Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: kTDvx49KPWIXfqRhxswNoHrc54DXbnrGCZK2Y8aTyvI=
Subject key identifier: 9A:AD:98:A0:29:5F:35:96:CA:B5:89:86:7A:75:62:90:13:02:0F:BA
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019EB9583930BF31707B6BC9D0265EB37191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 1152
Signing time: Fri 12 Jun 2026 01:00:27 +0000
Manifest this update: Fri 12 Jun 2026 01:00:27 +0000
Manifest next update: Sat 13 Jun 2026 01:00:27 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: JCH2gzkY7Cky0GUtSY/qpRHLI6tzRn8EWeQ8vYQXDp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:39:30:bf:31:70:7b:6b:c9:d0:26:5e:b3:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Jun 12 01:00:27 2026 GMT
Not After : Jun 13 01:00:27 2026 GMT
Subject: CN=9aad98a0295f3596cab589867a75629013020fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ba:f3:fe:d6:59:47:6d:3e:47:e7:de:4c:29:
2e:3b:a2:95:28:50:92:50:07:69:30:8c:29:32:5d:
f6:65:db:ba:e1:94:26:1f:17:7d:27:72:ce:b6:00:
eb:8f:18:ad:a6:45:25:72:31:55:cc:c8:1a:a6:e3:
f7:82:6e:b2:21:5d:4a:27:eb:7f:bd:eb:9e:20:6b:
67:57:6d:14:9f:fe:ec:77:21:43:1c:66:b0:37:7c:
81:4e:3f:32:d5:06:85:dd:c5:07:80:3e:ad:45:b5:
6b:c1:cc:2e:02:77:77:6d:16:ab:0d:68:62:d4:0d:
25:70:9c:32:50:8b:0d:45:e4:a9:22:4d:72:ac:92:
9d:3b:51:ea:d9:2c:4b:9b:f1:f6:72:12:98:bf:40:
49:e1:26:ae:16:7a:a3:18:48:fd:a4:da:db:9e:22:
e5:fb:5b:a3:a3:05:53:dc:df:6a:b3:1b:c9:6f:a2:
bb:de:d8:0e:11:2c:07:43:a5:1a:c9:0a:18:95:00:
ba:a1:6d:17:d6:dd:4d:ab:37:62:90:00:64:18:5e:
5c:9c:a1:49:07:a5:7f:47:b8:54:d4:97:b4:f1:9a:
c2:1e:f3:67:36:46:9e:2c:ec:45:a5:31:1a:cc:ab:
52:f0:d0:fc:a5:e0:91:ba:86:7c:6b:ce:e5:a9:c6:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:98:A0:29:5F:35:96:CA:B5:89:86:7A:75:62:90:13:02:0F:BA
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:51:d8:42:04:fb:99:68:54:99:ee:98:14:d8:81:bc:97:70:
66:04:2a:3f:af:a2:27:0b:13:26:0f:c3:53:ca:6f:e5:14:e7:
4d:6c:7f:e3:88:44:9e:77:d2:a3:71:47:8a:2e:5b:9a:28:8d:
6f:be:3a:f8:24:9c:c6:cb:f6:b1:5e:28:65:42:b7:59:b0:af:
8a:43:69:bd:1c:1d:df:f1:d3:71:cb:50:54:7e:22:11:69:0b:
7f:55:c7:79:d9:c8:90:2a:3f:06:09:fd:d3:2d:2d:88:ce:a2:
54:9f:82:ef:51:91:c1:75:cc:08:f8:23:67:b9:99:02:31:4d:
b9:30:a2:d7:3e:19:19:c1:10:3f:3a:9e:99:d6:30:6a:ea:17:
5b:62:aa:6e:c7:a1:25:6e:1a:c0:cc:4e:27:5b:d8:42:0e:eb:
c4:27:1d:4f:30:25:f8:26:e5:05:42:d3:df:66:8f:9a:50:21:
0a:3d:b4:b2:e6:49:fe:0f:59:eb:c2:55:22:67:e6:e9:9e:3b:
87:01:e1:55:4c:ea:92:ad:ea:05:e0:9f:58:b4:9b:db:1d:de:
46:6b:8b:10:57:9e:f4:1f:8b:0e:6a:55:9c:8b:44:42:60:9e:
9f:13:ce:26:20:ef:d3:e2:a2:96:cd:3c:b8:67:cc:5d:3a:b9:
d8:d9:0e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:29:05 2026 by rpki-client