Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: EB8E5tT4naslg/HukxtBqwqrz/fiOUTvyX/u2aesaV8=
Subject key identifier: 4C:70:CE:6F:7E:49:20:1E:0D:87:2D:3C:89:F0:EF:E5:73:5A:C9:5D
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 019EC3A525A724CB46D63FD9693AAD373095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 1377
Signing time: Sun 14 Jun 2026 01:00:40 +0000
Manifest this update: Sun 14 Jun 2026 01:00:40 +0000
Manifest next update: Mon 15 Jun 2026 01:00:40 +0000
Files and hashes: 1: YS4KfdF48rW5SEIpeCeYxOP-Du0.roa (hash: FKGkIDKaHogWgazEiZbFbdSEfBT5S7dX/PkphiCX2e8=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: 8ZttJYWhrEX7kLwLVPqWB4GlcXNI6NtSmJFNMJAcJIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:25:a7:24:cb:46:d6:3f:d9:69:3a:ad:37:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Jun 14 01:00:40 2026 GMT
Not After : Jun 15 01:00:40 2026 GMT
Subject: CN=4c70ce6f7e49201e0d872d3c89f0efe5735ac95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:91:8e:ef:fe:25:b7:7e:1a:18:4c:33:9b:
52:d6:12:50:56:81:86:1f:dd:f8:c0:72:73:ac:ab:
c9:d2:8a:a3:97:7a:56:e9:08:57:9d:43:94:3f:05:
d2:aa:05:ac:aa:7d:4b:e4:f1:49:ad:d2:d4:7b:f0:
51:77:8a:b0:34:f5:dd:1e:08:5c:af:e7:55:8b:eb:
81:46:ed:54:ed:34:f5:fc:00:98:5a:b0:31:6e:6c:
69:8c:fb:22:c0:94:26:11:b8:ba:ce:21:ab:fe:1e:
b6:b6:54:21:9b:00:de:05:63:5d:96:a9:39:f8:23:
34:bc:b8:23:d3:c1:16:87:83:61:7a:81:a7:2b:38:
82:d9:58:8d:c6:e0:c9:16:66:87:b2:0a:84:0a:7d:
62:e2:5e:0d:47:42:3f:50:50:4c:e8:7b:b0:d8:e8:
d2:87:3b:97:6e:7e:25:79:bc:39:30:5b:da:c5:2d:
27:ad:6b:70:e9:30:36:c7:d0:15:f7:ad:9f:44:d1:
0a:6b:fd:4e:d2:84:3e:88:04:82:30:7b:a4:6e:b6:
12:fa:e8:d3:24:57:60:c7:87:dd:a3:eb:46:ff:31:
03:a3:82:e4:92:93:ed:e6:55:44:8f:5b:32:b1:12:
3b:2b:b7:50:3a:4b:31:ab:f7:ce:4e:ed:3b:c0:9c:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:70:CE:6F:7E:49:20:1E:0D:87:2D:3C:89:F0:EF:E5:73:5A:C9:5D
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e0:f6:9f:94:11:ec:3d:c9:6a:71:5b:97:24:87:f7:8f:be:
12:1b:46:17:73:de:24:fb:9e:92:88:90:c1:0b:13:be:a4:f0:
ae:13:c9:76:1f:35:6c:f5:da:73:3d:08:1f:02:0d:75:42:1d:
cc:5d:72:f6:ad:a2:09:08:df:97:e2:44:5d:30:f4:0d:cc:07:
ae:0f:de:6b:82:b4:61:43:bf:e4:b3:e7:b5:ea:59:b6:0d:2b:
52:50:8e:84:75:de:a6:dc:8c:53:16:ca:7b:c0:35:22:c4:16:
29:80:6b:e2:9d:64:12:42:91:8c:44:86:1c:42:dc:63:fb:c0:
8f:35:71:f6:08:2f:06:b3:f7:24:21:04:88:b4:69:c6:47:fb:
0a:13:83:7a:08:70:6f:7b:b3:f1:8f:4c:74:ba:17:db:2a:30:
ff:77:67:49:e6:4a:ac:14:aa:69:fd:14:51:54:2d:fa:fb:2f:
08:66:33:28:c6:b8:b6:c4:55:fd:6b:d8:ee:30:7c:b9:af:09:
ba:10:78:1d:e8:59:18:9d:bd:f7:0e:f1:b5:d2:ab:1d:5d:7f:
1f:f3:99:5f:81:66:3e:00:29:3a:6f:4d:28:bc:c1:5f:26:5e:
55:f5:a5:f9:f3:61:f6:91:9e:7b:5f:87:8e:8c:2a:58:b8:a8:
2f:99:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:16 2026 by rpki-client