Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: deOoLzHQ1of8EAVO+2DQ4s979PhmhQ/Cnqb87Qmp+sU=
Subject key identifier: 74:E5:B8:2B:29:9B:5B:FB:4D:C1:79:4D:4F:FF:7B:79:F8:FA:C2:13
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019EC111ED60704450E62BEF26F69FAC161D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 1048
Signing time: Sat 13 Jun 2026 13:00:38 +0000
Manifest this update: Sat 13 Jun 2026 13:00:38 +0000
Manifest next update: Sun 14 Jun 2026 13:00:38 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: jITcwRfBe8XAoFTY1+azHMxhgtk8a7mPwJ6ZzeXlbG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:ed:60:70:44:50:e6:2b:ef:26:f6:9f:ac:16:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jun 13 13:00:38 2026 GMT
Not After : Jun 14 13:00:38 2026 GMT
Subject: CN=74e5b82b299b5bfb4dc1794d4fff7b79f8fac213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:ae:74:12:17:4f:ad:60:74:6b:14:6e:85:
1e:1f:5f:ea:3c:63:d2:7d:c6:97:86:f6:d4:c4:67:
47:ed:f9:a6:3c:a5:f2:ca:fb:06:82:91:42:53:3b:
fa:bf:a0:19:14:de:69:fd:69:9f:a4:de:b0:8a:fe:
00:b8:6c:0b:f4:fd:b4:cc:20:b4:ec:89:8c:d3:0f:
bd:5d:21:03:95:ae:61:c5:29:29:6c:04:f6:02:b2:
c3:c3:c8:24:fb:c7:c6:96:87:2c:17:fe:64:57:35:
46:07:9c:2b:4c:31:4a:1c:e9:12:7b:54:86:76:f2:
14:5c:5d:1a:cb:66:14:49:ca:27:4c:cf:b2:73:90:
1a:c9:85:dd:c1:d1:d3:a6:d2:fe:28:ba:ef:e3:6f:
48:ec:59:c8:06:d3:18:e2:7c:ac:14:de:15:4f:10:
c8:29:56:80:16:48:94:9d:83:d4:d7:b0:59:05:a3:
f1:f1:27:53:66:dd:42:02:69:2c:26:9f:d5:7c:ea:
ea:ef:eb:0e:00:e1:3d:c6:59:a8:bf:7c:50:ac:29:
8f:4c:26:f3:d6:8b:15:d6:dd:d8:43:cf:d9:2c:af:
a3:75:b0:e8:65:8a:ab:a2:70:cb:b6:67:d2:ff:29:
a8:37:27:28:0e:f9:43:8e:92:b8:c5:3b:79:7f:99:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:B8:2B:29:9B:5B:FB:4D:C1:79:4D:4F:FF:7B:79:F8:FA:C2:13
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0a:25:28:7f:1b:e0:ca:72:ee:b6:ac:8c:6b:76:23:3b:e4:
ac:49:0d:55:15:34:3c:fc:83:fb:4a:55:59:6d:89:35:63:3b:
49:8b:d5:84:b3:b7:0b:79:57:5a:85:66:2d:a3:67:db:58:91:
7c:b7:93:0f:10:75:e5:8d:21:62:9a:56:9e:c9:8a:77:3f:42:
56:7e:e9:c1:b9:86:71:2c:73:53:13:71:ec:d9:4b:c2:73:1b:
8b:e6:0a:e4:0f:3f:55:f1:4b:d6:6c:5c:75:10:f0:10:6a:d0:
a8:8f:68:89:74:44:cf:74:81:98:6a:3b:72:c7:38:db:38:7e:
fa:d0:65:7d:a1:af:db:69:df:8c:83:3c:94:c0:bc:77:f7:8a:
a3:f4:7d:ef:b4:9b:93:18:e5:07:cc:b4:54:06:5b:eb:db:bf:
98:f1:bb:29:a8:fc:68:32:0c:80:42:fe:09:89:39:ff:ff:cf:
3e:eb:0e:f4:dc:92:b9:19:b5:66:28:1c:f0:39:85:4d:7e:08:
58:e6:10:70:62:77:2e:fd:e9:1f:54:03:ec:87:b8:35:7a:bb:
f7:ab:f4:c2:2e:90:23:fe:8b:87:90:1e:63:94:23:f6:52:61:
b1:85:b2:44:6c:d7:ab:a4:da:4d:c4:b9:62:38:3a:bb:1c:8d:
fe:0d:ca:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:12 2026 by rpki-client