Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
File: YTIzl9blKd_wbHzxTRdg1ucGqm8.mft (raw, json)
Hash identifier: I7c7ZaxM1sQ+Op3rqFFFsAin7Qch7D8Yx1i1IE8EL+8=
Subject key identifier: 3A:3B:2B:84:A0:57:6B:16:5F:B7:E3:84:FC:00:66:96:44:9B:0B:E6
Authority key identifier: 61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
Certificate issuer: /CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Certificate serial: 019F122E483CAA563271062692CB074282F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
Manifest number: 0643
Signing time: Mon 29 Jun 2026 07:00:50 +0000
Manifest this update: Mon 29 Jun 2026 07:00:50 +0000
Manifest next update: Tue 30 Jun 2026 07:00:50 +0000
Files and hashes: 1: TVT4_OBKA-2I4FrIkhh2iW24oPw.roa (hash: U1OVtJgMOPc/4XYbv8bLSVgA0GMg+CX+suR8Va/RqoY=)
2: YTIzl9blKd_wbHzxTRdg1ucGqm8.crl (hash: MqTjPNa9QSyB7H49XIgwIbPORJaXiUm5vKW0b7N5P/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:48:3c:aa:56:32:71:06:26:92:cb:07:42:82:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61323397d6e529dff06c7cf14d1760d6e706aa6f
Validity
Not Before: Jun 29 07:00:50 2026 GMT
Not After : Jun 30 07:00:50 2026 GMT
Subject: CN=3a3b2b84a0576b165fb7e384fc006696449b0be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e0:e0:e8:e5:11:2a:ef:f0:48:2e:32:d4:6e:
84:c5:6f:9d:17:7a:ff:05:40:a9:08:18:8f:96:c5:
d9:bb:01:f3:02:22:58:54:f6:cd:cb:bf:b5:28:eb:
04:f3:f4:7d:8e:31:e1:10:ee:7a:52:b3:25:31:9c:
60:56:d5:1e:87:08:f0:da:67:ce:b9:1b:31:8b:82:
30:3d:ef:4b:03:6e:e9:e1:5b:ae:c8:e7:3f:8b:d0:
d8:79:1c:4c:1e:ec:42:8f:2d:42:f3:f7:1d:48:cf:
04:c2:ef:1d:15:b3:05:b2:e5:be:fa:82:3c:97:53:
16:bf:87:36:c0:43:52:60:85:16:1e:d5:69:7b:c9:
27:bc:f8:e3:79:41:6b:4a:9a:f8:d1:da:c9:bd:fc:
0b:07:24:a8:6d:4f:90:4d:39:b2:c5:2d:b8:dc:76:
b8:e7:5a:c5:e1:2c:29:75:5f:31:36:01:40:e7:4c:
07:bf:b6:de:4a:0f:7a:fa:15:35:bb:43:18:ff:88:
6d:ec:26:34:cf:98:1f:46:1f:50:a6:2c:ec:d5:ac:
ab:b4:b1:2d:8e:57:be:aa:99:c0:5d:c2:f9:5f:cb:
60:56:a7:b7:d2:6b:41:7c:d5:64:86:1f:b9:8a:90:
ca:cb:0b:ff:17:bb:72:ac:e6:28:3a:e3:16:91:bb:
7c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3B:2B:84:A0:57:6B:16:5F:B7:E3:84:FC:00:66:96:44:9B:0B:E6
X509v3 Authority Key Identifier:
keyid:61:32:33:97:D6:E5:29:DF:F0:6C:7C:F1:4D:17:60:D6:E7:06:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTIzl9blKd_wbHzxTRdg1ucGqm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ba391b-cb89-4e21-944a-ef33d85a4a86/1/YTIzl9blKd_wbHzxTRdg1ucGqm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:bd:38:dd:f7:52:89:13:f7:af:ba:78:f9:cc:11:4d:60:
4b:ce:6f:29:af:57:33:2e:d3:ee:9c:c7:4c:64:ca:ae:82:ff:
8e:d4:cc:07:f8:ae:7f:bf:ee:43:1d:a1:39:29:e4:45:9b:1c:
07:3b:79:99:c3:28:1e:b2:f8:c3:88:06:80:0d:b6:43:76:84:
b8:d5:91:72:a7:c5:b4:48:39:5c:72:42:bc:c0:8b:6a:fc:6b:
92:d8:e8:1f:7d:84:b7:0a:d8:15:fd:7a:6a:79:ec:67:27:9d:
19:87:74:33:ea:85:7d:ee:6c:f9:41:58:52:b9:3c:8c:5b:74:
5e:90:79:9a:18:f4:f6:27:f6:4f:99:b8:ca:41:e6:a7:84:cf:
5c:3d:df:f7:14:24:e7:95:68:b3:01:cb:19:18:f9:80:2c:66:
ba:36:c0:49:99:52:84:e3:b8:1b:5e:00:8c:ce:64:70:b0:61:
16:91:cf:e0:82:1f:83:83:39:bf:34:35:f3:12:5a:be:50:46:
6b:ed:09:69:2a:88:e3:77:b7:5c:12:d2:99:db:20:56:3a:15:
40:1d:ad:fb:28:c1:65:11:c0:28:84:e6:ca:13:ab:15:4b:21:
19:2e:f9:77:3b:e1:58:7a:b3:03:6c:7b:b5:c5:95:a9:8c:07:
2b:c6:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:39:47 2026 by rpki-client