Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: qzOJPrDNiXWxwXxSg7ULmxQtGjCuUO+KCQqtZcKHDxA=
Subject key identifier: 83:D4:A2:41:8D:19:B5:97:21:36:23:06:CF:A9:1A:97:7E:D3:CA:DE
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019EC1EDC4607D6D09F857E2953E32A5FDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0E43
Signing time: Sat 13 Jun 2026 17:00:45 +0000
Manifest this update: Sat 13 Jun 2026 17:00:45 +0000
Manifest next update: Sun 14 Jun 2026 17:00:45 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: YTAcWvFy6TxG/T+Ult2Aa4hS17wWWD1kgZuh41R9FJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:c4:60:7d:6d:09:f8:57:e2:95:3e:32:a5:fd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Jun 13 17:00:45 2026 GMT
Not After : Jun 14 17:00:45 2026 GMT
Subject: CN=83d4a2418d19b59721362306cfa91a977ed3cade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:44:a9:39:cc:c8:21:44:92:5b:50:40:b6:a0:
32:27:ea:db:c2:45:82:4b:58:a4:cf:73:7c:09:17:
e8:91:cb:21:5b:a0:2d:3c:2b:a0:13:26:65:70:38:
b8:ed:87:07:15:ae:43:10:6b:ed:80:f4:9e:43:b9:
71:0c:cb:d5:9d:a9:ba:1f:e8:8e:0c:91:f3:ea:96:
52:da:ea:9c:1e:12:f4:4b:f4:08:03:20:1f:8b:27:
35:c5:27:46:bc:9d:91:fa:2f:1f:ba:87:b6:8f:b8:
26:a7:54:b8:41:33:a2:4f:53:bb:52:64:44:85:bb:
b7:03:4e:4a:fc:61:69:7e:9b:3b:7c:fa:4a:ea:a0:
75:65:cb:43:f3:b1:d5:5b:37:7f:38:2e:38:c1:f5:
3e:c3:2e:45:78:a6:78:81:de:4c:35:6d:c1:78:ad:
45:16:c7:bd:58:68:b6:83:76:60:ee:77:4c:ca:82:
ce:f0:dd:f2:aa:31:99:e1:a2:8d:1d:1b:89:f6:92:
1e:0f:4a:db:63:c1:2b:41:e5:08:37:ed:b1:06:40:
6c:c0:99:03:19:fe:00:50:7b:ac:96:c8:9b:2a:14:
09:62:09:bd:00:cb:9e:1a:1c:07:7b:1f:39:5b:f5:
7d:f5:9b:eb:77:7e:1b:94:da:3c:6b:a2:52:ce:73:
d4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D4:A2:41:8D:19:B5:97:21:36:23:06:CF:A9:1A:97:7E:D3:CA:DE
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:82:9a:1c:f7:03:d2:aa:e7:7b:47:3a:4d:b5:03:14:06:f3:
54:57:2d:cd:00:85:67:ab:d6:eb:c2:e3:3c:09:73:13:d9:94:
15:45:83:63:06:5e:ea:99:b1:9c:31:6c:fb:b7:7f:b9:bf:bc:
03:93:14:0e:b1:a5:18:f1:45:bd:ec:9a:da:1b:d9:00:fe:73:
02:79:5f:b9:e2:16:25:f4:e8:3f:71:a7:15:41:d2:25:74:3a:
ff:91:f0:27:2d:49:9c:75:dc:11:e5:93:49:56:d3:38:c0:ae:
c7:42:90:9f:d8:58:cf:31:5a:d3:d9:68:fc:28:c0:fc:c3:f5:
33:06:71:00:05:69:6c:f9:97:d4:94:82:71:9b:5a:1c:f0:08:
e4:3b:2b:7f:e7:88:29:47:ed:ea:7b:b3:35:3a:5f:29:14:e1:
af:6c:d4:06:08:ee:e1:11:d1:e7:db:ff:19:4c:2f:c8:82:50:
d9:95:3d:b9:63:43:66:76:11:d4:a5:b2:b2:8b:32:8a:37:23:
8e:2e:70:4e:15:ce:d5:21:a4:00:df:a2:a7:1a:fb:a8:77:a2:
85:4e:0c:63:0d:16:60:15:98:27:08:b9:1b:ab:28:64:91:d2:
f0:3f:d0:82:37:8d:b4:cd:41:c3:b6:d7:62:93:90:ec:de:37:
83:00:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:58 2026 by rpki-client