
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: i9RBtEy3pNUg0A+MitEYnLcLGY+gfLw3L7lKQ35shVc=
Subject key identifier: 6A:EE:3F:9C:5B:D7:19:09:19:F9:13:1D:B9:07:06:51:1C:4B:18:96
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 019EB80E7E301CC9C36776E4739BE420ACCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 19:00:17 +0000
Manifest this update: Thu 11 Jun 2026 19:00:17 +0000
Manifest next update: Fri 12 Jun 2026 19:00:17 +0000
Files and hashes: 1: 1-Npj9uH2lNWYpla7MTqgqwt83iQ.roa (hash: JQmankrBVBlqdCQ8Vwvu+tFNWtJX5/kU02hONf99fCo=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: VEOcPhExclTJqUO0Sj7lyFiVhjz7TLV6GcmdKh3xztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:7e:30:1c:c9:c3:67:76:e4:73:9b:e4:20:ac:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: Jun 11 19:00:17 2026 GMT
Not After : Jun 12 19:00:17 2026 GMT
Subject: CN=6aee3f9c5bd7190919f9131db90706511c4b1896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:35:e1:77:c5:b4:f3:0c:2c:ff:aa:3b:ec:
00:e4:36:2a:a4:41:c9:5a:55:91:85:97:11:b3:79:
74:33:99:4c:2e:34:f0:a0:7f:cb:ce:64:c8:02:d1:
f1:33:05:5d:8c:01:62:7a:74:be:f5:c4:2e:33:58:
3c:bd:a4:e1:2b:c9:ea:96:fe:06:be:cb:5e:c0:f8:
55:74:0e:31:39:b5:cf:90:11:0c:95:25:11:fc:97:
d2:82:54:68:5e:e2:4c:48:cf:51:87:21:45:7b:35:
fb:95:ac:d0:2e:96:98:f6:49:32:21:3b:c7:59:92:
40:3b:d4:28:03:91:47:48:60:cd:1d:64:91:aa:d5:
31:c8:b1:ed:19:a3:92:b1:fd:40:ba:d6:8d:f7:18:
7d:06:17:c0:90:29:c7:0a:3d:6f:99:f1:cf:6f:bb:
ad:a1:43:98:8d:68:e2:07:32:2a:b3:60:8d:cf:66:
bc:f8:61:0d:c2:ab:2d:62:cf:bf:5c:41:7a:e6:55:
18:a4:bf:fe:df:6b:a8:c4:ac:8e:23:06:2e:b9:37:
24:26:35:ac:ef:a7:61:44:e7:45:7b:51:f0:7e:8a:
a6:55:2d:74:31:6e:e9:f6:d2:0b:bc:41:f9:fc:a5:
15:c3:f9:84:f8:4b:74:1b:d6:76:81:85:65:d1:31:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:3F:9C:5B:D7:19:09:19:F9:13:1D:B9:07:06:51:1C:4B:18:96
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a8:04:fa:96:f8:c6:67:ad:09:2c:a7:39:fa:72:4e:92:1e:
e8:b4:0b:be:b8:d0:87:4e:26:25:2f:7e:93:37:5c:9b:f6:be:
b1:f3:e1:18:02:b6:6a:8e:a3:bd:69:57:94:e2:bf:34:ad:59:
96:4d:86:fe:c9:d7:5c:cf:34:83:b6:f2:50:29:16:29:af:d1:
f1:1e:88:e3:3c:e6:20:c8:14:09:63:d4:19:16:e1:c3:3b:79:
dc:03:2e:5d:ae:b4:20:77:ba:36:e6:6d:a5:f0:b7:54:60:e2:
83:11:dd:e8:ec:02:15:2f:e6:26:d5:ad:6d:24:5d:cc:e8:8b:
2a:2b:cd:53:b1:34:05:fc:b3:77:45:7b:7d:53:83:e9:ad:09:
7a:3a:3f:71:f3:ce:33:12:24:83:7b:6a:35:da:91:ba:76:68:
fd:ad:6f:9f:65:d4:86:14:be:97:5d:e9:7a:2c:dc:e0:32:95:
77:8f:fd:d8:fd:7d:a8:be:f6:1b:d6:b4:40:46:1a:81:e3:70:
fd:50:ed:0a:5d:1f:6c:ae:76:00:02:4d:1e:1c:61:28:23:19:
5f:6b:5f:38:1d:4d:96:9b:45:77:94:22:a6:b3:ee:9c:99:58:
87:d6:08:da:37:26:33:12:c4:97:b9:c8:67:78:3f:32:4f:7a:
2b:ea:46:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:04:39 2026 by rpki-client