Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
File: s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft (raw, json)
Hash identifier: 6vrrjzRRlN7xspR2eAC/rFmU6mrXprRAmAT6Prl4aPg=
Subject key identifier: 68:87:66:9E:45:A8:16:18:8F:B9:02:94:D7:52:E5:FB:EB:6C:B6:3D
Authority key identifier: B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
Certificate issuer: /CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Certificate serial: 019EFD957C44464C724724781976DAC24B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
Manifest number: 0C59
Signing time: Thu 25 Jun 2026 07:01:32 +0000
Manifest this update: Thu 25 Jun 2026 07:01:32 +0000
Manifest next update: Fri 26 Jun 2026 07:01:32 +0000
Files and hashes: 1: gLMBJkPbwcb-wlbRSTpyVXmPT60.roa (hash: /0bw3wAUn3OHzY+Itn4sRpP0s819h7VmmcBki8z1uGs=)
2: ivQFZHRMsvejyMfxqalTl6eZyTU.roa (hash: WA+GjW1Muidb5011AIHmuW7RcHYLCIXNLZLjL3+5V3I=)
3: s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl (hash: wOYWF6DjzG3iq02/ZJpNHfpDmFmpIU67FAy2DhHVlFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Jun 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:95:7c:44:46:4c:72:47:24:78:19:76:da:c2:4b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3e60d38bb37794e72e87e6870d071f2a7dd3e57
Validity
Not Before: Jun 25 07:01:32 2026 GMT
Not After : Jun 26 07:01:32 2026 GMT
Subject: CN=6887669e45a816188fb90294d752e5fbeb6cb63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:6b:8a:9a:d3:81:13:2e:7e:99:62:32:99:
f0:7d:35:14:dc:2e:b1:0c:98:48:a1:dc:eb:1b:58:
c7:95:cc:07:dc:5a:a7:e0:53:e5:c5:37:d8:78:b4:
5e:94:e3:74:d3:e3:1c:4f:79:3d:e0:b5:22:2d:09:
45:1e:5c:1b:2a:8f:ab:01:71:bc:90:63:7a:e5:a5:
65:cc:96:ea:6a:d4:da:2c:dd:09:ad:4b:c6:f1:47:
81:9b:3b:a3:ef:a2:62:8a:10:e5:ac:3c:2d:2c:44:
b2:71:f9:20:b9:5e:bf:ac:5c:e9:40:39:98:54:ac:
37:09:6f:e4:1b:7c:58:cf:a3:e2:22:5b:f7:42:94:
15:92:57:9d:0a:90:fa:5e:59:c8:ba:9f:63:57:6a:
82:3a:1b:70:67:83:ae:11:ee:ab:e5:f8:2a:30:1c:
1e:6c:83:37:2e:e4:d5:f6:5d:fe:18:35:92:ea:73:
5d:d5:1c:3c:01:6d:f6:ca:75:8d:25:37:2b:72:ea:
17:40:da:f1:a9:c1:f3:84:bc:82:11:71:18:33:09:
03:c3:2a:b1:eb:d2:8d:fd:43:9e:74:c7:3d:10:62:
a6:5b:24:e1:f1:a0:16:7f:17:99:c2:bc:cc:64:d1:
bd:56:4a:87:ff:1f:c2:e4:04:b8:26:54:14:02:f1:
05:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:66:9E:45:A8:16:18:8F:B9:02:94:D7:52:E5:FB:EB:6C:B6:3D
X509v3 Authority Key Identifier:
keyid:B3:E6:0D:38:BB:37:79:4E:72:E8:7E:68:70:D0:71:F2:A7:DD:3E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-YNOLs3eU5y6H5ocNBx8qfdPlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/7f765d-d07e-4a66-92a5-7a94c7c36217/1/s-YNOLs3eU5y6H5ocNBx8qfdPlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:14:23:4c:e9:f9:d4:3e:50:97:cc:de:6e:bd:be:cb:78:8e:
b3:04:45:5e:33:e3:6f:4b:29:44:27:b5:67:fc:e7:da:10:66:
c3:c0:f2:a4:2b:48:01:7a:b6:49:a9:ee:2a:7b:64:37:27:25:
29:36:d9:3d:c0:6e:98:ce:4f:62:17:c4:4e:90:fc:54:83:7c:
34:22:2d:87:1f:0b:8c:56:89:74:50:e5:79:dd:f6:8d:f7:16:
0e:82:28:05:a3:be:4a:46:d6:e0:5b:1b:e3:8a:3d:4a:dc:4b:
58:67:1c:ad:fc:85:4a:e6:fd:39:48:17:59:69:52:6e:0e:ce:
b1:95:a4:b2:98:e9:b3:7a:ce:3b:53:bc:ea:f1:38:24:7c:8c:
e1:3c:ae:c1:56:75:1f:80:dd:7f:e8:55:06:ef:c4:2f:70:77:
33:5f:43:5d:86:8a:e4:62:45:12:97:18:1b:21:61:dd:7c:dd:
dc:79:a8:ef:c3:b2:42:69:70:be:31:2b:3e:8d:65:1a:dc:22:
c1:84:77:0e:da:1a:09:25:87:66:90:3f:2a:ad:a0:1c:ac:4f:
fa:76:db:d9:ef:7f:dc:0c:a8:c1:17:5c:d2:e7:c2:9d:fe:dd:
67:96:25:ad:20:44:b7:bd:07:48:b7:11:35:2d:56:ce:86:de:
76:be:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 15:33:15 2026 by rpki-client