Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
File: ygAblIWVvOJJE_gRr_cePM5F1lY.mft (raw, json)
Hash identifier: XJLZY9GVKi81Bibxa0BIs6u2CxNxlYkmB6CCJHPaQVo=
Subject key identifier: 87:88:B2:59:6B:08:F9:C8:9F:C5:A3:39:C1:E8:9E:70:41:AC:10:2B
Authority key identifier: CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
Certificate issuer: /CN=ca001b948595bce24913f811aff71e3cce45d656
Certificate serial: 019F11F7754A4D4568E5159832C61F5BF37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 06:00:57 +0000
Manifest this update: Mon 29 Jun 2026 06:00:57 +0000
Manifest next update: Tue 30 Jun 2026 06:00:57 +0000
Files and hashes: 1: _xsLd4qUBjb6_7VD2WkixJfaVoY.roa (hash: nohQUdIFn7a7lR0P0bYRkbo26wNDU405wKs7TmIgPaA=)
2: jyhNKA-sqNdbKhKjDCM2oFmxAKA.asa (hash: +kK89jyXB9T4Lltl2vWeU7yjctVLp1sfe0s6KqTiyYE=)
3: ygAblIWVvOJJE_gRr_cePM5F1lY.crl (hash: ONBSfRuN0zRtBGq1ZIBw0Ba/L/wSBR7nX+vV3++n+EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:75:4a:4d:45:68:e5:15:98:32:c6:1f:5b:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca001b948595bce24913f811aff71e3cce45d656
Validity
Not Before: Jun 29 06:00:57 2026 GMT
Not After : Jun 30 06:00:57 2026 GMT
Subject: CN=8788b2596b08f9c89fc5a339c1e89e7041ac102b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4e:03:c5:3d:22:49:91:32:c9:10:1c:5e:ce:
c2:bc:78:38:52:94:a9:22:e8:a7:c7:a8:06:c5:d0:
d5:79:25:73:97:af:cd:9d:3a:61:7a:a5:88:49:f2:
ed:07:e0:84:73:07:54:38:01:02:03:ab:2a:ae:87:
95:40:c6:86:6f:de:c1:1a:21:4d:d9:91:a8:be:f1:
88:39:75:63:19:08:5c:99:3a:70:21:18:40:21:70:
bb:bd:bf:90:b7:b9:f6:32:2e:f6:d6:51:6c:06:f9:
d2:f7:9f:ce:22:52:f7:31:10:a1:ac:ba:53:61:bc:
1f:46:8d:79:20:34:24:0b:96:24:52:1c:8b:df:3c:
59:bd:b3:92:c2:b1:10:47:11:67:ca:5e:6b:76:12:
84:9e:fc:76:40:58:bd:94:7e:88:dd:4a:89:ed:ad:
48:69:7a:8e:af:b3:4c:a1:51:07:a9:9d:f5:9d:3e:
63:37:91:65:dd:91:d3:cc:fd:74:1b:99:e5:0a:65:
04:42:17:8e:1e:ed:b6:70:84:8e:ed:65:e3:d9:d7:
1c:65:3a:cf:eb:f4:1c:c6:6c:37:78:46:8f:a7:67:
21:6b:08:d3:6c:fc:7d:7d:1f:cd:44:44:9f:3c:bf:
b5:37:e7:b5:76:93:11:12:e6:1a:bc:20:3f:d1:0d:
a6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:88:B2:59:6B:08:F9:C8:9F:C5:A3:39:C1:E8:9E:70:41:AC:10:2B
X509v3 Authority Key Identifier:
keyid:CA:00:1B:94:85:95:BC:E2:49:13:F8:11:AF:F7:1E:3C:CE:45:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygAblIWVvOJJE_gRr_cePM5F1lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ffd4ca-e51e-447b-bcd2-cfc6aa016669/1/ygAblIWVvOJJE_gRr_cePM5F1lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:49:61:d9:bc:62:ee:dc:8a:b0:1c:fc:6e:1b:79:1b:78:14:
a5:c6:60:55:5f:62:3a:fb:c2:0f:e9:b1:6b:52:8d:e7:0a:35:
77:f3:04:b7:1d:36:14:bb:e8:2c:fe:f6:d8:e9:22:88:b8:5f:
ca:47:32:5e:05:2f:bb:78:5f:c0:60:e5:1c:c9:f6:f9:88:ea:
21:d8:04:b4:d6:3b:44:95:eb:0a:a4:b1:db:c2:09:20:85:e8:
56:ab:69:cb:7e:db:d3:48:0d:56:dc:e9:f2:e7:99:2e:23:42:
42:e8:5c:7e:df:51:cf:04:5f:c1:df:21:27:2b:d9:40:6e:7f:
fa:44:e8:20:0b:61:d1:3f:df:31:40:f4:c5:5a:c6:2a:45:4d:
24:19:94:28:ac:4e:58:f9:74:3c:e5:49:7e:01:29:70:c9:31:
4a:6b:c8:79:81:f0:98:08:63:36:38:6d:74:62:86:a8:e8:a5:
67:ea:8a:a1:48:df:43:2c:a2:86:08:b1:8d:36:c5:a4:22:c7:
e3:c2:63:db:23:5e:08:81:74:70:7f:16:c5:38:0c:c5:e3:80:
e5:7d:a5:4b:1b:46:44:02:67:d8:9c:20:02:b8:b3:a9:94:32:
fd:e5:ee:4b:ba:3c:b6:e9:aa:1b:49:6a:9c:24:41:08:f7:ad:
05:99:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:36 2026 by rpki-client