Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
File: YzkukpMXrmveCKWjuYorcB3biTo.mft (raw, json)
Hash identifier: V5xFPyQkaL2sKEFijF3w+4Xz/Z01Y3l/vbn1VwQvp2o=
Subject key identifier: B8:78:7D:A1:7A:2C:9D:6E:E0:09:C2:FB:12:12:84:8A:20:91:D9:C0
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 019EDAD2A6A9897BB364A89E40737064160F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
Manifest number: 07E6
Signing time: Thu 18 Jun 2026 13:01:38 +0000
Manifest this update: Thu 18 Jun 2026 13:01:38 +0000
Manifest next update: Fri 19 Jun 2026 13:01:38 +0000
Files and hashes: 1: 6sPueaU-Xz-iNYE6n6z1UIYXbPs.roa (hash: pjL7PLIGwLTNOBt+seTt/W2jPyX7Bk12lzulixeL94A=)
2: Ag9N_F37RcuQM8A4wSEwNzlbKjQ.roa (hash: 2K+D9bxizH0sqWU2qEMlwlkxQrgykxO7hyEi+m+gV4g=)
3: MjYgj5PkJtwB52FzuT0YsILbMY0.roa (hash: Indk9YkEk2hK3dLWnIDlZYz40E8hqE2V87I+wxoCcUk=)
4: YzkukpMXrmveCKWjuYorcB3biTo.crl (hash: Ljolljk2x+iGYkAvjmRNG37Zgvhj7BKIFWgLntOhVv8=)
5: aAyjGidCRd4HZ3z28s7kHfI3sFQ.roa (hash: yyghszcohtM5Wk9rUOZWwch/Wn48BU9LOtNcV0EZHsc=)
6: avi7DMJKeOctm2dYd02bLrCit3I.roa (hash: nFZFKEEyrubZa1X0U5AMhYHfVMMCE2ecKi32d2MPqUU=)
7: haQRwP2dzsg-sHVyLxYX0ft7Uk8.roa (hash: E+J4U5Y2xIVaeCaY8cTdAkE1+HOCrIQ4nNQKMPeb/WA=)
8: uSGmmmaLtoe3eUHigIrN47aVHko.roa (hash: tjzYIHWpoG3yiW/4rVWqjKVzthPOwUg7TejbjmApHRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:d2:a6:a9:89:7b:b3:64:a8:9e:40:73:70:64:16:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Jun 18 13:01:38 2026 GMT
Not After : Jun 19 13:01:38 2026 GMT
Subject: CN=b8787da17a2c9d6ee009c2fb1212848a2091d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:85:eb:2c:97:aa:ce:6f:ff:4f:7d:0d:47:
9d:2c:13:1d:35:78:9a:68:c2:72:bd:48:21:d3:34:
2a:3e:75:f6:c1:35:e5:d1:2b:54:20:fb:87:d7:38:
50:ea:e8:1e:69:5f:d0:32:d4:92:5f:b4:58:67:5d:
fb:d6:55:7b:1e:71:fd:a4:7f:79:84:60:db:6f:5b:
6b:a8:6a:25:5e:16:d4:e5:c4:1c:f1:7b:2d:02:e4:
70:68:3e:e4:e8:2d:e5:f7:e9:bc:3c:7a:04:5d:cb:
cd:e7:38:67:b1:2a:1f:b4:78:37:7f:ac:db:2e:bb:
0e:d8:84:57:45:59:77:b3:ee:95:76:8f:8c:ae:51:
eb:be:88:73:74:52:ec:92:c7:79:98:9a:7b:c4:a2:
bd:1a:f2:92:0e:7a:83:dc:d5:45:3b:13:b4:54:54:
c5:f4:98:ee:e3:ea:5e:77:81:04:aa:51:52:24:e0:
71:b1:79:10:32:8a:90:77:77:3c:65:e4:c8:4d:6f:
b5:7e:cf:50:42:61:5e:77:34:cd:d5:50:05:94:0b:
bb:86:b7:2d:7c:7d:25:b7:f1:69:b4:43:f0:ce:0e:
f3:b6:6d:cd:bb:61:1b:22:09:13:a6:aa:28:39:ec:
35:80:78:56:24:1a:0d:d0:f8:cb:50:24:df:61:d8:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:7D:A1:7A:2C:9D:6E:E0:09:C2:FB:12:12:84:8A:20:91:D9:C0
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:af:d3:57:a3:10:b5:07:ff:3c:09:2d:00:ed:38:90:9f:3b:
42:61:22:8f:fc:6d:7c:e9:57:ce:13:b1:df:ad:93:47:9b:e4:
29:87:5b:44:4f:67:b0:c0:15:64:5d:a2:a9:6b:ff:82:d6:e3:
76:7c:2b:37:ac:df:49:89:6c:10:be:8f:b8:70:ec:5d:15:3f:
57:31:fb:2f:1d:8d:ae:e7:89:50:b1:a5:f4:5a:cf:be:02:b6:
85:fa:af:d2:3a:4d:c7:d8:d2:0f:aa:9c:1d:07:bb:dc:42:24:
fc:82:d3:61:f9:84:a6:bf:fa:c9:6d:b3:98:26:96:af:d5:62:
8f:cb:99:e0:75:b8:2d:90:ea:f5:3f:38:87:66:30:49:61:07:
b4:fc:cb:3f:67:3d:ce:15:5f:3b:b5:44:a8:5d:2f:83:db:18:
45:a1:70:98:85:cc:8f:17:49:4d:0c:17:bd:0b:b7:93:a0:f3:
b4:31:9c:63:3b:df:c3:51:7a:2d:dd:cf:96:6d:65:7a:c6:41:
1d:c6:0e:24:32:e0:26:05:48:7c:a7:78:37:90:39:aa:7d:e4:
16:08:7b:ed:3b:de:ff:67:ed:a7:74:f2:e1:0a:5e:60:3b:73:
d1:ed:8a:3a:4a:7d:ff:f7:10:b1:5b:c9:0b:eb:71:c3:68:57:
d6:8a:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 18:53:16 2026 by rpki-client