Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: 36ugezH3a4+Ma9ckXlil+ZQOmBqEYnJRFmwhJ+STrW0=
Subject key identifier: 6F:DC:E5:2E:A6:CE:03:6C:DC:A4:EF:24:D9:6E:B5:84:3F:77:83:86
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 019FABD17D24E4ADD3DB030238D69FEDD71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 12F7
Signing time: Wed 29 Jul 2026 03:01:00 +0000
Manifest this update: Wed 29 Jul 2026 03:01:00 +0000
Manifest next update: Thu 30 Jul 2026 03:01:00 +0000
Files and hashes: 1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: 0EwqTIToHEEMgqykelWyXmpdUQcjcjkbKnRzQ6b0mZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:7d:24:e4:ad:d3:db:03:02:38:d6:9f:ed:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: Jul 29 03:01:00 2026 GMT
Not After : Jul 30 03:01:00 2026 GMT
Subject: CN=6fdce52ea6ce036cdca4ef24d96eb5843f778386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:b6:f2:ae:2a:fc:eb:c7:49:38:60:fe:e0:
ad:fd:e2:0d:74:71:de:f2:85:e0:8f:36:c8:c6:bf:
66:92:da:82:e9:01:70:d5:bd:60:93:88:ae:4c:fe:
c2:4c:be:25:09:54:b7:d7:30:51:e4:06:91:15:d1:
54:32:ba:a4:78:20:6c:e1:4e:ee:0e:4c:e6:94:b8:
b2:48:a3:fd:ac:18:5b:6b:41:97:41:31:5c:88:8b:
97:9e:97:5e:a2:9b:ff:24:ff:7a:61:2c:cc:06:30:
e7:45:2a:76:b6:a4:ed:0f:a4:94:fc:83:f1:cf:1b:
ad:81:6c:f7:5f:e8:d5:e3:6b:f3:67:c2:78:0f:76:
db:22:3c:93:96:06:46:be:a5:4c:63:12:f5:3e:82:
3e:17:15:e1:bd:7f:af:4a:75:84:39:65:03:6c:8d:
f5:62:dc:1f:6e:ca:06:fc:a1:49:1e:1c:23:d1:61:
00:8e:be:06:c0:b6:93:55:aa:34:cb:46:69:78:bf:
63:b4:ed:ad:17:9e:3e:f4:3b:6f:a7:b6:8c:42:8c:
f0:dd:d7:85:85:cd:2d:5e:f4:c3:86:93:3e:b3:cf:
bd:c3:5d:37:e1:de:34:6d:a4:09:3e:c7:71:79:0b:
d0:21:9b:ad:87:3b:40:30:6f:59:51:a5:e8:ec:96:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DC:E5:2E:A6:CE:03:6C:DC:A4:EF:24:D9:6E:B5:84:3F:77:83:86
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ac:28:1a:8d:5e:54:7c:b0:de:12:3f:49:f0:9f:9f:40:26:
b6:d1:62:69:b7:d9:94:6a:12:f3:4c:17:3a:43:3c:c8:f8:87:
21:37:1e:4e:ec:12:9b:f4:26:5a:c1:d5:3d:56:af:3c:5d:45:
e2:c8:3c:17:18:2f:52:9e:dc:4e:a6:9d:ba:d3:e1:a5:7c:16:
40:8e:cd:5e:52:f9:ff:9a:d6:92:62:d2:67:86:f6:bf:b3:15:
1b:35:09:06:65:4f:3e:c0:20:e2:77:32:e5:c6:80:b7:b4:c0:
72:7e:4d:13:41:f8:43:2a:32:be:7f:82:08:a2:4f:76:e4:27:
5a:6c:df:cf:a5:c1:e9:e7:8d:71:19:6d:ed:f8:d2:3f:1b:ca:
dd:e8:b6:97:8e:c7:01:2d:61:c8:a9:16:27:72:bb:6a:ca:3b:
c5:42:bb:bb:71:bd:65:ab:5e:58:9e:f1:ec:e7:43:98:ac:c2:
b0:16:c2:fb:fb:8c:bd:e7:5d:e0:8f:ed:43:b6:a9:e0:a1:2d:
54:30:12:04:b1:11:c2:4b:aa:55:5e:c9:ad:c4:9a:c0:b9:a6:
40:98:af:b2:f2:73:2a:b6:f0:d2:c5:bb:15:18:4f:6c:37:61:
01:5f:52:52:b2:4c:d7:d7:eb:38:2f:e8:8f:cb:85:c0:27:1c:
47:4a:09:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:47:19 2026 by rpki-client