Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
File: YT1iXtVQfkgOTUPcl45x6IHmIic.mft (raw, json)
Hash identifier: 9XCPDTLpgukC/789qqzSCioR1xDmGSV/AT6a/nnkBDQ=
Subject key identifier: BB:36:9B:72:20:C1:6A:6A:E9:08:E6:35:12:04:E8:4B:51:C4:5D:25
Authority key identifier: 61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
Certificate issuer: /CN=613d625ed5507e480e4d43dc978e71e881e62227
Certificate serial: 019F36AA68601AA6CEC54DD7A761667BF720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
Manifest number: 11
Signing time: Mon 06 Jul 2026 09:02:45 +0000
Manifest this update: Mon 06 Jul 2026 09:02:45 +0000
Manifest next update: Tue 07 Jul 2026 09:02:45 +0000
Files and hashes: 1: FL2UbXKyeZL1YiGrBFn3kVEsgxU.roa (hash: E+Ndns34wiS59u4o367M86KWyuekLi03oafxk6qO++c=)
2: YT1iXtVQfkgOTUPcl45x6IHmIic.crl (hash: p6XjcGzMiCFb+oeM9jcSNn5AfxR0UMrV3NEJnXZltbI=)
3: kSpW6w_RI8cHoJwPPES6uFJxrFs.roa (hash: PkH8DgRX6ZznesT2KjH8tRRwLjLMw49bu5CbwIvnoFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:68:60:1a:a6:ce:c5:4d:d7:a7:61:66:7b:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d625ed5507e480e4d43dc978e71e881e62227
Validity
Not Before: Jul 6 09:02:45 2026 GMT
Not After : Jul 7 09:02:45 2026 GMT
Subject: CN=bb369b7220c16a6ae908e6351204e84b51c45d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:6d:61:af:d5:0c:41:1a:55:ad:58:3b:ed:
77:44:e7:9a:37:34:90:4f:d9:c3:6a:10:e3:24:04:
39:08:08:f9:40:41:5f:1d:e2:a7:9b:65:b9:8b:bc:
de:9a:75:21:1d:c6:ec:ad:34:3e:76:ff:d7:eb:fb:
1c:e3:32:bf:29:e1:f0:de:4c:72:9b:39:c1:c1:c5:
66:e3:8f:37:2f:62:ba:48:21:34:a8:8c:98:e3:1b:
73:d5:0f:f2:5e:1e:81:85:cb:e9:9f:14:d6:f2:4d:
84:2b:9f:67:e5:19:f2:30:d1:e3:90:09:a5:3b:bc:
48:14:4f:82:6e:10:90:95:66:a3:27:d7:01:df:fe:
d8:87:29:9a:2b:92:0b:5b:32:74:e0:31:81:a0:9b:
8f:51:fa:3f:26:6f:0c:ad:65:59:bb:b0:bc:8c:1e:
03:af:b0:d1:88:91:fb:a3:a8:18:21:5a:d6:8e:0a:
22:0f:0d:30:c0:e8:bd:45:b9:be:07:45:91:f2:5c:
3a:43:d0:f7:10:d2:dd:42:82:cb:3b:1b:70:d9:ba:
fe:aa:90:90:25:f3:9e:bb:59:a5:9d:04:8e:70:5e:
ad:97:e5:5b:84:b9:c1:20:28:06:23:3b:4c:9b:2b:
99:12:d7:9c:af:75:1f:a1:01:21:11:9c:46:01:2b:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:36:9B:72:20:C1:6A:6A:E9:08:E6:35:12:04:E8:4B:51:C4:5D:25
X509v3 Authority Key Identifier:
keyid:61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:58:4e:ae:6b:bf:b1:2d:97:15:5f:60:c3:70:b5:3b:f4:ba:
50:ae:65:da:b2:88:a5:74:1b:9e:91:d3:c1:02:92:3b:2b:b1:
35:b8:09:e7:06:eb:ad:a5:95:0f:52:12:6e:e6:da:65:64:82:
73:13:ee:45:b9:71:1a:68:2e:b1:67:48:c4:d7:2b:4c:ac:f3:
fa:3a:30:ee:ba:21:e4:50:c9:22:27:fa:35:97:89:a1:d7:52:
40:5f:c1:26:05:ad:87:f5:e5:6d:ca:2b:a1:bb:46:69:ad:96:
7c:cf:6a:3d:56:2d:aa:d9:f1:ac:e5:bd:dd:6d:50:9d:3e:a1:
be:17:c8:8c:ce:a0:68:f0:a9:78:6a:51:9a:84:d4:3e:02:1c:
09:2b:ec:10:88:3d:ef:ca:f6:60:02:09:62:be:75:c2:c4:1f:
02:d4:7e:bc:54:ea:71:1a:c3:f8:3a:f5:00:d7:7f:11:b1:7c:
5e:5c:08:e5:49:37:f9:20:22:50:e0:64:76:fd:61:c2:ff:09:
96:00:a1:c8:7a:e3:d6:6f:9d:b6:83:b8:e0:91:b7:76:1a:3a:
bf:b5:bc:00:08:06:8e:e5:2f:12:fb:c2:4d:c3:86:53:54:c5:
a8:8b:c1:d9:88:38:c4:0f:61:90:a3:cb:1f:37:95:e1:ad:1e:
83:86:4e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:04:53 2026 by rpki-client