Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: MjQgeP07JblTt+lAmssFVe1t8dEgV3HZOp5cz38S8Lw=
Subject key identifier: C1:7A:9F:FA:8F:EC:90:A8:21:2B:58:EC:9E:E5:06:E4:AD:6E:DE:A4
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019F11F82346CBC7926C7F8F5F3ABFC69160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 06:01:42 +0000
Manifest this update: Mon 29 Jun 2026 06:01:42 +0000
Manifest next update: Tue 30 Jun 2026 06:01:42 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: qKEn+rLPFielW280cRHMZCK6XydQEnCMJsD6hknal3o=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:23:46:cb:c7:92:6c:7f:8f:5f:3a:bf:c6:91:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Jun 29 06:01:42 2026 GMT
Not After : Jun 30 06:01:42 2026 GMT
Subject: CN=c17a9ffa8fec90a8212b58ec9ee506e4ad6edea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:13:f2:eb:d0:fa:b8:18:d9:c2:8f:8b:82:
a2:9e:ff:84:c7:fd:0b:8f:cf:41:da:da:af:5a:4f:
a0:b9:9b:28:20:6d:57:07:9f:a6:fb:6b:17:b8:14:
ae:82:30:2a:68:c1:39:55:17:1d:39:55:38:ea:c0:
82:fb:d8:f6:3d:cf:f0:a0:1e:0d:48:2e:fe:24:f3:
31:cb:5f:7a:19:df:ea:e5:0f:08:5e:d7:ff:ae:89:
e7:3a:bf:b2:6a:b0:25:4b:14:9c:a4:73:7f:9e:75:
8c:39:5c:79:5c:ea:7f:7f:a2:aa:b1:ca:87:46:a7:
3d:d8:a5:2d:70:d7:3b:f8:4d:04:7f:55:da:8f:4b:
96:ab:4b:2d:1d:18:df:77:20:cd:86:7a:9d:44:83:
8a:21:14:36:94:ff:a5:a5:61:7d:34:1d:d3:1e:36:
21:41:0e:f9:52:fb:8f:04:08:ad:44:7c:47:4e:35:
48:98:ee:66:15:9c:52:dc:7c:50:ff:50:18:29:48:
ee:1f:10:70:20:aa:24:b4:34:34:72:ed:37:39:bb:
22:8e:72:e5:30:90:8f:a5:9a:f1:2e:ee:55:5a:1f:
53:35:b0:2b:e5:9b:f7:d6:45:e3:12:02:61:50:7f:
2c:3e:2a:ca:8e:d7:e9:0e:dd:13:ac:65:97:be:ee:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7A:9F:FA:8F:EC:90:A8:21:2B:58:EC:9E:E5:06:E4:AD:6E:DE:A4
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:68:e1:9e:77:53:72:0f:3d:38:33:cb:6e:46:61:a9:85:02:
c0:b6:a7:9c:a7:d9:2a:06:49:41:9d:24:29:49:45:54:93:25:
14:13:a3:20:e7:55:10:64:f7:cf:78:4a:84:5a:80:fc:e2:6e:
3e:92:dc:04:6b:49:4b:fb:c1:7b:ed:61:34:35:35:cf:bf:32:
5d:2d:c4:b0:d5:48:2f:ea:21:7a:c5:3f:a7:06:e6:0d:22:30:
90:b7:86:6f:f9:7b:07:8a:1c:18:d2:c1:f5:a8:1a:85:a9:45:
4a:8d:4c:a6:12:74:fd:16:84:62:b7:b0:bc:15:1f:d7:1e:7f:
b3:17:b4:4e:f3:41:4f:9d:99:39:04:cf:74:c1:fc:a3:00:b1:
0b:20:4e:f5:e1:fc:e7:71:6e:b0:15:ac:be:ad:05:e8:1f:e4:
5b:b9:4e:cb:33:79:fa:ef:9c:31:a0:6d:ab:ac:2f:2d:ad:7a:
52:80:58:f7:97:d8:1a:9e:5a:8c:9b:19:d5:86:27:fc:e6:75:
c9:ab:4e:c0:7f:6f:70:24:be:fc:0f:52:91:a4:ec:c2:ce:37:
20:a3:79:74:90:58:8f:52:86:a7:77:1c:8e:96:99:da:60:ec:
cb:bd:0b:e3:73:09:36:b4:c6:d1:31:81:02:a7:71:3c:c7:a5:
6b:26:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:26 2026 by rpki-client