Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: zdtMUeA3O6DI98bS6gYZTs5Ie3E8Bpf/cPNJPb8oddA=
Subject key identifier: 77:9F:FD:23:D6:B9:5C:E8:24:EB:78:D1:AE:6A:42:FF:BC:FC:29:D0
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019EC300C4F918DC5EC8162E17EEF8FECBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 17F7
Signing time: Sat 13 Jun 2026 22:01:07 +0000
Manifest this update: Sat 13 Jun 2026 22:01:07 +0000
Manifest next update: Sun 14 Jun 2026 22:01:07 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: 2FL7adZm0LM2lnkfwWxOc+NflxINEtWVELtWsqePyAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:c4:f9:18:dc:5e:c8:16:2e:17:ee:f8:fe:cb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Jun 13 22:01:07 2026 GMT
Not After : Jun 14 22:01:07 2026 GMT
Subject: CN=779ffd23d6b95ce824eb78d1ae6a42ffbcfc29d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:75:fe:73:b1:70:21:8b:b9:71:9c:45:34:53:
de:06:32:e4:28:fd:79:ec:e2:65:b5:51:74:cd:67:
b1:e5:94:87:ca:9f:45:0b:c3:82:e2:cd:99:5c:43:
cd:3d:fe:85:19:c9:25:7c:88:3d:65:a0:00:f7:45:
93:ca:db:d1:09:f4:0e:da:8d:b6:98:0b:72:43:88:
f6:fc:38:9c:3f:0b:1c:59:04:9b:cc:cd:3c:76:e4:
52:c4:c7:45:d0:09:a3:d3:3f:13:3a:5b:19:01:dc:
9b:42:a2:b5:9a:28:ee:83:c6:6a:80:d3:1d:15:73:
9b:6c:ca:b9:4e:23:65:fe:e1:ad:1e:ba:0a:06:b2:
75:7c:ad:db:87:b8:73:a1:03:87:64:4b:70:f7:20:
aa:bf:6c:ac:c8:74:db:dd:15:07:8c:28:c6:38:43:
f5:d6:ac:0f:7b:ab:6a:9e:71:58:bd:b5:62:f6:ac:
aa:4b:78:70:c6:fb:fb:bc:b0:6d:50:8e:fa:ae:d5:
3e:3b:cb:48:27:05:d6:dd:e0:50:f2:7a:25:c7:0b:
34:1a:49:62:8f:a7:1b:44:90:16:ce:21:7a:12:aa:
c1:3d:27:cf:cd:fb:9d:ad:79:c8:66:9e:10:23:35:
33:f5:6b:2d:83:55:44:27:e0:ce:01:74:56:04:2b:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:FD:23:D6:B9:5C:E8:24:EB:78:D1:AE:6A:42:FF:BC:FC:29:D0
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:30:2d:ac:f7:2b:6c:7b:e6:73:bc:2c:49:92:10:0f:6e:80:
4a:69:4c:10:64:40:e3:f5:1c:b7:09:b0:c6:27:d3:da:b4:5e:
a0:2b:e8:58:0a:1c:8c:ef:79:b7:a4:95:c0:78:ce:f5:43:d8:
0e:d1:39:21:e0:ba:f7:7e:b0:fe:43:2c:4b:f3:26:3a:8c:e3:
8f:ee:fd:5c:22:50:d5:2d:1c:e9:92:b0:c4:7f:40:6e:72:e9:
0c:a8:6a:16:79:50:93:b7:5c:e0:3e:34:8e:54:81:ea:8a:94:
d4:69:66:be:7e:d2:d9:81:cd:11:31:7c:64:69:d0:94:0e:62:
ac:22:1f:8e:df:8b:7c:d4:50:8c:3c:d9:3b:ba:c5:f6:26:74:
c4:ac:79:7c:29:c4:f1:ff:bb:ee:88:62:60:95:d2:46:fa:e9:
6b:87:06:e9:e0:89:c1:96:43:b4:d5:b9:64:7b:c9:8f:2f:d3:
0f:58:1e:5d:34:1b:f5:00:2b:78:b8:99:39:f7:27:87:a4:83:
d0:31:11:40:79:f2:0b:18:63:31:fd:d6:95:55:00:59:d1:cd:
1a:65:56:93:47:dd:35:66:c9:55:23:21:2f:7b:c2:76:33:ca:
d2:60:17:84:c7:d0:22:b8:27:c3:d7:6c:6b:94:de:2b:53:e0:
f9:3e:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:24 2026 by rpki-client