Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
File: yohtVYfshfcSQs1XztQJVEUoFo0.mft (raw, json)
Hash identifier: wa6fOe/96TNQSfieakJ/I8NvkbXEggqoYauNpIBG1Gc=
Subject key identifier: 67:5F:1F:A2:67:2F:8F:F0:91:07:C3:38:DE:6C:15:F2:FB:40:0F:5E
Authority key identifier: CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
Certificate issuer: /CN=ca886d5587ec85f71242cd57ced409544528168d
Certificate serial: 019EC2244252AC2826935FD1E48123184390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
Manifest number: 070F
Signing time: Sat 13 Jun 2026 18:00:16 +0000
Manifest this update: Sat 13 Jun 2026 18:00:16 +0000
Manifest next update: Sun 14 Jun 2026 18:00:16 +0000
Files and hashes: 1: I2kHiqxmSF3p6V9W7eV_eTfDN3k.roa (hash: fCpVVld0L94vFLqVKGMCfHN/hOXwKxcQlDEoGOWDUFo=)
2: XExavfpXuaZ3MydZbyDnyFn5ni0.roa (hash: WQdTsTZhStmdezt2VotpAadyLft0mMYrZPTmmKNNRro=)
3: yohtVYfshfcSQs1XztQJVEUoFo0.crl (hash: GcDGtjTUk/1XsmhmdODTb1tG0k2TTpxuDPC9nThJt7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:42:52:ac:28:26:93:5f:d1:e4:81:23:18:43:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca886d5587ec85f71242cd57ced409544528168d
Validity
Not Before: Jun 13 18:00:16 2026 GMT
Not After : Jun 14 18:00:16 2026 GMT
Subject: CN=675f1fa2672f8ff09107c338de6c15f2fb400f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:fb:97:ed:84:6a:7e:f2:b4:e3:82:4b:dd:
66:8b:fa:cc:6c:34:22:fb:b9:13:b7:89:a9:ce:bd:
78:10:61:b6:32:58:0c:fa:f4:5a:4f:37:55:84:fd:
92:73:87:b7:13:8a:11:c9:36:ca:fc:aa:67:e1:c9:
af:84:d6:63:e2:21:41:bb:54:34:33:3e:ac:6f:6f:
23:2f:a5:3b:40:80:6c:75:b7:84:98:42:b1:0b:a1:
ab:df:26:98:cd:6a:02:4d:db:10:3d:1e:a0:f0:94:
60:d9:d0:5d:40:95:ee:28:6f:a1:2c:21:17:b3:22:
4e:21:fe:c5:43:a4:97:f5:ec:27:0c:97:97:9b:12:
09:8d:3c:25:15:04:23:f5:b2:b8:57:a8:7a:ae:0b:
db:9f:a0:8e:7b:c4:cb:7c:e4:f7:d0:3a:50:d5:a1:
52:08:6c:1d:b5:87:70:24:10:49:a9:fd:ab:c8:dd:
f7:70:59:0a:71:4a:9a:27:5e:50:a2:c4:85:f1:dc:
6f:6c:7b:43:44:2a:a6:ce:d4:51:ae:0f:da:2f:c9:
1f:9f:19:5f:8f:1e:37:2a:e1:70:96:69:70:16:cd:
82:7e:dd:0e:8a:09:08:41:9e:d5:32:a1:9f:41:1b:
ff:49:8e:38:5f:40:44:9c:52:05:f2:db:ef:16:bf:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5F:1F:A2:67:2F:8F:F0:91:07:C3:38:DE:6C:15:F2:FB:40:0F:5E
X509v3 Authority Key Identifier:
keyid:CA:88:6D:55:87:EC:85:F7:12:42:CD:57:CE:D4:09:54:45:28:16:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yohtVYfshfcSQs1XztQJVEUoFo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fe82d1-1575-47c1-9f22-c7e2520c4cea/1/yohtVYfshfcSQs1XztQJVEUoFo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9d:b8:05:ca:c1:e8:cd:85:89:dd:36:8d:59:e9:ec:7a:d4:
81:54:bf:58:fc:55:f2:f2:1e:7e:ac:88:7d:99:01:8a:e1:9c:
93:49:89:26:a2:87:48:98:01:7a:24:0f:c3:a6:32:8a:15:68:
59:d1:43:48:34:51:a9:9a:38:f0:6d:a1:fe:d8:b9:5a:6a:87:
66:19:69:3a:8b:b2:fa:d3:08:1e:08:b7:86:e2:38:b0:05:1e:
02:83:1b:2f:a7:35:6f:ca:af:9e:39:ac:83:8b:05:88:29:fe:
89:e3:27:58:a1:7f:5a:0d:9e:b8:6c:c3:eb:f8:2b:e6:45:5a:
a5:ba:02:ba:6c:48:ed:7c:dd:4b:9a:2b:2b:91:d6:24:3c:d4:
9e:3b:a1:05:75:f9:51:04:d5:fd:76:d7:fa:18:3c:ba:9b:68:
46:09:bf:56:6f:b1:1d:98:9c:ba:1d:c3:95:79:88:db:94:ac:
a1:72:99:dc:fd:31:8d:db:a3:fa:b2:60:02:18:44:f2:39:34:
d1:66:67:5b:22:5f:f7:35:db:82:31:5f:06:f1:72:fa:5f:11:
0c:d7:0f:2e:58:1e:ac:52:ad:9b:50:df:aa:23:19:56:71:bb:
b9:4f:bd:54:ac:52:30:c1:b2:95:54:20:b7:c0:a7:10:e4:0a:
13:55:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:59 2026 by rpki-client