Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: ITi4Scs+Pr2LAjZiEBlBzFjMJm8rPbADUYRgi13xZG8=
Subject key identifier: C0:6E:D1:4D:F3:70:3A:0C:CC:3C:BC:EC:27:25:94:73:88:BA:49:22
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019EC06D2AA5DC4245B57691F4CAEAF8AB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 10:00:40 +0000
Manifest this update: Sat 13 Jun 2026 10:00:40 +0000
Manifest next update: Sun 14 Jun 2026 10:00:40 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: OxqVWvMUsI8+xTd6QXiRbeoysyPbx0g3wLUICPZl9PU=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:2a:a5:dc:42:45:b5:76:91:f4:ca:ea:f8:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Jun 13 10:00:40 2026 GMT
Not After : Jun 14 10:00:40 2026 GMT
Subject: CN=c06ed14df3703a0ccc3cbcec2725947388ba4922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:22:a1:fb:21:8a:62:e4:3f:98:76:47:27:
a3:9c:da:96:3e:98:56:04:e2:9e:8d:65:a5:f9:43:
4f:14:88:cc:05:99:75:f2:ec:4f:17:04:9a:ff:3e:
2b:c5:8a:f2:ce:4a:c2:f6:ab:34:be:59:06:5a:df:
9c:0d:2a:58:19:67:c4:5b:3e:e6:4d:e3:85:45:1e:
4b:fc:9a:c1:fe:2b:c4:b5:03:58:ad:64:8e:3e:cf:
aa:dc:27:a6:93:50:88:aa:b0:e0:f5:84:47:db:30:
13:78:7d:2a:e7:b5:c9:cb:30:82:54:d7:77:0c:89:
67:ff:9a:b0:2f:d3:1e:d1:ae:89:75:68:41:84:47:
a0:32:54:70:b3:66:9c:e8:97:f4:59:f7:32:6d:78:
41:7a:6f:46:80:b5:c6:23:e9:ba:24:37:4e:f9:34:
e2:0a:08:c6:d0:1a:e0:97:80:e3:d7:02:2f:4b:4a:
46:3f:c5:44:8b:54:42:6a:f8:9c:08:5c:1b:32:6c:
61:79:50:6e:55:a6:94:f1:d4:37:10:50:f8:3c:1f:
ba:63:c7:a6:86:d1:9c:5e:cc:29:82:c9:f9:18:be:
ff:1a:c1:b4:af:2d:02:1d:48:0e:d1:c8:4a:67:da:
5e:fd:38:d7:7d:f4:11:ea:d8:75:67:f0:09:75:5d:
9a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6E:D1:4D:F3:70:3A:0C:CC:3C:BC:EC:27:25:94:73:88:BA:49:22
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cd:1e:04:05:35:01:6b:b5:91:24:5c:5b:0d:b4:ea:4a:cc:
27:e8:65:87:71:e9:46:45:cb:53:7d:a1:35:fb:7c:bf:34:23:
52:fe:23:96:dd:b0:76:a3:e6:9f:11:f8:62:13:d0:eb:21:78:
ef:ba:27:34:c0:bb:45:a3:b8:5e:14:f9:ab:fb:a4:82:c9:4d:
09:84:ae:e1:c1:4a:eb:a1:7a:9b:90:9b:a2:8f:83:56:98:14:
34:4c:48:35:b7:1c:1c:dd:b5:8b:76:a8:ec:68:66:49:5c:8c:
fd:d0:77:6f:16:31:ef:82:82:5d:1c:f9:88:2a:fc:24:83:49:
c2:e0:b1:34:18:11:4c:96:d9:f4:be:24:1f:51:ca:06:6e:a1:
e2:31:72:43:94:bf:aa:e4:40:3b:a2:4a:fa:60:10:e8:47:a8:
b4:b3:3f:4b:4e:2f:07:db:75:91:c1:96:d1:87:60:2c:1a:98:
2d:71:8d:a3:03:68:51:cd:78:7c:36:3d:c8:76:d7:83:31:1f:
d0:ae:51:35:d8:8b:ed:2c:d7:a2:82:3f:02:7a:4f:5b:9f:51:
0b:c0:57:b4:21:13:c3:eb:d1:ed:2e:73:a3:76:f7:b0:f9:e5:
92:3c:95:fe:ad:61:14:43:5f:2f:f6:18:bc:95:80:ce:21:89:
83:36:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:29 2026 by rpki-client