Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
File: YGNeBMNML3ge6YChZR_2blEyvEQ.mft (raw, json)
Hash identifier: B9sS0nIR+zEe0W7SA5/EAa49bJibP629JxcjPPTZDR0=
Subject key identifier: 3F:F1:5D:4E:29:97:57:A7:0C:8D:9B:CD:01:7F:DB:0A:CE:16:D8:27
Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Certificate serial: 019F152FAC7E0E4E502592F1A41784D9315B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
Manifest number: 117D
Signing time: Mon 29 Jun 2026 21:01:13 +0000
Manifest this update: Mon 29 Jun 2026 21:01:13 +0000
Manifest next update: Tue 30 Jun 2026 21:01:13 +0000
Files and hashes: 1: YGNeBMNML3ge6YChZR_2blEyvEQ.crl (hash: 0CrsTeOYkeRLMtKypyJlIY/P7/28GLrUKX3aFPU2hBs=)
2: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (hash: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:2f:ac:7e:0e:4e:50:25:92:f1:a4:17:84:d9:31:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44
Validity
Not Before: Jun 29 21:01:13 2026 GMT
Not After : Jun 30 21:01:13 2026 GMT
Subject: CN=3ff15d4e299757a70c8d9bcd017fdb0ace16d827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:fb:3e:ba:7d:27:9c:88:ee:c9:ac:a7:3c:
56:4a:34:26:c9:cb:54:15:0e:e0:2f:69:e7:75:47:
f4:20:7b:c6:b6:32:ef:96:48:e2:2e:b1:81:38:3f:
82:f4:d5:1b:a3:f6:51:9c:f4:37:f7:e9:6d:a5:49:
3f:fc:1b:1e:9b:62:05:c1:dc:92:fb:39:30:99:fb:
3e:ab:66:15:8d:40:41:0b:94:df:2c:bb:e4:f9:0a:
3e:e7:5a:44:32:fd:90:5f:02:a9:f5:61:84:69:d2:
61:17:80:5d:12:3e:69:26:cd:9a:db:f0:72:36:51:
d8:a0:d3:1b:b0:1e:9f:15:4c:b9:91:67:88:b3:d1:
c4:4d:44:8b:b6:b3:33:0b:76:f3:a0:a1:4d:6e:19:
38:2e:96:f8:19:6a:e4:70:90:fb:b4:61:81:c1:8d:
52:60:b7:e4:6f:b9:e6:7f:ba:9b:20:01:0e:6b:35:
fb:9e:2e:8a:8b:b4:ee:3a:97:8b:2f:a5:21:63:be:
4d:57:af:d8:11:39:0a:5e:6c:4f:2c:a5:47:ce:f3:
40:65:a9:d6:6a:4c:a2:d2:c2:f6:96:a7:48:e3:d8:
6d:c6:41:19:5e:81:04:49:48:e8:82:94:7e:45:ce:
64:ac:2d:7d:bf:ce:5e:dd:c5:59:7b:72:ef:a0:fd:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F1:5D:4E:29:97:57:A7:0C:8D:9B:CD:01:7F:DB:0A:CE:16:D8:27
X509v3 Authority Key Identifier:
keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:77:19:76:4d:bf:ef:c9:f8:1b:2d:b6:7d:95:36:c8:55:e2:
8c:ed:98:64:1f:90:58:52:de:91:1d:7d:ed:af:db:04:ab:82:
bb:4c:7d:92:78:1e:58:52:2e:15:eb:4c:c1:3a:08:75:9d:56:
2c:8e:1e:47:82:50:df:c5:8c:f0:15:bc:43:6d:b5:2f:5d:d7:
94:67:be:de:91:a5:dd:89:c2:62:e2:df:ab:2d:49:75:f4:fc:
b1:57:47:6b:ce:bc:11:21:1f:13:08:b9:6f:e9:2f:bb:f5:d0:
a0:b0:0a:3d:5e:21:41:db:76:2b:2f:83:f9:ad:6d:58:0e:15:
91:79:e0:12:56:87:5c:26:83:df:e2:59:32:91:9b:b1:63:b0:
61:7e:ba:e0:49:d7:96:c7:58:28:f7:f8:c7:be:bb:e1:34:8b:
2a:94:3b:5a:f2:a0:b2:60:58:ce:30:da:0f:09:c2:4c:c0:b1:
47:a8:22:bb:b3:7e:99:bc:6b:0e:2a:29:87:a2:dc:b7:48:69:
2f:9f:80:26:a2:56:cb:97:d2:8d:3d:37:9f:9e:4f:00:f1:8d:
7f:e0:c5:17:db:5b:70:34:e7:46:2b:af:38:5a:7f:9a:13:84:
f9:92:fa:b2:25:56:9f:8c:de:fc:9e:bc:c0:b2:8b:d9:d6:a8:
75:30:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 04:11:46 2026 by rpki-client