
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
File: yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft (raw, json)
Hash identifier: 1XFemoJ7pGLC5gfBEwuVBy+/dXUyE2vjkrdP7WD6SFQ=
Subject key identifier: CE:D8:C6:2C:70:80:06:5D:28:68:AE:29:3F:78:39:60:B3:A8:05:70
Authority key identifier: CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
Certificate issuer: /CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Certificate serial: 019EB98F8B9DDEAA955C036AFFF6A0780F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 02:00:52 +0000
Manifest this update: Fri 12 Jun 2026 02:00:52 +0000
Manifest next update: Sat 13 Jun 2026 02:00:52 +0000
Files and hashes: 1: 7o6kpttFmNc2Q_Fb7CY0cMCx0Bw.roa (hash: ERfj8NBPhWtC0lRKzuI7aqZB4Hd5ZjiGJHFCXPuiqqo=)
2: yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl (hash: ZUDd+ey4pRqwB2J/CRvmBbdmiTmczZymRBqRRI6SKWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:8b:9d:de:aa:95:5c:03:6a:ff:f6:a0:78:0f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2a49fba149e1a1b13139bd01601c86cd2958a5
Validity
Not Before: Jun 12 02:00:52 2026 GMT
Not After : Jun 13 02:00:52 2026 GMT
Subject: CN=ced8c62c7080065d2868ae293f783960b3a80570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ae:ef:70:8a:2e:b6:9e:b9:69:c7:10:5e:d3:
b0:22:28:be:f3:ed:ee:57:f8:41:9b:19:ee:ba:1d:
48:5d:bf:4c:7c:f3:62:cf:22:75:02:29:89:58:17:
f4:a5:0f:ef:40:54:60:4f:cc:d4:8e:c3:25:26:75:
b0:02:93:a6:fe:c7:43:3c:69:eb:c2:9a:f5:9e:54:
a7:7b:ad:2e:39:19:af:c2:46:f1:23:72:8a:2d:07:
94:d2:ad:01:71:85:00:c2:ba:e9:29:b9:5b:68:c4:
55:d7:2d:0f:2c:d0:aa:ba:dd:2c:b7:eb:3c:f0:d6:
c5:96:a5:54:02:f6:99:e7:11:89:68:21:5b:f1:ac:
4a:b7:36:f1:8c:d3:92:c1:6b:e8:08:f9:11:6f:77:
24:0e:04:32:28:94:98:22:79:76:3e:47:a3:e4:2a:
44:67:cd:56:77:e3:85:eb:02:58:99:8e:ec:ac:9e:
60:92:6c:0d:53:49:a1:16:1e:26:c3:84:5c:36:22:
5a:13:25:a1:f6:2a:93:fc:53:1c:26:45:e9:46:d2:
2b:f1:46:c3:97:70:93:86:5a:78:24:c8:42:23:81:
44:19:9d:63:b9:18:1b:66:89:a8:8d:13:50:ef:81:
bb:1a:c0:e3:f1:e8:fe:57:3f:a0:f7:81:91:f0:e6:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:C6:2C:70:80:06:5D:28:68:AE:29:3F:78:39:60:B3:A8:05:70
X509v3 Authority Key Identifier:
keyid:CB:2A:49:FB:A1:49:E1:A1:B1:31:39:BD:01:60:1C:86:CD:29:58:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yypJ-6FJ4aGxMTm9AWAchs0pWKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/91023c-2147-49b9-b267-62d4a1f1a50c/1/yypJ-6FJ4aGxMTm9AWAchs0pWKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:b7:12:e1:49:1b:f8:38:38:9b:24:ea:67:69:e7:36:78:
cf:1e:aa:01:e5:a3:2c:9a:21:fb:93:56:e7:3d:64:55:60:7b:
f8:53:3b:6d:ee:fd:3c:a1:a9:4b:de:73:a0:fc:56:09:31:d1:
f4:74:4c:a6:d5:88:bc:c2:cb:21:c7:46:51:23:c7:0c:4f:bc:
0d:54:34:f8:82:c8:61:40:8f:1c:e6:d2:ad:37:35:6a:dd:09:
f3:fc:64:ce:a5:ce:dd:00:1f:67:6f:88:a5:e2:9c:c3:23:8b:
df:54:c7:f7:cc:2a:ad:4c:d8:fd:03:83:15:26:e8:bb:d6:c7:
f0:6b:5d:33:92:84:d0:82:45:1f:93:9a:90:ad:a1:68:aa:ac:
ff:cb:97:df:05:ae:1d:aa:a1:c4:d3:69:49:4f:90:35:c7:20:
25:30:f9:c7:b8:9d:14:a7:85:41:91:15:88:07:72:60:bd:4c:
05:9b:62:ea:fe:95:41:d6:63:67:fe:87:23:1a:bd:2f:fe:31:
7a:f5:16:7a:3a:0c:77:07:d2:3b:7a:ec:76:57:3a:9c:e2:cb:
0d:24:d3:46:d5:74:ba:e1:37:9b:1a:c5:d1:92:2b:6b:32:7c:
ec:38:1e:42:e6:4e:80:63:f7:97:fb:18:2a:03:4b:30:bd:3d:
33:e6:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:48 2026 by rpki-client