Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: 8mwwelmC7LxhlqVTNequ5OKvOX0vl16cpOAmrYR1HV4=
Subject key identifier: 4F:CE:5B:10:B3:AF:2A:2F:BC:86:C1:FF:07:C6:8A:FB:7B:0A:5B:B7
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 019F189E599A072CB070BA28EB1D90849715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 191A
Signing time: Tue 30 Jun 2026 13:00:58 +0000
Manifest this update: Tue 30 Jun 2026 13:00:58 +0000
Manifest next update: Wed 01 Jul 2026 13:00:58 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: oe8fVz9U8QtOn1cbHhujOO0iONIXxIkMNyt61rRUYDE=)
2: gI3uUzSnYf7Q7BZtYjFQ_fPF2OU.roa (hash: ydHk1WEPluuP+9CX+LPaHVAvbLA6LF+fubk2zBDCmt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:59:9a:07:2c:b0:70:ba:28:eb:1d:90:84:97:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Jun 30 13:00:58 2026 GMT
Not After : Jul 1 13:00:58 2026 GMT
Subject: CN=4fce5b10b3af2a2fbc86c1ff07c68afb7b0a5bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:49:1d:68:59:40:64:8f:56:4a:d3:a0:1b:
91:f5:53:53:0a:26:bb:ef:55:43:f1:b4:16:c5:fb:
22:f3:1f:42:9c:e8:e0:a9:14:68:62:bc:fe:f2:63:
24:f4:a2:40:01:d2:bf:99:37:bf:19:a9:6a:d7:b4:
b0:df:5b:12:6c:36:c0:98:50:2d:83:3c:b0:81:f8:
b3:34:d2:c8:84:18:e0:a0:9a:1b:fb:01:b6:ae:95:
b3:fe:ff:52:a8:da:af:8a:4c:a9:7d:07:2a:b4:c8:
c3:c7:80:b5:87:0c:51:05:2d:f2:f3:69:1a:d4:21:
a4:31:75:8e:a0:20:59:e4:6c:9d:57:bc:ac:9a:7c:
ae:47:e3:4f:ed:2e:a4:3a:a8:04:7a:db:d3:e0:56:
85:4e:c9:86:d4:c1:16:4d:98:65:de:c2:3e:c7:b3:
8b:9f:8b:39:15:79:aa:45:6d:d0:cf:1e:14:78:04:
eb:7f:0f:ab:95:46:89:5d:aa:5a:5e:a3:9b:0d:f7:
0f:bd:6b:b0:4f:e0:fd:fd:b4:22:d4:0a:40:39:5a:
c0:fd:e4:21:a0:c9:2e:75:f5:71:da:b3:c6:7f:3a:
ba:65:d1:b7:6d:86:3e:58:18:1d:91:00:3b:d5:59:
7a:b2:c6:53:16:00:89:6b:e7:c4:68:22:97:14:e1:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:5B:10:B3:AF:2A:2F:BC:86:C1:FF:07:C6:8A:FB:7B:0A:5B:B7
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d8:fa:b4:e6:a3:03:13:8e:fd:62:b3:4a:a9:24:5e:1e:85:
3f:51:c0:aa:4c:08:b6:9a:fa:ee:50:90:30:8c:d9:5f:76:62:
8f:96:d1:1c:1f:cc:1c:6e:4b:1b:47:dd:48:5f:d6:c5:fe:c2:
ef:93:c6:25:7a:81:74:3c:7e:16:0e:05:af:74:e3:09:92:3c:
e7:15:b0:99:4e:60:71:82:e0:18:3c:07:b8:ea:c2:46:56:16:
55:d7:9a:1e:2e:08:05:6e:43:f9:64:35:7b:02:fd:30:8c:a2:
34:8a:91:d0:6f:2c:8f:d4:a3:6e:cc:df:60:f9:d3:36:e8:29:
f8:93:44:a8:31:3c:e4:1d:eb:53:86:79:8c:9f:92:1c:56:48:
a0:52:18:11:99:5e:9c:fa:0c:10:44:28:02:77:ec:59:7a:a3:
40:bd:e9:9d:96:a8:b2:f1:51:fc:e9:ca:d4:25:94:b5:41:46:
bd:73:41:0e:34:48:8b:e3:24:84:32:fc:a7:36:89:92:85:80:
db:37:e2:b9:6c:ef:78:c6:39:6b:66:c9:a5:18:4b:6d:10:f6:
d0:0e:4e:0d:ab:27:96:16:4a:73:30:73:04:d3:96:05:50:37:
fe:7e:df:6b:0a:1d:f1:49:bd:89:dc:ba:9a:25:0a:71:ee:2d:
d2:0d:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:21 2026 by rpki-client