Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
File: ypHELfpq-8EeeO6d4ueF-KILUEM.mft (raw, json)
Hash identifier: S3I0L2Ch6A/zT0mCLU/PtfVLUP/zs8aQHPUrxF/GrqU=
Subject key identifier: A6:0B:A7:C7:7C:21:8E:29:1B:01:8F:4D:18:14:5D:A3:81:08:92:C2
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019F141D7FD2826E1BABD37EBE09F6D63AED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
Manifest number: 1073
Signing time: Mon 29 Jun 2026 16:01:45 +0000
Manifest this update: Mon 29 Jun 2026 16:01:45 +0000
Manifest next update: Tue 30 Jun 2026 16:01:45 +0000
Files and hashes: 1: N5RdOcKSZn2WXo-xhdOApmXM6X8.roa (hash: RQA+nWi3E8uaz/WCsQIw7b6rquiEkScjYVEe+LbnjAM=)
2: eG6HpNNeD2WlW2-WkUghRp2wqyY.roa (hash: nvEhBM2Rox5+ny1WoBOojQfN4JcL4da706fz8O30oPs=)
3: ypHELfpq-8EeeO6d4ueF-KILUEM.crl (hash: YXwO5Y2Hv7C+r8u3hiXXgyCp39wlE4CiiYdHUplkjcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 16:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1d:7f:d2:82:6e:1b:ab:d3:7e:be:09:f6:d6:3a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jun 29 16:01:45 2026 GMT
Not After : Jun 30 16:01:45 2026 GMT
Subject: CN=a60ba7c77c218e291b018f4d18145da3810892c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:32:9a:9b:5f:42:0d:00:70:a2:9f:71:4c:
51:91:14:77:f8:4e:43:bd:4a:84:74:24:55:e5:fa:
1b:37:63:f4:79:48:ae:93:66:c3:d9:66:60:32:a7:
9e:eb:19:a1:50:23:77:2c:8f:2a:2b:75:92:63:15:
9e:45:3b:aa:96:6e:5b:81:e7:08:76:4c:18:35:5c:
c6:c0:59:3f:41:24:ad:c0:ef:06:dd:56:c5:f8:96:
c3:08:3f:44:7e:df:b4:3a:25:21:d4:05:46:3e:7c:
f6:8f:9d:d1:eb:51:7f:9b:8d:1f:73:3e:bf:04:b3:
32:d9:f6:5c:9a:17:91:8d:18:b2:12:86:25:0a:77:
a5:95:15:65:9a:48:41:70:4d:d2:1c:13:85:b4:65:
d7:35:1a:86:b9:75:1a:cc:e5:81:5e:c7:0f:53:82:
18:a7:b4:af:e7:e4:59:9b:db:e5:8e:15:91:64:da:
ac:e9:e6:ba:77:b4:e7:3c:3e:e2:20:37:ad:6b:36:
e6:0e:80:ad:a5:cb:2e:25:db:80:d2:b7:f1:5e:a2:
27:99:05:a6:e3:4f:7e:c8:0d:29:aa:69:aa:34:17:
b3:c2:5e:15:91:51:21:23:f7:ff:a1:a1:91:32:98:
08:4c:e4:e6:05:70:c8:71:8d:d8:60:f5:73:4a:6f:
29:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0B:A7:C7:7C:21:8E:29:1B:01:8F:4D:18:14:5D:A3:81:08:92:C2
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3a:2c:8c:8b:37:c6:46:98:2d:06:d2:bc:ce:fc:38:63:42:
c6:5c:77:39:67:a2:a8:3d:31:c0:2c:65:ce:99:7d:e2:8a:1b:
68:09:b4:ab:fe:53:52:b8:8c:04:75:ee:bb:79:ce:df:02:b3:
50:d2:9f:f8:52:a5:5b:fe:51:b3:18:c3:ea:44:a6:f2:e2:6a:
46:1b:b2:92:a9:24:2f:06:f0:75:9d:b7:c9:c6:74:d4:01:b8:
11:45:fd:db:dd:77:d8:73:f1:e6:eb:42:ab:4a:4a:93:19:f1:
9e:26:c3:40:52:6c:cd:e6:9d:a0:5e:57:11:86:56:b3:23:17:
21:c3:cc:98:20:ad:94:3b:9b:c7:26:51:03:9f:97:70:30:6a:
23:68:ca:c2:e1:e3:9e:33:d0:c6:cc:bb:64:36:04:70:9f:46:
8d:32:6b:11:a5:fb:81:2d:4c:fb:9e:96:8b:bd:6c:1d:87:a8:
05:dd:e5:98:8a:63:1c:64:30:ab:a9:69:e9:d3:1b:b8:8f:79:
17:a0:0a:ec:70:7d:16:d0:fe:cf:8b:a6:6a:5e:d0:bc:ef:1a:
b6:33:a8:1e:d9:6e:99:78:dc:e8:a3:9d:30:f5:cd:ab:d5:38:
13:34:16:13:cd:cc:f9:ac:56:db:7c:5e:fc:aa:e6:c6:4a:e9:
51:79:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 02:12:34 2026 by rpki-client