
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
File: YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft (raw, json)
Hash identifier: qkvuQvbPJifueAkKZFvVXlKiWzspGVOW/I+nJvF4I8s=
Subject key identifier: 64:22:92:B0:AA:24:59:D4:14:EC:3A:DA:3D:95:1E:41:7E:F4:17:D3
Authority key identifier: 60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
Certificate issuer: /CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Certificate serial: 019F0B50C3ED4A1A07631D60A84E4089DA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
Manifest number: 1980
Signing time: Sat 27 Jun 2026 23:01:10 +0000
Manifest this update: Sat 27 Jun 2026 23:01:10 +0000
Manifest next update: Sun 28 Jun 2026 23:01:10 +0000
Files and hashes: 1: YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl (hash: ZG7ltqiOJtMRn2iIQYdzKN0zWN4cjsaPNcuMEyqhbjs=)
2: gGpmcsWE1eZyNMee1NRlA1nhhvY.roa (hash: /R+1mDGIJPwiUjgMqzEayU7QgZR187J1ACp6m3yLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0b:50:c3:ed:4a:1a:07:63:1d:60:a8:4e:40:89:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60077f22c6428bc889b365b006cb5248d4bf61cf
Validity
Not Before: Jun 27 23:01:10 2026 GMT
Not After : Jun 28 23:01:10 2026 GMT
Subject: CN=642292b0aa2459d414ec3ada3d951e417ef417d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:83:53:b3:fb:e7:6c:72:4c:42:5e:d4:1d:
ff:a1:9c:4c:e4:16:60:9e:9d:4c:d1:bb:82:c5:a7:
b1:9e:3f:0d:80:a5:90:ae:91:3a:e3:a9:fe:7e:cd:
2d:19:f7:f4:31:29:96:f7:27:75:01:80:ed:fb:ac:
c1:a7:82:7b:d7:23:91:b3:46:9f:4a:98:31:2a:1a:
17:46:68:de:c3:e2:ce:f4:df:a7:07:63:3f:21:02:
ab:ed:93:59:4b:cc:11:0e:39:9f:fc:83:22:0d:63:
6d:ab:51:af:4c:04:79:b9:00:dd:a5:cf:05:c8:29:
e1:ee:9f:21:2c:2a:2b:1c:67:3b:cb:e5:97:30:93:
12:9b:b6:a6:db:a0:15:e6:78:f5:0b:3a:84:e2:ef:
23:dd:d9:a1:2b:0d:3a:b6:72:d9:cd:49:16:7a:35:
40:e4:0b:08:82:0c:81:6c:0f:08:0e:de:70:7d:5a:
6d:61:52:86:e5:22:a5:e3:03:bf:eb:38:a3:e0:24:
1b:49:4f:3d:eb:7c:a6:3d:66:6b:cc:d6:5e:87:15:
5c:0c:1f:9f:5b:46:9b:20:6d:1a:96:91:9e:e8:e0:
1a:38:84:2d:94:25:ab:78:24:07:07:90:35:ef:b7:
2a:08:f9:9a:6b:f4:fe:28:8a:f5:4e:7b:10:0a:5b:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:22:92:B0:AA:24:59:D4:14:EC:3A:DA:3D:95:1E:41:7E:F4:17:D3
X509v3 Authority Key Identifier:
keyid:60:07:7F:22:C6:42:8B:C8:89:B3:65:B0:06:CB:52:48:D4:BF:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAd_IsZCi8iJs2WwBstSSNS_Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/847ee0-ba2a-4fd2-89d7-87fe2e54ba79/1/YAd_IsZCi8iJs2WwBstSSNS_Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:90:47:d2:86:50:af:e9:56:58:f1:cb:f2:37:02:b3:59:11:
19:e1:9b:43:5c:e1:aa:cd:c3:d8:b3:82:85:e3:e9:d2:8b:c0:
c0:d6:8d:a0:58:b5:23:75:55:1c:69:1f:9d:3d:f2:d2:29:e8:
1e:15:90:7e:ff:31:b0:84:16:e0:55:7c:2c:33:f5:06:af:37:
31:b2:f9:34:a3:7f:62:1f:88:31:94:5e:4c:00:5c:de:e5:21:
3e:c9:12:f8:3d:34:be:d0:cd:42:8d:00:09:cc:41:ed:f0:ac:
ee:a3:a3:43:54:4a:fa:d1:91:e5:bf:20:2e:25:81:bd:ab:ec:
4a:9a:76:cc:ea:6f:bb:9d:08:12:4b:d7:3c:6d:a6:3f:14:29:
a2:f8:a0:19:53:d9:18:ef:69:18:56:12:71:bd:60:cd:83:66:
81:3d:ab:22:1a:b0:df:98:33:bf:07:74:b5:78:40:ab:df:26:
85:6d:12:46:71:40:57:e7:6a:b5:4e:b7:d2:52:a3:ed:4f:08:
d8:af:5c:8a:59:ea:63:67:a9:60:13:0d:f6:ec:c2:f4:d6:68:
d5:11:1f:8e:1a:35:f2:52:c5:21:87:29:d3:dd:61:aa:0d:6b:
5b:b0:e9:9f:44:74:14:d7:58:e6:04:6b:a9:4b:cc:03:7a:5f:
7d:e4:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 07:47:40 2026 by rpki-client