Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: gaiHI+XrQnJvjmgYbwwLmfpdR5CvyIiMIIcNCcwX8ts=
Subject key identifier: CC:4F:6A:FE:89:5E:D1:05:AA:8E:B7:E5:E6:AE:90:40:65:AF:57:5E
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019EC1123FEF31A7E18AB4E99FE590C3E5F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 08AE
Signing time: Sat 13 Jun 2026 13:00:58 +0000
Manifest this update: Sat 13 Jun 2026 13:00:58 +0000
Manifest next update: Sun 14 Jun 2026 13:00:58 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: M0MRDKKRVULLbbDTJ7ZxXXMbJQN98FKMXlmm4sXe4Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:3f:ef:31:a7:e1:8a:b4:e9:9f:e5:90:c3:e5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jun 13 13:00:58 2026 GMT
Not After : Jun 14 13:00:58 2026 GMT
Subject: CN=cc4f6afe895ed105aa8eb7e5e6ae904065af575e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:26:d1:a4:67:21:ae:c8:55:14:b7:12:15:
8d:7f:95:36:30:40:32:7d:75:a5:9f:7f:a1:39:02:
a0:17:04:bf:dd:30:3e:d0:f0:64:57:8a:9c:2d:ff:
fc:76:4f:5d:fd:07:be:22:3e:6f:35:56:f2:8b:74:
d4:d0:8b:41:83:59:f2:08:bf:dc:df:a6:72:ed:c6:
a6:cd:29:9e:70:b4:78:e3:dd:cd:98:a9:70:04:6f:
b9:86:79:ec:d0:9b:18:0c:01:38:d0:40:b0:17:e7:
15:87:a1:6d:eb:c8:f0:a6:4b:9a:08:cd:13:ff:47:
cd:9d:30:78:18:59:53:b4:ac:9f:0a:f6:e8:23:58:
ae:38:aa:c9:fd:1e:cb:ad:e1:e3:59:d2:22:c6:a5:
d8:96:09:fe:4e:30:fa:10:86:1f:8f:97:1c:52:5b:
f2:2d:92:6d:49:06:1d:e6:bc:4e:79:7e:a2:7b:1b:
54:a4:30:ca:96:77:af:27:11:aa:b7:93:7a:55:c9:
25:73:3d:4c:f5:d9:91:d7:5d:20:9d:69:9e:3c:28:
0a:96:a4:a5:5f:a3:4a:64:fa:71:50:33:27:d4:ff:
66:84:78:93:01:d8:c9:d4:ae:2b:ba:94:be:76:f8:
42:3b:86:a6:93:b0:a1:1d:d2:2d:90:cb:01:77:09:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4F:6A:FE:89:5E:D1:05:AA:8E:B7:E5:E6:AE:90:40:65:AF:57:5E
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:b1:46:fd:7f:8c:a8:68:cb:cc:61:db:45:a2:41:42:17:
b3:ea:65:06:62:de:24:d9:65:f7:5a:52:01:84:8a:8a:ce:2d:
c5:08:af:19:1e:04:ae:6a:f4:5d:b7:66:ff:9f:85:4a:db:ec:
88:ef:1a:78:d0:a1:46:ec:bf:a7:61:93:4d:2c:a7:b4:80:5b:
98:66:9d:41:8e:ab:22:56:9d:a4:68:9d:07:d5:95:ad:f2:cf:
37:74:86:dc:88:a0:c7:ec:6f:35:52:9a:5b:49:42:2c:13:1c:
8e:83:53:61:35:3e:92:8d:7b:a5:8d:23:44:ff:b2:a0:2c:5b:
07:6e:e4:5c:2f:e1:95:1b:c7:18:15:c3:8c:90:a7:21:8e:16:
88:b6:ab:1b:2d:b1:fa:b6:ff:48:b2:60:54:0c:b1:04:fe:3a:
f7:72:31:f2:ef:f5:23:c4:b0:d5:3d:f4:5b:f3:88:c2:ce:8d:
5d:fb:68:17:d8:2f:8b:a9:e8:7d:06:54:63:c9:4b:2d:ca:71:
fc:75:74:ac:ef:03:f3:f2:6c:af:d8:cd:c8:67:b7:14:1f:80:
92:1d:47:97:6d:37:ef:96:14:96:71:ed:15:34:cf:8d:d2:40:
88:a5:01:95:72:21:d1:90:8c:b3:d4:53:69:40:78:3e:da:02:
1b:a9:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:43:08 2026 by rpki-client