:35:d1:35:47:0d:d1:2f:e4:22:b3:16:
b4:99:7b:b9:cb:73:a0:ea:aa:df:ca:15:cc:b6:66:
7f:e0:d3:28:45:f1:bf:e2:be:d1:d4:8a:71:e9:f5:
8d:89:c5:fb:dc:8a:01:92:be:3e:11:15:09:77:f4:
01:67:de:16:54:34:d3:bb:a3:d5:ce:bc:d6:cc:28:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:88:92:87:6A:76:B7:95:32:EB:98:45:D2:5A:65:C3:8A:3D:32:7D
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d6:ec:e1:9a:d4:e6:97:96:32:15:44:fa:c2:5f:bf:1c:dd:
f7:c7:33:9e:5b:5b:64:e6:48:d3:92:6b:e4:6a:65:86:93:d4:
81:d8:c2:0f:6a:1d:d5:94:bc:99:f4:43:6c:59:cd:94:f1:84:
94:e6:bd:e5:ad:85:7d:9e:bf:4a:b5:0a:98:0f:41:d7:8b:28:
94:e1:d0:f9:4e:f1:57:a9:b1:0a:70:54:97:b9:1b:6b:ae:c6:
2d:32:ab:48:c2:68:f3:80:9a:95:54:b5:f8:cc:aa:d4:3e:0c:
88:b3:43:d8:26:d7:21:49:21:14:62:05:4b:a7:c4:8c:87:ef:
58:a5:ec:81:37:d2:2e:96:d9:87:7b:f2:20:cf:cd:85:a1:14:
b0:41:93:ab:fa:67:b5:2e:e9:e8:6e:ac:5f:41:ed:85:c8:2a:
d3:6f:7d:09:c7:d0:d1:f3:28:69:da:a1:1a:d5:cc:00:02:56:
4e:49:b5:bf:41:94:11:82:6d:51:2f:96:ff:a4:59:20:85:a6:
a3:59:0b:0f:30:56:25:da:c1:f8:2a:b7:2c:a1:9e:a6:19:ad:
9e:be:0f:3a:f7:49:d0:40:32:d6:3b:d3:93:d0:25:76:20:25:
5b:8a:84:ed:f9:0e:ab:03:52:b8:f4:70:6f:8c:8a:d0:7f:56:
41:22:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:35:14 2026 by rpki-client