Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
File: YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft (raw, json)
Hash identifier: akLcslrIPS2p5mqEtb9akvRaQ+rbHoFa6P8DCnlSKO4=
Subject key identifier: 29:5E:DF:37:95:39:5A:27:FD:1F:0F:74:B5:E5:CE:27:8D:33:2E:08
Authority key identifier: 62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
Certificate issuer: /CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Certificate serial: 019F1265CAB79BD760220545B4A56112D955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
Manifest number: 1989
Signing time: Mon 29 Jun 2026 08:01:28 +0000
Manifest this update: Mon 29 Jun 2026 08:01:28 +0000
Manifest next update: Tue 30 Jun 2026 08:01:28 +0000
Files and hashes: 1: DrwW4sKSqTZEXvxPzEr4f3uBsog.roa (hash: GYviIhAWt+rJxTgokFxh6w4GldBuIX4UFW6S+3JXsHk=)
2: P98wNmnJTHdJLeeJu4aYozQSfd0.roa (hash: KbHvAeiSMHCPMC0OSmiZKSqrSyacLzZFYJdIlBywl7g=)
3: YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl (hash: uG46Qis78kNESjxqkpzU2ML6/Suf1NySsHr6TujRE80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:ca:b7:9b:d7:60:22:05:45:b4:a5:61:12:d9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6284cfa7844340237fe59a3825b54f3f77ed8532
Validity
Not Before: Jun 29 08:01:28 2026 GMT
Not After : Jun 30 08:01:28 2026 GMT
Subject: CN=295edf3795395a27fd1f0f74b5e5ce278d332e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:77:7c:33:5f:de:33:cb:85:2f:55:72:73:
3f:e9:79:c9:36:93:1c:94:0a:76:52:0c:29:f7:36:
ae:35:6a:a1:48:b5:4a:6b:71:4d:16:e8:0f:25:56:
cd:0b:82:d5:4c:50:21:df:ea:a7:91:a4:93:e4:a2:
13:36:6e:20:ea:b5:50:da:e6:b2:5d:11:cf:5e:df:
13:6c:a4:e6:a5:00:f6:b2:3c:dc:72:fe:1c:db:cc:
04:36:e7:93:26:45:96:53:74:d6:8d:41:15:e7:d3:
11:e0:ab:ed:72:d9:03:17:c9:62:0b:0d:c3:a8:19:
15:f2:b5:2f:25:37:ec:bd:6f:c8:7d:3a:34:75:5f:
1d:62:4f:7b:ac:5b:cb:25:60:59:6a:20:f9:4e:c0:
f9:39:e9:9d:43:9c:5b:c2:39:0a:1c:a8:ba:ba:66:
39:2b:06:54:19:c5:a7:4e:98:9f:49:7a:d3:96:c1:
d0:80:d9:88:0b:12:94:20:c4:5b:3f:79:c3:87:48:
cb:1e:a7:cb:86:f0:4b:e2:4a:ed:31:7d:71:cd:ba:
85:10:16:d0:6b:71:a7:c2:99:ea:f8:ff:cb:43:79:
57:90:f8:57:12:e6:92:fa:4f:31:b4:38:cd:f6:30:
d1:2e:41:0a:eb:96:04:5a:23:dc:6b:43:53:e7:7c:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:DF:37:95:39:5A:27:FD:1F:0F:74:B5:E5:CE:27:8D:33:2E:08
X509v3 Authority Key Identifier:
keyid:62:84:CF:A7:84:43:40:23:7F:E5:9A:38:25:B5:4F:3F:77:ED:85:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YoTPp4RDQCN_5Zo4JbVPP3fthTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fc1e32-0ba7-4f8d-a5aa-f38f8fe794d4/1/YoTPp4RDQCN_5Zo4JbVPP3fthTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a7:db:4f:dc:20:cb:2e:6b:c2:58:f8:a8:c5:1d:aa:f1:79:
09:50:1a:9c:e1:0e:94:b1:ca:9a:18:06:a9:09:58:c2:58:ae:
2e:81:13:71:99:43:bd:08:4a:85:15:dc:de:29:38:8e:9e:cf:
92:49:75:98:17:36:93:fd:c5:74:78:66:bc:91:3e:01:e8:1e:
62:a9:d8:81:48:c4:eb:18:c4:23:4a:ee:65:57:82:21:6a:f1:
06:fb:a0:97:8e:98:5f:8f:32:2b:65:65:e5:42:0e:04:8e:ab:
43:65:60:9e:78:08:6f:9f:18:c4:79:3c:06:31:cf:42:28:39:
d5:21:d7:ce:67:e5:0f:6d:7f:f1:bb:f5:b0:a6:e9:8a:dd:04:
d3:94:04:f8:f7:78:47:50:25:85:b8:4a:38:1c:39:fa:fb:05:
a4:9e:a4:4f:aa:ea:c0:36:42:e8:6a:74:68:ba:5b:8d:8a:ab:
78:d4:02:68:bf:c7:1d:51:25:db:a1:64:db:83:d1:1d:9b:22:
07:d8:2f:ba:aa:52:5a:7d:28:f4:6a:fa:d5:59:a6:6b:d7:65:
45:3e:ec:90:e2:c6:03:8c:cd:a1:56:21:a9:13:3f:95:16:39:
bb:d9:c1:63:66:5f:8a:4d:52:a5:84:df:45:5f:c2:1e:b5:fd:
48:60:3b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:48 2026 by rpki-client