Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: pI60LpZ3fRlcAMS4blXFJfw/wTcwdgejsFn16gaX8rM=
Subject key identifier: 7A:9A:1F:E9:A7:60:40:78:3C:27:B6:CC:60:26:B2:2D:99:0F:E8:2C
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019EBFFF1AC36AB01C5D911AA3A1A88229F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 1685
Signing time: Sat 13 Jun 2026 08:00:27 +0000
Manifest this update: Sat 13 Jun 2026 08:00:27 +0000
Manifest next update: Sun 14 Jun 2026 08:00:27 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: Lts2q3V2uQm35roDWzGNrfE80tgjLlbuo9IQWnw0fxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:1a:c3:6a:b0:1c:5d:91:1a:a3:a1:a8:82:29:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Jun 13 08:00:27 2026 GMT
Not After : Jun 14 08:00:27 2026 GMT
Subject: CN=7a9a1fe9a76040783c27b6cc6026b22d990fe82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:12:ff:d9:b1:e8:fd:68:30:9f:65:3f:ce:21:
07:10:85:41:df:21:23:b6:3f:df:3d:de:53:71:0f:
51:e9:b7:d7:f4:2b:fa:c8:23:1a:91:75:c6:d3:cf:
09:53:c1:b0:a5:07:f0:0d:64:55:45:68:69:8c:79:
8a:9c:fb:0b:a0:ed:9d:e7:e1:af:ba:b7:d2:da:1a:
ef:49:68:83:63:43:a8:7f:45:58:46:5a:d9:c8:11:
2f:82:f7:00:33:af:3c:ec:dc:0f:60:e1:88:9f:d5:
67:ff:c2:f1:af:d1:30:3c:48:94:b7:a0:66:4c:71:
b6:03:35:fd:86:6c:d5:c3:64:d7:68:b2:ab:84:ca:
c8:a5:72:a2:14:dd:f6:e3:1c:3f:36:79:61:7f:ca:
f3:0f:9b:10:ad:f5:ed:57:6d:80:1d:7e:11:0c:75:
db:7f:da:d2:d9:38:60:7f:19:41:87:1c:26:50:f5:
07:b7:dd:8d:81:74:ed:cf:bc:fc:55:1b:9a:2e:ce:
7e:ba:f3:5d:ea:b8:28:52:7e:c5:eb:4f:1b:0d:b7:
9d:df:16:0f:da:66:58:5c:15:da:d9:c2:9f:20:d1:
88:b4:30:f6:71:7f:5d:ea:01:06:53:c4:1e:a5:6f:
36:f9:75:be:a7:fd:7e:20:41:0d:99:54:9c:73:7a:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:1F:E9:A7:60:40:78:3C:27:B6:CC:60:26:B2:2D:99:0F:E8:2C
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:84:d0:b1:c7:3b:92:46:f6:65:46:f6:fc:fc:ae:10:1f:78:
8d:c4:5d:26:46:c4:7c:95:91:2b:76:15:31:a9:9c:59:3e:de:
40:67:a1:fa:9e:78:c6:c0:be:24:28:3e:1f:f9:d8:80:b7:10:
57:8f:2b:64:b8:bd:a1:4b:37:ef:3d:00:68:7a:0b:ec:db:32:
60:dc:8f:50:ca:e7:a6:d4:6e:76:8d:1a:8d:37:4e:fe:47:11:
12:1d:f7:c3:ed:2d:ce:ef:a4:d1:bb:f2:73:a5:fe:40:48:10:
3e:b8:81:48:4b:d7:8e:2a:54:5a:4c:b0:4e:ff:35:e2:96:ec:
c2:19:1b:48:cf:c0:b1:45:23:28:cd:f4:5f:7e:3d:71:81:99:
8a:c1:11:9a:29:0d:ad:ee:b8:c3:0d:b6:31:01:f1:5e:fa:b7:
5f:dc:e2:99:45:f6:4b:fe:f6:c6:11:00:fe:29:77:83:5b:4a:
b3:60:ef:52:04:e2:f1:de:4c:e5:02:a5:d2:5e:ef:91:47:43:
1a:7a:76:5d:1d:2c:c9:13:67:68:df:42:45:12:37:de:71:f0:
ae:07:63:73:39:4c:82:9c:c1:78:82:7d:af:ef:03:bc:2b:0b:
03:9f:e0:83:5b:a7:2b:3f:13:1a:42:3c:26:c2:d4:c7:66:77:
d2:b3:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:31:41 2026 by rpki-client