Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: kuT4272Zzn34YpHrq0upSrdRHXKuwQi8awTIzc8A8CE=
Subject key identifier: 0F:8F:AA:61:3D:1F:A9:A5:80:D9:A7:6B:CB:F1:8A:59:ED:18:FE:F6
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019F189DE773796D5B8D3D4C5653B7B29433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 1273
Signing time: Tue 30 Jun 2026 13:00:29 +0000
Manifest this update: Tue 30 Jun 2026 13:00:29 +0000
Manifest next update: Wed 01 Jul 2026 13:00:29 +0000
Files and hashes: 1: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
2: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: qvY9ZZpRgJxUJD7VGF6PrZSs5G/5TPfcXQM2KLMmFSs=)
3: yzyj6CtIhdLDtUGY2ToVGMdP9Gk.roa (hash: W/jGAjTWq86NyJWeIokb5Yic1QQn0pxHCXE2Q3AfgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:e7:73:79:6d:5b:8d:3d:4c:56:53:b7:b2:94:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Jun 30 13:00:29 2026 GMT
Not After : Jul 1 13:00:29 2026 GMT
Subject: CN=0f8faa613d1fa9a580d9a76bcbf18a59ed18fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f2:fe:59:d7:c0:64:ed:69:c7:2c:2f:eb:a9:
53:ad:1a:41:09:eb:0b:ea:f0:78:76:c9:25:51:9c:
1c:df:d5:6b:c5:a3:71:47:c4:94:48:d3:40:d2:f7:
94:d5:dd:60:20:00:a1:5e:c0:1b:95:87:b5:10:c8:
05:fe:8e:ea:85:57:ab:b7:02:02:86:03:93:a0:d0:
73:5c:7b:84:f9:46:89:c6:f3:0a:d8:3c:4b:78:f1:
9c:7b:a1:13:cb:ad:c7:46:50:a1:09:10:fa:c9:2d:
ce:1b:f2:6e:fc:61:2d:86:d0:cc:90:f5:09:94:e3:
71:0e:91:77:00:c0:8c:74:17:84:8f:8e:2d:be:ee:
3a:c2:62:a2:9b:a2:89:2c:cc:c2:95:57:18:15:e7:
08:f5:6f:9e:84:05:78:d4:9c:82:d1:e4:11:ee:f4:
68:f0:bf:3e:e3:56:df:0c:23:f0:78:66:2b:40:71:
ee:c0:82:4a:e6:36:76:cc:fc:1a:d7:41:97:f4:e1:
97:17:ab:a3:db:bd:08:54:6d:18:09:2b:50:53:32:
b9:3b:48:61:e9:19:77:c1:57:a6:b5:47:95:10:69:
24:bb:db:31:2e:b1:f5:c3:bb:d2:8b:c9:e9:54:40:
f8:b8:02:1a:bd:9c:1a:c6:7f:ba:a5:a2:c0:a1:57:
10:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8F:AA:61:3D:1F:A9:A5:80:D9:A7:6B:CB:F1:8A:59:ED:18:FE:F6
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:31:d0:2a:0f:6f:6b:c0:18:e1:3e:df:7a:62:74:a8:bf:6b:
f3:46:c4:c5:32:82:2b:c9:20:3a:0d:69:3c:a1:1d:f2:16:8a:
ba:79:50:f8:ac:5e:e7:65:2f:3c:89:b2:f3:c1:52:2f:c1:43:
fd:7f:74:91:36:39:73:13:b9:4f:6e:5b:60:d0:34:0d:2e:0e:
51:76:9c:6d:82:4f:b5:1f:90:d1:20:bc:13:5f:c7:bd:c7:15:
b7:88:b4:02:a7:ad:c1:96:13:96:6e:e4:94:d5:b2:7d:17:85:
73:c2:11:58:cd:54:02:9f:5b:95:ed:da:97:68:f3:7c:9e:4d:
07:f1:56:a0:2d:95:a1:00:88:1d:0d:d9:9c:32:98:8e:39:a6:
08:aa:55:b3:97:1e:40:d5:e9:a3:b7:4c:be:9c:a3:6e:eb:ae:
d8:26:53:08:bd:7c:4d:38:6a:d5:2f:a9:68:d5:1e:00:02:43:
f3:ae:e0:f7:b7:8b:dc:d4:26:74:a5:6b:55:8b:d0:e5:05:bf:
f1:77:35:9b:d2:c4:b1:e3:72:7f:58:0f:9e:36:5d:1a:1e:2d:
ee:ec:48:81:89:ee:73:79:c3:1d:19:e1:93:2b:d4:94:1f:4b:
ac:8f:10:c1:06:5a:5a:85:94:90:73:0f:db:7b:53:c3:5c:59:
91:81:48:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:53 2026 by rpki-client