Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: mNk/Tlu0Xc1dKSOYzn31+172XkgivhYVE1bL0DOcWNE=
Subject key identifier: 1D:10:17:BE:D0:97:8A:8C:2E:A7:10:B7:20:EC:0B:C9:32:91:D9:23
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019EC22465CFACC2FA95BAF869873A78D202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 18:00:25 +0000
Manifest this update: Sat 13 Jun 2026 18:00:25 +0000
Manifest next update: Sun 14 Jun 2026 18:00:25 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: Nf1bJb8HAH2Hw8qew9nVE0pqdJv1wjvrscfYfySV2LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:65:cf:ac:c2:fa:95:ba:f8:69:87:3a:78:d2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jun 13 18:00:25 2026 GMT
Not After : Jun 14 18:00:25 2026 GMT
Subject: CN=1d1017bed0978a8c2ea710b720ec0bc93291d923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:d3:3a:b0:c0:ac:d2:8c:5f:12:76:62:d0:
88:c3:cd:dc:6c:3a:db:f2:4b:8c:21:19:e0:24:64:
7f:15:ba:71:1c:0a:27:c9:6d:53:75:e5:af:ee:b9:
7f:59:66:07:b0:13:d0:74:73:c0:10:d3:09:ec:97:
1f:1f:ae:de:35:16:70:a8:d4:d6:24:70:31:30:94:
e2:c4:d2:a9:11:d9:4c:d1:48:74:25:6e:44:fb:41:
58:e2:e5:8e:09:8c:38:ff:13:a4:ff:b3:99:83:36:
ed:88:2c:96:85:e7:f0:f3:92:36:9a:30:2d:3d:ad:
55:a9:98:7c:11:db:00:00:f2:6d:95:7b:ea:96:e7:
a6:24:4b:61:20:3e:52:6d:0f:fb:a3:ab:45:ab:93:
ec:d9:29:1c:f0:fb:c3:e1:3a:9b:93:fa:30:d1:24:
3f:a6:50:2d:16:9b:e9:9a:0b:8e:6c:c6:99:cc:46:
00:6d:d9:c7:d7:7b:8e:c1:07:ac:43:ea:e3:cd:fb:
2e:a8:06:56:02:72:bb:55:62:36:22:70:16:73:67:
c2:8e:56:cb:fd:a4:d0:3f:4f:89:42:ae:e0:59:79:
66:10:10:ef:8f:f2:a5:a7:d7:17:a2:aa:50:2a:ab:
a5:b5:37:eb:dc:92:18:97:59:f3:24:81:f1:0b:74:
f8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:17:BE:D0:97:8A:8C:2E:A7:10:B7:20:EC:0B:C9:32:91:D9:23
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e3:10:62:a1:91:ad:b8:97:96:6c:f5:64:55:6b:40:48:d7:
e0:cb:ef:67:da:b4:0b:00:61:72:18:aa:50:92:97:44:5e:ab:
76:15:55:a4:bb:b2:ee:b2:90:25:80:60:5d:ab:5e:6e:c0:1b:
ee:77:70:7f:6a:e3:da:d9:b1:bb:e1:b2:67:84:ad:e6:df:54:
18:06:0e:c7:40:81:dc:9b:9d:fa:68:9a:ba:10:0c:54:20:89:
86:75:da:6e:ff:31:de:9d:64:60:d6:db:57:61:a3:38:6a:38:
e4:e2:5d:72:8e:d2:3b:18:68:18:92:52:ed:26:5b:6b:d9:62:
1e:2b:88:82:a3:30:63:f9:5c:64:16:2e:fd:85:86:2f:da:66:
d0:f9:a8:6d:7e:2b:b8:f3:0c:e6:1c:11:b4:56:1e:8a:11:ec:
ed:f3:2b:24:31:5c:b8:b3:6b:75:a9:cd:cb:0a:a7:ed:16:51:
b1:7d:68:cc:a5:c6:88:56:be:7f:2e:a6:1c:77:b1:2f:08:7b:
2e:33:63:64:8c:d2:0a:40:a7:c8:64:36:7c:0a:be:0c:50:c7:
aa:22:83:e2:70:26:42:f8:1b:a6:0c:e9:c0:4b:ad:2b:23:72:
3a:e0:26:60:de:a0:24:ff:6c:ce:5d:14:62:23:6c:95:79:9e:
0e:c2:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:40 2026 by rpki-client