Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: FgpHioK8ji9HOADkSWxqwJETOKWL2vdP5VqzlqvChqk=
Subject key identifier: 6C:76:C4:98:63:12:70:E6:B5:57:6D:03:23:06:F3:3F:35:D7:90:85
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019EC337722D5895F33F69B6923CFA1CF93E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0DAA
Signing time: Sat 13 Jun 2026 23:00:51 +0000
Manifest this update: Sat 13 Jun 2026 23:00:51 +0000
Manifest next update: Sun 14 Jun 2026 23:00:51 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: ee3BBHUysp7olBUI9zDFajWKFyj7Rls0c8HIlL5fuRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:72:2d:58:95:f3:3f:69:b6:92:3c:fa:1c:f9:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Jun 13 23:00:51 2026 GMT
Not After : Jun 14 23:00:51 2026 GMT
Subject: CN=6c76c498631270e6b5576d032306f33f35d79085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:9c:b1:89:13:58:e5:56:e3:01:0b:01:39:
52:57:4c:53:31:70:aa:d3:d7:ef:75:e1:a1:6b:df:
0d:40:42:33:34:1e:dd:56:a8:c6:07:28:c8:50:9c:
eb:61:f5:70:43:ed:10:28:8b:d5:92:f2:66:fd:17:
f4:bb:a8:21:83:f3:9c:28:b3:c7:4d:73:e1:67:fb:
fc:4e:80:ec:6b:cd:e5:98:8d:3c:52:34:47:9c:2b:
7f:93:70:32:ff:08:fe:52:f5:c0:28:73:3e:71:8c:
8d:2e:3e:32:98:6d:d5:ff:9a:5a:f0:99:b3:d6:ca:
4e:15:6d:3f:b6:8c:45:0a:57:f2:d9:ff:78:ec:9a:
2c:a4:da:8c:2e:50:9c:12:95:6e:cc:15:9c:93:2a:
96:0b:09:aa:2b:0d:48:52:d0:46:31:e8:dd:54:aa:
3a:99:ee:e5:fd:7e:41:f0:e7:9b:fc:53:ea:b5:c9:
20:1f:aa:5a:9a:f4:89:0b:06:26:39:1f:b6:6e:ef:
27:be:83:e3:7c:47:04:b4:fe:33:21:66:34:7d:ef:
c7:cc:10:61:cc:92:04:9e:c7:a1:4f:96:d6:05:a9:
4a:dd:e5:ea:60:74:41:21:f7:0a:14:dd:65:65:db:
5f:da:bf:de:8a:82:20:9a:8b:93:38:ee:ce:63:af:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:76:C4:98:63:12:70:E6:B5:57:6D:03:23:06:F3:3F:35:D7:90:85
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f5:2d:16:3f:7c:91:d4:e0:f4:e3:7d:15:9b:ca:d3:47:74:
44:88:f7:1a:27:52:7f:68:e4:5f:7e:40:9b:a1:58:b1:83:c0:
fa:54:cb:e0:a8:6d:4f:29:07:ad:f9:2a:08:c9:02:ad:b0:23:
9a:b5:df:10:83:9e:ad:08:d5:94:4d:43:d9:81:5d:67:c1:80:
42:ce:9b:85:d8:d8:7f:7f:c4:7b:91:0e:e9:ea:f0:e6:42:e2:
f8:11:db:54:08:6e:3d:55:ba:0e:fc:83:4b:2c:23:5d:61:a7:
6b:2c:b0:c7:12:38:af:ef:a5:9c:2b:b8:06:4c:b6:18:f0:35:
9e:9b:46:87:49:f2:6a:54:c0:b0:08:63:4c:61:5e:fc:74:e0:
e3:74:8b:7f:fe:9c:0f:9a:27:b1:ba:68:91:c9:d5:bf:16:82:
6f:2b:21:1e:ea:7e:61:03:90:66:d3:74:cd:ff:42:82:e4:7b:
b6:aa:46:74:e1:61:f8:4a:d5:52:8f:50:dc:e9:1f:7e:ca:86:
9f:d5:01:4a:30:d7:2e:38:ad:34:c1:03:cb:cb:b1:8d:91:fa:
f2:12:38:2c:e3:51:e8:12:96:65:65:a8:95:d3:3c:9d:63:da:
2a:83:b6:97:45:99:fc:96:00:e2:9b:86:06:df:4d:e0:77:9b:
fd:7b:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:04:51 2026 by rpki-client