Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: mzHBxSuryvW0066twVAlJbK/ntJPMB+0kWj1ycqNyUY=
Subject key identifier: 09:A6:42:FC:0B:6F:28:DC:0B:E9:E0:E8:A3:A3:30:C0:19:B1:E1:F6
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 019EC1B6FADDCDD3F4FF2AF3D61BBE3DCE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 1612
Signing time: Sat 13 Jun 2026 16:00:54 +0000
Manifest this update: Sat 13 Jun 2026 16:00:54 +0000
Manifest next update: Sun 14 Jun 2026 16:00:54 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: fGJTy/630e/uYh46YjiMPY/4zvSqzrKwwkcHRCnA9JY=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:fa:dd:cd:d3:f4:ff:2a:f3:d6:1b:be:3d:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Jun 13 16:00:54 2026 GMT
Not After : Jun 14 16:00:54 2026 GMT
Subject: CN=09a642fc0b6f28dc0be9e0e8a3a330c019b1e1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:d1:07:47:c7:5c:55:08:1a:6b:86:d1:5f:
20:dd:92:52:b6:13:a5:c0:07:74:90:9a:61:49:a1:
02:e8:80:6d:c9:7b:2f:ae:31:4f:61:54:e2:39:73:
63:89:b2:fd:b1:22:fb:ca:a0:d9:44:1e:35:28:e7:
8e:33:48:31:66:11:98:ce:8c:6e:74:ce:03:75:f0:
e7:cc:82:95:c8:33:86:ad:1c:cd:e8:e6:5b:68:62:
ac:a9:07:f9:1c:28:74:e0:41:1b:47:32:42:67:97:
6a:da:98:bc:aa:d5:f7:80:26:6a:d9:42:ab:a1:99:
64:c6:61:2f:6e:0f:b0:92:e2:00:1f:6d:27:2b:a4:
5e:fc:af:3c:d2:43:74:68:b2:af:6a:00:a3:c0:75:
d9:79:fb:35:2c:5b:9b:c1:68:96:7d:d8:a3:eb:fe:
25:bd:86:87:87:b2:61:2c:cd:d7:2a:da:cd:2e:a1:
ce:fa:77:47:17:3e:85:2d:73:30:af:45:0a:e6:9d:
88:79:86:b5:4c:ab:b1:bc:35:fb:ca:c4:59:21:69:
cd:85:12:99:a9:15:6d:aa:1f:75:7a:2b:22:e3:f1:
6f:65:48:83:d4:28:c2:13:41:5b:38:9b:dc:fe:d1:
a7:a3:76:a1:a1:f7:24:57:08:9b:08:a5:94:46:3f:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:42:FC:0B:6F:28:DC:0B:E9:E0:E8:A3:A3:30:C0:19:B1:E1:F6
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5f:8b:a6:b4:63:a9:0e:f3:15:40:7b:0a:46:b3:42:c9:a3:
02:52:91:3f:58:71:1e:b0:f6:85:b3:26:46:79:f1:45:c0:2f:
22:a3:0d:ab:8f:87:71:56:29:ed:ee:e1:f2:e2:f6:d7:0a:19:
6f:34:36:b4:6e:09:75:72:62:51:39:70:55:1a:64:c9:e5:be:
21:b6:12:23:f4:3d:78:5c:bf:e0:81:bc:c5:f1:f6:36:a2:36:
98:d1:fe:f4:27:0c:a3:d2:c8:f4:04:4f:50:f2:cf:f7:4f:f8:
90:9a:48:fe:c3:7d:e3:ab:64:0d:ad:7c:5b:db:86:dd:56:0a:
cb:cd:93:f8:33:d8:f2:d6:e2:a0:07:44:95:e0:b3:5a:a9:40:
67:8e:70:33:c8:90:89:a3:59:49:9a:0b:b5:d3:c1:c0:28:61:
a5:37:b3:a3:80:9f:6e:a7:1c:df:79:dc:d4:e2:09:49:5d:ee:
3f:6b:94:e7:46:94:17:d6:82:da:88:8b:43:a1:7a:91:b0:d4:
b6:17:e6:87:12:f4:86:c3:4a:9a:f8:cf:80:c4:0a:43:ce:55:
4f:0a:38:ca:3b:b0:13:45:65:46:ae:32:82:5e:5f:09:12:4d:
54:36:f2:ae:ea:57:b6:b7:0b:c2:1f:5b:f7:a6:69:70:87:3e:
77:9f:4a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:09:20 2026 by rpki-client