Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
File: YjUmrZ--xXT6TsPZuttUM_2qyns.mft (raw, json)
Hash identifier: ldceweUu0JwO6jdH3beIA02M48NUgjvr3ldqkZ6eGLQ=
Subject key identifier: 04:6D:12:8E:51:C2:03:A5:D0:03:25:3B:FE:29:94:AF:BD:91:BE:C6
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019F10E578EAAE8CF005A287920A836D4C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
Manifest number: 0F9E
Signing time: Mon 29 Jun 2026 01:01:41 +0000
Manifest this update: Mon 29 Jun 2026 01:01:41 +0000
Manifest next update: Tue 30 Jun 2026 01:01:41 +0000
Files and hashes: 1: 4Mc33bIPqXNt0WBKTY6IWbhZhyI.roa (hash: 0CyjN4fDt2gePEzz6GNI+6v2hHdu94zd3doXA9mCmrY=)
2: E7S8kk0v-3rKEWlslioybHa5U2o.asa (hash: CrfGOpfT92BFeNnmG2NLzbIsZjJeDSaj2z6bEyCVnBE=)
3: P5w8UdbfAfDa1DxOi4VrhWTzLpM.roa (hash: +0DQfwomOYLD75ppkH2FpMEhDzxTGpHuszvhO6Ri7kw=)
4: YjUmrZ--xXT6TsPZuttUM_2qyns.crl (hash: 9sDPquO742U6sSudlBurssYMr2ijfY4ox2HZOLKG7h8=)
5: YrZcQqizcm-6Ws7265yR5ro3QoE.asa (hash: MFAOo3Xix00XFxAQiqGQoGajsrjp1l0fhfv38HvzhSI=)
6: fAgTSS_ONStFnLvEGPMgmGZBmpo.asa (hash: TOVMYJAfL34na7IHXLihlNeKoxMB/uFVliwHd1D3Uzc=)
7: i2ZN82VS7VSqjYAHCBTpFBgLiEo.roa (hash: gw1xxGQ0BqeQr6XFI4+gKsjUN/m1I0WJsAj9BQrH0uA=)
8: uq7KjFfupPB_i8cccfycTh05AaQ.roa (hash: q7ZkYvBa6WisIOhSf12hByjNMV7uSrIgT5csQL8UbvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:78:ea:ae:8c:f0:05:a2:87:92:0a:83:6d:4c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Jun 29 01:01:41 2026 GMT
Not After : Jun 30 01:01:41 2026 GMT
Subject: CN=046d128e51c203a5d003253bfe2994afbd91bec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:93:c2:43:07:25:63:ed:57:a2:a9:ab:bc:
e8:08:cc:a6:63:37:e3:71:c8:0d:b6:e3:63:9e:35:
34:71:ba:34:85:ba:f6:5a:4e:0d:07:96:33:05:6f:
fe:47:e9:6b:82:fb:1f:d2:fb:0a:a7:b4:91:44:15:
37:67:4a:57:e7:ce:ae:fd:6b:80:67:f2:3d:0d:86:
a2:25:6b:9c:52:79:95:32:e6:9e:71:00:53:1f:87:
79:ae:e9:c3:a5:b4:07:6f:48:c4:5e:99:44:83:f1:
2d:62:a4:cd:13:df:18:8b:57:7f:ff:37:c5:d4:5d:
5e:c5:53:d6:45:e0:c5:f9:81:f2:ff:3f:37:5c:47:
32:2b:7c:45:4b:06:5b:fe:5b:ca:e0:5d:e8:94:64:
e9:67:60:7d:0b:47:40:f7:b2:72:a0:47:fd:27:96:
2c:5b:19:a3:bb:9f:ba:52:c7:94:ad:68:78:a7:e4:
25:f3:77:41:43:10:f0:d4:90:0e:c8:de:38:c4:8c:
ce:a0:ea:51:5c:9c:86:e6:f2:44:cd:e1:1c:91:38:
41:5e:a5:07:0a:40:cf:46:2a:37:4f:72:ad:44:05:
98:aa:78:ca:d2:00:ab:48:8c:65:3a:53:cd:04:3c:
55:22:e9:1c:d0:c9:9e:b0:fe:b5:c3:44:aa:64:13:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6D:12:8E:51:C2:03:A5:D0:03:25:3B:FE:29:94:AF:BD:91:BE:C6
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c5:f5:72:e6:02:c9:e3:62:b3:ad:86:33:76:f8:73:72:4c:
4e:8c:ed:38:5f:3e:52:11:a4:ea:fc:98:e8:fb:04:7d:8e:28:
24:a1:d0:d1:ad:78:74:63:c7:70:61:a2:d7:3b:7e:bc:8e:27:
22:7b:4a:fa:6c:7f:07:b8:69:d6:f1:86:aa:1e:b3:c3:ae:e7:
70:e6:7a:d0:45:88:be:49:b1:1c:ce:ae:68:b4:c8:8e:c7:47:
de:e8:d3:8c:66:cb:9a:f0:25:cc:01:89:59:f7:6f:b9:50:7b:
8d:fb:0a:b6:64:b4:7d:93:45:b9:64:e5:29:49:5b:3b:69:38:
f3:d7:3c:61:5f:bb:73:24:1e:7e:a3:7e:1f:04:7c:48:27:47:
8c:39:02:66:4c:57:c5:a9:0e:c4:5c:f0:84:0f:0d:74:65:7e:
4f:80:4e:13:6c:22:7e:68:f2:a4:15:1f:87:38:e1:37:78:22:
43:92:b7:0a:e6:fc:83:d4:6b:62:ec:e9:66:08:37:d1:5b:9d:
81:47:22:3b:cb:4a:e0:79:33:58:b3:eb:2d:d0:dc:f2:57:3f:
a2:23:d1:90:a1:c9:2c:67:99:34:ec:da:32:11:74:41:f0:bb:
e1:50:10:16:36:3d:23:ae:8f:ae:27:c4:a6:63:9b:c7:53:b3:
06:63:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:26 2026 by rpki-client