Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: P7Bi2pUyRl7MR3SPyRAIGTxkNLvCrTN5KP568wZ2Nfg=
Subject key identifier: AF:A3:56:C5:10:6C:48:10:D8:37:13:73:2F:18:D6:FF:04:21:1C:A5
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019EC036AEB449CE8908FF97542B221945F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 08BE
Signing time: Sat 13 Jun 2026 09:01:09 +0000
Manifest this update: Sat 13 Jun 2026 09:01:09 +0000
Manifest next update: Sun 14 Jun 2026 09:01:09 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: wNxKujzJdkOPZR4XtaN+cNL4PLrZQNxu7T6zK/SwlCo=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:ae:b4:49:ce:89:08:ff:97:54:2b:22:19:45:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Jun 13 09:01:09 2026 GMT
Not After : Jun 14 09:01:09 2026 GMT
Subject: CN=afa356c5106c4810d83713732f18d6ff04211ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:db:0f:a0:b0:63:b7:60:71:87:97:0a:d8:
47:e3:b3:ac:4f:0a:e7:a1:66:7f:eb:73:b8:dc:8e:
73:2a:65:33:a1:df:b9:a3:18:fd:ef:89:98:f6:a9:
f5:7a:39:02:22:7e:ff:32:ba:b8:a7:49:8a:55:1b:
f8:e6:21:cc:37:03:1d:e8:c5:c4:3c:24:1c:21:2b:
33:de:fe:d2:e0:fc:4b:91:71:15:30:c4:86:9d:a4:
9f:4d:ad:8f:80:7d:22:33:93:1a:0d:62:68:c0:27:
b7:01:6e:b7:a6:83:5f:92:fa:25:af:5e:78:f7:d0:
31:bf:d7:97:87:72:e6:30:09:27:bf:d1:21:bf:5d:
5a:d6:80:e0:69:80:b8:dc:cc:25:55:25:e4:71:85:
de:42:40:c4:32:ac:91:ab:54:7b:27:de:94:71:17:
a4:7c:a4:90:6a:03:42:5a:43:4a:e8:eb:9d:a3:0d:
a6:2c:a7:a3:83:9a:47:78:b2:dc:f3:31:c7:16:b1:
ad:f1:63:f8:a4:3d:e0:63:60:06:d4:79:47:3a:48:
44:92:7d:c6:bc:76:3c:b2:6b:9c:d9:67:ef:dd:8b:
f2:c3:c9:ae:26:42:07:39:e6:c5:cd:c3:c0:e4:be:
e6:da:a4:c9:10:35:5e:db:ca:02:87:dd:be:09:1f:
8f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:56:C5:10:6C:48:10:D8:37:13:73:2F:18:D6:FF:04:21:1C:A5
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c0:b6:ba:4e:30:8e:8c:49:f7:6b:56:53:b1:05:a1:6a:cc:
6e:0a:76:f3:f4:4c:c8:ad:70:d2:bb:36:3d:bd:3c:76:9b:55:
e1:8f:58:c4:d7:46:d0:14:47:4c:5e:be:0d:4c:e1:28:dc:b1:
89:e5:0b:a4:0f:7d:af:8e:db:cb:9b:8d:56:96:48:75:d3:d0:
48:35:d9:d7:75:d4:ff:d8:fe:b4:77:9b:d5:d8:20:95:fd:34:
1c:b8:8a:ac:98:34:0e:18:4d:25:9f:57:57:66:17:69:e7:26:
8e:2c:4e:55:b8:5f:a5:ab:4b:6f:fd:5e:5a:4e:2b:c7:91:c1:
88:34:22:2d:fa:a5:57:d9:7f:e0:55:5f:0a:74:fd:68:32:06:
e7:60:79:d7:41:bc:80:6b:42:54:fd:80:98:ec:4f:71:95:37:
68:5a:7b:75:43:3e:e8:86:27:2f:9f:ac:37:70:10:63:1b:77:
50:9e:a7:cc:64:69:30:c4:19:6f:17:2a:49:32:5d:d3:67:9c:
99:47:a7:7d:c8:85:92:9f:bc:64:68:75:5e:68:ab:c9:d2:54:
96:df:1d:31:50:d3:e9:1f:d6:e1:70:c1:c1:d1:7b:22:ea:46:
d5:bd:63:2b:28:cc:8e:ce:87:a8:0a:a0:48:24:b1:6c:95:fa:
6a:29:a7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:41:29 2026 by rpki-client