Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: REGvIhXPtsO6enkqVgjs1Ly3lB29RyhM5crhiX/bY4M=
Subject key identifier: D2:72:CC:8E:74:CF:14:36:D5:EE:2A:3F:39:53:8C:3C:B9:8F:4E:9D
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019F190D0BA2F8B49DD82A1DBEFC59DCF359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 15:01:52 +0000
Manifest this update: Tue 30 Jun 2026 15:01:52 +0000
Manifest next update: Wed 01 Jul 2026 15:01:52 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: r+rdu/KDz7Qz9YxYHutYBUW7qVKy0tv+wGA3MVjRXFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0d:0b:a2:f8:b4:9d:d8:2a:1d:be:fc:59:dc:f3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Jun 30 15:01:52 2026 GMT
Not After : Jul 1 15:01:52 2026 GMT
Subject: CN=d272cc8e74cf1436d5ee2a3f39538c3cb98f4e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:9d:35:94:ba:37:8f:ea:56:74:7d:d6:04:
12:1f:32:df:c8:27:71:36:ff:e9:8b:cb:47:62:05:
5b:4d:f1:f7:b1:d0:31:db:3f:8b:04:f2:c6:e0:68:
e2:f4:57:fd:d2:cf:92:89:32:58:7a:f2:b8:95:ac:
8e:de:c6:18:bb:97:e9:f3:2c:5e:2a:c9:d1:21:db:
2c:31:53:bd:36:d3:a8:b2:11:ce:62:8d:25:53:29:
e2:70:7b:20:8e:75:81:30:91:52:cd:e1:7e:8e:fd:
bb:60:1d:9d:8e:38:b4:4f:70:af:27:f1:48:b6:60:
98:5e:3b:fc:17:64:65:d1:a9:27:27:dc:dc:df:be:
f9:27:18:e2:30:65:40:a5:6f:10:81:9e:1a:8c:9c:
50:02:ef:14:f7:36:6e:d7:3e:2b:ee:34:01:5e:ca:
60:23:45:d4:ec:86:a3:06:cf:6e:ca:9b:fc:db:fe:
bc:99:67:b2:77:46:31:f1:f1:30:94:ef:62:28:a9:
e5:84:90:fb:8f:53:ea:96:9e:d7:73:67:4a:25:32:
c7:23:1d:5e:23:f1:44:e3:47:6c:90:82:e0:66:9e:
86:3d:5e:0b:69:18:46:22:1a:fc:ae:3d:1d:90:fd:
43:1c:90:c7:e0:2d:e8:fd:f4:53:75:e4:14:84:51:
31:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:72:CC:8E:74:CF:14:36:D5:EE:2A:3F:39:53:8C:3C:B9:8F:4E:9D
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0c:22:db:14:73:65:77:cc:ea:17:f4:56:c8:a0:43:e2:1a:
a0:34:4e:bb:72:2b:8e:12:f5:1a:e4:f0:84:5c:69:46:05:ed:
54:f9:04:e4:04:45:9a:b3:e9:0b:a9:8f:15:e4:1f:40:3c:ed:
1e:48:df:f7:bf:70:99:3c:6d:7c:a0:f0:b7:2d:49:6e:de:ab:
09:ff:d1:be:23:f5:fe:51:d6:5d:b8:01:2c:27:18:b1:bc:e7:
71:a6:d1:b1:fc:7d:22:7a:45:ab:6d:5d:a1:70:43:79:b5:b2:
09:d2:57:34:0f:85:e0:f2:87:94:16:de:0c:2a:e2:98:ad:bf:
47:ab:b5:c5:09:9d:7d:7c:5a:cc:15:88:61:f8:a3:6b:cb:31:
c6:15:0e:bd:a3:25:8b:26:60:a6:bc:c2:11:67:5c:22:7f:78:
da:fd:f3:21:93:61:b8:e5:d5:ff:db:94:da:2b:ed:dd:aa:f1:
40:e1:27:ee:8c:71:c5:8f:05:bd:0a:6a:cc:8e:51:15:52:cf:
0f:af:2a:f5:93:64:62:c7:80:78:c8:6a:52:be:ac:f4:fc:c2:
a3:f7:78:93:52:42:9c:7b:1a:8f:ac:9b:b1:ba:2f:44:8b:9d:
bc:89:03:bc:1a:81:71:fe:6d:df:38:25:22:8a:b8:3f:87:bc:
c0:e2:c5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:20 2026 by rpki-client