Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: BUmKW/ArG0gdsFP17P0+ICXKPX7SHLrNkMdVKia/Wcg=
Subject key identifier: C1:94:14:64:B1:74:1E:0C:EF:E8:D9:CA:8F:AB:DF:C2:8F:F9:34:9E
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019EC224D17FEA22AA95A55849A6EC70DB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 1152
Signing time: Sat 13 Jun 2026 18:00:53 +0000
Manifest this update: Sat 13 Jun 2026 18:00:53 +0000
Manifest next update: Sun 14 Jun 2026 18:00:53 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: mYwDmyhqYnRsvhNhg85355eB1JSBgL+BMOduL8YN+g8=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:d1:7f:ea:22:aa:95:a5:58:49:a6:ec:70:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Jun 13 18:00:53 2026 GMT
Not After : Jun 14 18:00:53 2026 GMT
Subject: CN=c1941464b1741e0cefe8d9ca8fabdfc28ff9349e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:cf:6c:8d:1a:bf:80:79:a1:53:a2:ad:89:
73:b8:0c:9c:4e:1e:d8:f7:e3:49:91:35:18:c4:cc:
d7:a1:b0:03:c2:53:e3:8f:6b:d9:5b:26:2c:d2:34:
d5:56:4b:05:1f:c1:41:a1:04:04:b8:e1:90:22:43:
47:1a:62:04:5f:29:64:61:fa:34:15:26:13:02:a1:
63:7b:c3:38:7f:87:06:f9:01:30:3e:d9:33:b8:aa:
ed:36:ed:9f:52:79:89:04:5a:d7:23:9c:90:67:0c:
8e:fa:6d:b5:8c:4c:64:b1:3c:99:2b:8c:bb:ba:e6:
50:fb:09:60:a4:e6:bb:99:27:14:c0:42:97:2e:49:
6a:31:73:f8:55:8c:ad:3d:0b:3c:1c:c2:11:3b:75:
b7:ba:83:c8:f6:4c:5f:68:e9:a9:31:a7:15:56:81:
b7:7d:c1:b9:1c:d7:a4:16:eb:e7:54:9b:6e:f7:a3:
3b:c2:78:31:3f:63:d7:2a:16:f8:d7:b4:bb:3d:c4:
af:d7:dd:1a:c5:0c:27:85:ec:7a:41:3a:d3:8e:f1:
f7:aa:9a:15:88:e4:6a:9e:1f:cf:9a:15:2e:b4:a0:
2f:20:92:8c:ad:1b:94:cb:91:90:86:af:74:e8:90:
a8:66:a1:ec:14:68:61:c9:ad:13:dd:1c:ad:c4:29:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:94:14:64:B1:74:1E:0C:EF:E8:D9:CA:8F:AB:DF:C2:8F:F9:34:9E
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6b:03:c3:c1:8a:e0:9e:2f:8e:ac:fb:a2:b3:ba:40:67:35:
dc:d2:87:f7:84:33:62:ca:34:6d:74:ff:ee:87:27:c4:e9:46:
c6:68:0f:3c:b6:90:a7:44:20:16:74:3d:a2:5d:79:c7:dc:83:
f6:41:45:e7:5d:57:97:bc:7f:8a:16:21:36:94:2a:c8:d0:7c:
7f:fe:27:e6:00:f2:b0:8d:05:be:26:7e:9d:a5:1e:5f:18:80:
bb:c0:2b:47:ab:20:ee:cc:d9:bd:d5:9a:07:c3:cd:43:62:58:
57:d0:e9:55:c4:21:81:c8:57:13:99:ca:ca:5a:52:6e:12:a2:
83:84:43:83:d8:5d:c5:ad:9c:8f:68:7d:98:a3:c4:a1:e2:99:
11:21:6e:a3:b3:a3:f2:be:6d:3a:31:4e:37:4f:be:59:d9:47:
85:b6:a7:07:0e:4a:52:32:41:65:77:45:ee:c5:fb:02:01:74:
c1:81:ad:66:23:91:6a:24:44:67:b1:f0:ba:4e:d2:51:f8:53:
25:9d:33:d2:ba:ec:a4:38:bb:c8:2f:fc:aa:8d:68:fd:91:82:
84:aa:26:18:34:d5:00:78:76:9e:5e:cb:05:80:fd:18:9d:5b:
ec:ea:ee:03:2d:f1:f4:80:c0:5a:85:c1:2d:af:bc:93:9a:52:
84:99:d9:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CJNF/6iKqlaVYSabscNshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz
MmJjNDQwHhcNMjYwNjEzMTgwMDUzWhcNMjYwNjE0MTgwMDUzWjAzMTEwLwYDVQQD
EyhjMTk0MTQ2NGIxNzQxZTBjZWZlOGQ5Y2E4ZmFiZGZjMjhmZjkzNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNHPbI0av4B5oVOirYlzuAycTh7Y
9+NJkTUYxMzXobADwlPjj2vZWyYs0jTVVksFH8FBoQQEuOGQIkNHGmIEXylkYfo0
FSYTAqFje8M4f4cG+QEwPtkzuKrtNu2fUnmJBFrXI5yQZwyO+m21jExksTyZK4y7
uuZQ+wlgpOa7mScUwEKXLklqMXP4VYytPQs8HMIRO3W3uoPI9kxfaOmpMacVVoG3
fcG5HNekFuvnVJtu96M7wngxP2PXKhb417S7PcSv190axQwnhex6QTrTjvH3qpoV
iORqnh/PmhUutKAvIJKMrRuUy5GQhq906JCoZqHsFGhhya0T3RytxCmFJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGUFGSxdB4M7+jZyo+r38KP+TSeMB8GA1UdIwQY
MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt
OTM3MDgxYTljZWZhLzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh
LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmsDw8GK
4J4vjqz7orO6QGc13NKH94QzYso0bXT/7ocnxOlGxmgPPLaQp0QgFnQ9ol15x9yD
9kFF511Xl7x/ihYhNpQqyNB8f/4n5gDysI0FviZ+naUeXxiAu8ArR6sg7szZvdWa
B8PNQ2JYV9DpVcQhgchXE5nKylpSbhKig4RDg9hdxa2cj2h9mKPEoeKZESFuo7Oj
8r5tOjFON0++WdlHhbanBw5KUjJBZXdF7sX7AgF0wYGtZiORaiREZ7Hwuk7SUfhT
JZ0z0rrspDi7yC/8qo1o/ZGChKomGDTVAHh2nl7LBYD9GJ1b7OruAy3x9IDAWoXB
La+8k5pShJnZaw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:07 2026 by rpki-client