Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
File: YLeUkCpc09J4P8wqpLB5H3mld6I.mft (raw, json)
Hash identifier: 5yFaPLAHouTNTZitCJi1JRAyJ4hIu8e/swHCXkewsII=
Subject key identifier: CA:23:2B:94:45:8A:15:33:7E:EE:B9:A4:62:C8:26:55:BA:1F:C8:71
Authority key identifier: 60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
Certificate issuer: /CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Certificate serial: 019EB620BA5C00EDD1CC851EBFE11ABEB78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
Manifest number: 1900
Signing time: Thu 11 Jun 2026 10:00:58 +0000
Manifest this update: Thu 11 Jun 2026 10:00:58 +0000
Manifest next update: Fri 12 Jun 2026 10:00:58 +0000
Files and hashes: 1: EQx1wUCuiGcSybnkD5TgNdIBeuo.roa (hash: +Isu6bVHjGg3xsr/3cAHcDSJ6upAxfIWHFQwmfRPNOw=)
2: YLeUkCpc09J4P8wqpLB5H3mld6I.crl (hash: WvevXCcX9YE/wFB9xENz6URs+2aRGAQfEO1a1xO580A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:ba:5c:00:ed:d1:cc:85:1e:bf:e1:1a:be:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b794902a5cd3d2783fcc2aa4b0791f79a577a2
Validity
Not Before: Jun 11 10:00:58 2026 GMT
Not After : Jun 12 10:00:58 2026 GMT
Subject: CN=ca232b94458a15337eeeb9a462c82655ba1fc871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:82:38:ba:82:40:4f:76:bc:73:a1:ed:ea:
42:55:49:cf:44:9a:7c:2c:d5:74:87:4a:63:2b:aa:
82:df:e5:ec:64:99:cf:10:48:17:c4:d8:b0:8c:c8:
25:94:57:a4:40:46:8a:58:9f:1b:2d:89:1c:b3:4f:
e6:76:b4:ea:c8:62:64:4d:25:3a:f2:12:36:43:f2:
8c:05:b1:3a:69:79:54:ca:69:23:f4:03:08:6b:03:
ed:ae:7c:2e:2b:09:eb:e1:21:fd:5c:bc:ca:70:84:
46:48:2c:b3:ea:65:33:a6:d7:98:7d:ab:cc:48:5b:
9c:5e:dd:b1:e0:d7:57:59:05:bd:05:75:74:60:a7:
6c:b7:dc:d3:c9:a8:16:6e:54:71:15:7a:f4:ed:a5:
66:75:62:e9:1b:7e:6e:a9:91:dd:f6:1a:8e:f4:2d:
b2:72:11:e4:b0:40:97:13:ea:9b:55:c2:b6:89:e8:
93:a6:be:80:e4:e6:a5:59:02:bc:21:32:42:6d:b9:
96:3d:41:3e:d2:54:a9:05:44:73:82:e5:2a:f7:96:
5f:b9:0b:89:11:79:1f:6c:1f:2f:e2:7f:50:94:5b:
36:85:d6:83:52:1b:fb:fa:ac:07:e2:5e:b0:53:34:
71:4b:d4:7b:7f:7b:af:5a:de:f7:2c:88:a2:6a:22:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:23:2B:94:45:8A:15:33:7E:EE:B9:A4:62:C8:26:55:BA:1F:C8:71
X509v3 Authority Key Identifier:
keyid:60:B7:94:90:2A:5C:D3:D2:78:3F:CC:2A:A4:B0:79:1F:79:A5:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLeUkCpc09J4P8wqpLB5H3mld6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d71b2c-2140-4e6e-abc4-401477489302/1/YLeUkCpc09J4P8wqpLB5H3mld6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c8:f2:ae:71:de:16:66:f8:e2:aa:e2:c3:51:73:8f:a6:fb:
65:b8:50:36:7b:fe:74:cd:8d:9d:fa:7d:21:b7:db:0f:dc:d4:
43:63:64:32:3a:85:e8:bc:36:60:dd:07:ca:0c:d2:5d:4f:f1:
eb:31:e4:9b:6a:62:4c:2a:0c:16:3f:9f:5c:ee:6c:72:67:58:
62:ae:65:3e:18:db:6a:3b:fb:43:ef:5e:2a:85:95:4f:60:19:
0a:f4:a3:81:6c:c2:79:df:38:cb:d3:df:d7:fa:06:c0:e9:21:
89:03:fe:fb:e3:33:c3:1c:13:f4:17:c9:00:69:4c:02:b6:78:
ef:a7:97:37:0e:94:87:48:bb:22:66:3e:7d:83:48:9a:24:73:
28:30:d0:9d:c8:df:ce:12:b2:32:ea:90:6f:bb:75:ee:6a:41:
33:b9:68:33:e8:1c:e7:dc:07:1a:91:26:68:73:0c:f6:3a:59:
ba:c4:a5:06:3b:10:51:9e:41:2d:a4:f9:4b:3c:d5:44:11:e6:
e9:c0:9e:bc:5a:d7:31:f0:3c:ec:2c:ba:be:6a:09:63:8a:a7:
85:2d:dd:d8:a0:76:b3:62:1f:85:98:30:ef:df:5b:af:9e:21:
61:dc:7a:45:45:38:80:42:64:1c:a7:d5:bb:39:15:9f:f0:14:
54:2e:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:12:33 2026 by rpki-client