
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
File: ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft (raw, json)
Hash identifier: 6HCwrKuCGCabOb++NXvb/iE+u/031ZNKXaZ/u5Pgpho=
Subject key identifier: C3:70:9F:50:13:28:F6:54:46:E2:AC:29:5D:55:11:74:A3:1B:83:04
Authority key identifier: CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
Certificate issuer: /CN=ca5154158905d1d44c4588dfd25802f324a93d61
Certificate serial: 019EBE10994D00AAA1F35B91AF0ACD3BA3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
Manifest number: 07B1
Signing time: Fri 12 Jun 2026 23:00:19 +0000
Manifest this update: Fri 12 Jun 2026 23:00:19 +0000
Manifest next update: Sat 13 Jun 2026 23:00:19 +0000
Files and hashes: 1: 4okKBfXSNKomjqjfKSyXyfQW8mg.roa (hash: c/G+cvhNW3akdlAhAKvUtf/mU2MrPEwZm3MMXGbYwZo=)
2: jDQ8F_F11yNWOX6kbTNP0Ql0Wi8.asa (hash: a4/BoGxMxUQA6ejTQInWpx7OBve66J6mI7qjuV4Hb5Q=)
3: ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl (hash: K64gBTRAhz5WFR9IwN8jSsm2sJ45blg4OeKmQty4Hl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:99:4d:00:aa:a1:f3:5b:91:af:0a:cd:3b:a3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5154158905d1d44c4588dfd25802f324a93d61
Validity
Not Before: Jun 12 23:00:19 2026 GMT
Not After : Jun 13 23:00:19 2026 GMT
Subject: CN=c3709f501328f65446e2ac295d551174a31b8304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fa:31:a4:c8:81:26:21:5b:3d:12:bd:f2:a1:
7b:b1:78:91:b3:e0:55:70:1c:25:39:58:70:6a:49:
57:bb:7f:0d:c8:5e:00:b9:ad:62:9a:b1:c7:5e:4f:
a1:dd:b1:72:9a:4d:ac:39:5c:9d:02:6a:d9:33:b4:
6a:70:7e:ec:a0:e5:a4:13:be:c8:f7:58:b4:83:c1:
cc:d0:7c:62:19:01:44:5d:c5:82:62:97:d2:0d:e1:
79:f7:c0:eb:dc:bd:f0:1f:ce:f4:8d:33:d0:af:4c:
95:39:fa:17:34:2f:76:98:95:61:bf:92:a5:2b:4a:
7f:bf:88:22:4d:3f:82:49:d8:02:26:f7:6c:f5:ae:
d8:0c:ff:39:8a:e3:76:1f:46:e3:de:dc:77:4b:4e:
fd:f5:43:67:ed:ec:14:6b:1f:41:c7:eb:a9:39:aa:
c3:8e:06:b3:64:ae:dd:37:80:be:e4:1c:5d:b2:a3:
f1:de:31:51:cc:c2:9a:48:25:82:e7:4b:0c:3f:6e:
9e:9f:f7:ca:bc:c8:a2:e5:d7:f6:8e:0b:f4:0f:dd:
73:b7:c4:04:4a:5a:3e:2a:f2:d5:e8:1a:f0:11:c4:
23:f6:ec:9c:28:d6:b9:88:63:55:d3:41:9a:a1:d9:
23:df:20:e3:91:d5:31:3f:49:57:9b:20:93:bf:b5:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:70:9F:50:13:28:F6:54:46:E2:AC:29:5D:55:11:74:A3:1B:83:04
X509v3 Authority Key Identifier:
keyid:CA:51:54:15:89:05:D1:D4:4C:45:88:DF:D2:58:02:F3:24:A9:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ylFUFYkF0dRMRYjf0lgC8ySpPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/f558aa-55ef-450f-8b97-10090d1e7d94/1/ylFUFYkF0dRMRYjf0lgC8ySpPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:b4:89:5f:46:8c:19:e1:b6:be:57:81:7f:47:1c:01:00:
2f:a2:78:99:b7:8b:55:4e:2a:54:0e:fa:42:86:8e:bf:60:81:
59:aa:51:03:20:73:cb:eb:1a:48:23:85:3e:2d:95:4f:da:c1:
c7:af:c9:22:28:57:ce:dc:a9:d7:41:84:5a:2f:1c:42:60:1b:
01:52:6c:2b:d7:f4:d0:7b:54:05:b1:74:7d:a6:9f:83:18:e2:
8a:7d:f7:f3:fb:e3:90:e9:be:68:b9:13:85:b6:ce:3f:75:d5:
f7:0a:a3:52:d8:d4:aa:3f:67:28:8f:0d:4b:ee:6f:40:a7:da:
dc:d0:58:10:5d:81:44:56:7c:bb:25:10:a0:8c:fc:41:f8:92:
31:61:48:9e:7e:b1:5b:b2:3c:59:73:b7:d6:ed:51:5e:4f:42:
1a:e2:c2:34:83:31:4e:d1:f7:67:d6:b7:d4:5b:f6:be:7b:92:
6e:1a:df:db:65:9c:35:e0:04:05:08:12:80:ad:b2:98:b5:1f:
bc:88:9b:0e:85:a6:93:04:78:31:7f:78:f0:22:54:f2:6b:53:
c1:5a:4e:a5:60:bf:5f:03:9e:86:6b:29:67:af:79:b9:14:75:
d9:a6:3d:dd:6e:e9:d2:b4:a0:26:86:b5:29:7d:e7:44:0e:f0:
af:3c:8a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:21 2026 by rpki-client