
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: 4Xdi55J5YDAR7R0VAjahY09GFrSFiT0Q2NM3/XsVJFg=
Subject key identifier: FF:14:F8:78:E3:B8:0E:EB:EF:EA:5C:8C:3E:39:CB:79:21:89:65:B1
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019EC0DB2BCF9986B1E931B698B1ECF4DF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 0676
Signing time: Sat 13 Jun 2026 12:00:49 +0000
Manifest this update: Sat 13 Jun 2026 12:00:49 +0000
Manifest next update: Sun 14 Jun 2026 12:00:49 +0000
Files and hashes: 1: vli7nBMVVsmnP9pgh14ogSpMo5o.roa (hash: vG8+FAZpGpoQ8aVKGYzKfazZEnPs10bdq4+yw4mlzf4=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: z/xo2IwoNLRxTOYSgzAAPMOFm5Mxv9f64Vi+kVlihFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:2b:cf:99:86:b1:e9:31:b6:98:b1:ec:f4:df:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Jun 13 12:00:49 2026 GMT
Not After : Jun 14 12:00:49 2026 GMT
Subject: CN=ff14f878e3b80eebefea5c8c3e39cb79218965b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:42:e5:84:95:9d:c7:23:c5:6f:16:38:40:
da:e0:f9:2c:1e:be:3b:26:18:30:ee:89:f6:16:18:
a5:74:4e:5d:e2:03:c3:17:83:ff:e4:19:f1:73:bb:
32:aa:61:f2:5a:b5:cd:59:e3:30:e5:c1:58:3f:77:
bb:48:0c:6e:b5:ab:1b:e0:d8:9a:67:56:75:18:cf:
51:58:2d:0f:fa:6b:6e:c1:9a:03:a2:a0:ca:81:59:
24:08:ec:9f:ac:43:79:ca:24:d3:70:02:60:b4:b7:
89:a9:df:86:e3:9c:43:79:a6:78:28:d8:6a:12:87:
82:c5:ab:bd:64:10:37:fd:13:9b:59:1a:30:a0:4c:
d9:47:d5:b8:ed:ed:3d:be:8d:ec:cd:1a:f6:53:d2:
4c:3c:43:94:f4:13:21:2b:3c:7e:37:1f:9d:7f:8c:
6d:f4:2c:ef:75:d0:22:2f:46:e9:e5:fb:d7:e0:06:
2f:57:e3:02:ed:ea:99:fa:ff:a2:04:97:ad:af:ae:
cc:b1:c6:24:5d:f1:59:b2:33:e0:83:c1:b4:a4:f2:
d7:b4:cc:7a:96:09:74:c9:74:53:f3:a4:2d:de:02:
b4:f8:c5:6d:9c:d3:8e:b7:c2:f3:1b:c4:83:ac:0b:
5b:8c:d8:8d:9a:ff:89:24:7e:ba:0c:d6:f0:65:8f:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:14:F8:78:E3:B8:0E:EB:EF:EA:5C:8C:3E:39:CB:79:21:89:65:B1
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d6:79:a0:ba:f1:93:6d:58:3c:ad:38:91:57:26:90:dc:cd:
22:c7:f7:93:bb:36:96:d4:44:0a:25:3a:43:da:45:6c:0e:39:
cb:d2:bd:fc:48:fb:10:37:60:00:8b:d7:52:c9:86:8b:73:2f:
fa:5f:22:86:a2:58:4d:85:85:72:38:a4:47:87:c3:e5:02:4f:
21:9c:59:63:18:32:59:cd:48:78:06:78:52:8d:a5:0f:dd:0d:
b5:d0:38:0e:5c:57:e5:0e:f1:f9:1d:80:c1:38:e6:d8:40:ee:
08:b2:dc:83:be:d1:10:84:9f:1b:d9:44:59:98:5b:5f:80:22:
6b:48:c4:93:2d:40:8e:bf:95:ba:69:d9:c2:69:44:ce:a1:ad:
7c:6b:31:5f:45:90:b8:88:ec:4b:2f:89:cc:50:10:77:79:de:
a2:4c:e2:a6:e7:b9:99:fb:ef:71:83:ed:c6:f4:87:96:26:8b:
98:31:67:e4:ac:ee:00:bc:16:e0:42:2b:0d:5d:da:21:d7:7a:
4e:53:98:09:28:82:d0:b9:5a:62:f4:07:be:31:ec:5d:f4:3c:
67:4a:a4:09:b5:27:94:3c:54:66:6a:64:2d:dd:a2:7a:8a:ce:
a9:cc:d7:7e:4b:5f:e9:ae:d2:28:6a:45:8a:b8:e9:09:23:7f:
a1:b8:0d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:09 2026 by rpki-client