Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
File: YSQjU25R-U-r_FCs-UTXmKrPQD8.mft (raw, json)
Hash identifier: X2dGUGCmtoqUpBd+k95a1Rib7te73QEWRsmANIzxuPw=
Subject key identifier: 3A:4F:58:14:E8:93:2B:05:A7:F9:38:F4:99:4C:10:30:0D:78:C8:F8
Authority key identifier: 61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
Certificate issuer: /CN=612423536e51f94fabfc50acf944d798aacf403f
Certificate serial: 019EB80F758B0F469174E64F2EC7BBE1CA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 19:01:21 +0000
Manifest this update: Thu 11 Jun 2026 19:01:21 +0000
Manifest next update: Fri 12 Jun 2026 19:01:21 +0000
Files and hashes: 1: YSQjU25R-U-r_FCs-UTXmKrPQD8.crl (hash: H/Oz862tzPmUzI6eHVKqfZKYx5u68wzELPdmoFOyems=)
2: hXdgp8zgmG7JYs_k37tuaNt0law.roa (hash: XCDaAPor8tbWo85ZTNfTXsO+zViuoLRUnnO/NnA5uPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:75:8b:0f:46:91:74:e6:4f:2e:c7:bb:e1:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612423536e51f94fabfc50acf944d798aacf403f
Validity
Not Before: Jun 11 19:01:21 2026 GMT
Not After : Jun 12 19:01:21 2026 GMT
Subject: CN=3a4f5814e8932b05a7f938f4994c10300d78c8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:36:b4:97:b2:87:fb:5d:a3:e5:e5:bd:ca:
ab:0b:0f:9f:41:c2:52:4d:c6:29:57:ec:8f:50:72:
50:00:c4:f1:f7:42:fa:1c:1e:a7:3f:b7:d0:00:95:
c7:99:2d:af:0d:30:e6:bc:8a:16:7f:6f:92:f1:47:
94:34:7a:d3:28:d5:eb:61:19:f1:04:6a:59:6b:1b:
6d:b0:bd:a6:54:00:a7:15:eb:4b:65:08:03:b1:10:
2f:04:33:86:a5:41:f0:04:a1:03:86:7d:d1:73:c7:
ce:99:fb:81:f3:d4:b4:45:c1:db:5c:83:0c:7c:e9:
6e:af:bd:f5:d7:a4:98:43:e5:67:fd:ac:78:0d:1d:
f0:55:60:51:68:bf:b2:6b:47:4d:10:ac:fa:c2:00:
24:a9:1e:08:23:1f:0d:29:a0:6d:aa:00:5f:f7:25:
ca:85:41:b7:43:47:6a:ab:fa:d9:91:ad:7c:0d:49:
67:74:fe:a0:89:fd:53:fa:0c:aa:7c:c8:04:35:82:
33:96:70:33:fc:54:45:dc:3b:ff:65:8a:31:7d:db:
71:78:46:8f:27:43:b4:86:1e:42:11:ff:e6:65:c2:
52:42:3f:4a:9b:bc:fe:58:ca:ba:ca:d2:71:ce:fb:
da:db:13:22:b9:4f:18:fe:01:01:c1:23:b9:6b:7f:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4F:58:14:E8:93:2B:05:A7:F9:38:F4:99:4C:10:30:0D:78:C8:F8
X509v3 Authority Key Identifier:
keyid:61:24:23:53:6E:51:F9:4F:AB:FC:50:AC:F9:44:D7:98:AA:CF:40:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSQjU25R-U-r_FCs-UTXmKrPQD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/7b0ec7-9848-4163-ac1b-7b04d3597378/1/YSQjU25R-U-r_FCs-UTXmKrPQD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f2:b9:01:55:b7:82:78:97:29:05:56:d4:58:04:73:08:47:
e1:6a:eb:ee:6c:65:7f:a7:8b:d0:70:f3:d6:04:4e:9d:a5:82:
b9:b7:47:41:26:9a:6c:1c:4b:d8:df:9a:15:1b:df:0e:e9:6c:
8f:61:03:d2:c4:a1:87:e0:7c:5c:61:9e:74:f0:8b:93:bb:17:
8c:af:c0:68:c7:8f:e6:6c:77:ce:57:20:0b:61:0e:6c:d8:4a:
ad:1c:7c:fb:0c:8f:f7:df:e7:55:27:09:c2:1b:19:8f:43:bc:
89:dd:57:28:0f:41:84:1a:b3:de:16:64:ce:fe:be:b4:9b:c2:
34:6f:85:d7:32:4c:de:8c:0a:3b:08:e6:93:c7:84:9b:e7:58:
f6:d4:1e:47:4a:d9:f8:16:dd:0c:eb:9b:19:94:9c:ac:e3:c5:
3a:04:bf:3a:e6:f1:02:7a:45:fc:43:95:fd:76:ce:3f:23:63:
d6:33:9f:84:9f:7e:0b:4e:f1:b2:c2:09:32:dc:2e:1e:62:01:
f6:8e:99:b1:c7:6d:ec:6a:fd:f0:37:00:43:04:d2:2a:6b:f7:
96:82:f4:a5:19:9b:5c:0b:f1:65:79:9c:5f:a0:62:60:ec:1f:
ce:27:21:07:33:93:a8:7f:21:52:95:1a:2a:a3:33:46:b0:81:
bc:5d:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:47:40 2026 by rpki-client