Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: CejVVUVHlOrUPRRRSEdm2XFPaYkjjSzm10MqyNMB1Bw=
Subject key identifier: 4F:63:99:D9:61:08:3E:85:7D:FD:7B:03:70:60:4B:DB:78:C0:2F:F7
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019F1152933F9953F6061C8A028F6E06927D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 02D7
Signing time: Mon 29 Jun 2026 03:00:51 +0000
Manifest this update: Mon 29 Jun 2026 03:00:51 +0000
Manifest next update: Tue 30 Jun 2026 03:00:51 +0000
Files and hashes: 1: 1-_NirjIbixf3IjujxY08hJ4sR0w.asa (hash: hVFgDzF+0WyJCjBVO7SZls0NW5esHMScirMPVBWG/Wk=)
2: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
3: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: Az4mMHVYGB7NJr70YKcYAm4TmYpEAg9NfXgFBPilFq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:93:3f:99:53:f6:06:1c:8a:02:8f:6e:06:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Jun 29 03:00:51 2026 GMT
Not After : Jun 30 03:00:51 2026 GMT
Subject: CN=4f6399d961083e857dfd7b0370604bdb78c02ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:48:bd:c8:5f:6c:6e:23:ea:dc:4c:09:31:
45:e6:34:35:7d:e6:57:a2:98:84:bf:29:ca:07:80:
3e:9d:27:33:63:07:2f:26:c6:89:b5:f6:f8:88:33:
84:a4:da:11:05:b0:2c:50:c6:81:b0:36:9e:1d:8b:
2a:de:fa:b9:60:a1:f2:1f:38:71:45:a9:9a:3e:e3:
9f:fa:41:05:da:2c:38:0f:18:87:a7:ba:83:37:a9:
df:b4:8a:ad:c4:56:34:ef:4a:cf:45:43:ca:d0:7a:
c7:43:6d:5d:27:a2:77:71:57:b7:ac:8e:26:bb:61:
34:90:cc:3f:d0:af:b2:d3:f3:a2:f0:79:6b:d7:5c:
a7:24:4a:12:65:79:ed:df:39:9b:c5:a4:53:cc:29:
50:32:5b:5e:3d:d2:6f:d8:13:63:c7:b1:30:6a:81:
8c:e1:78:7c:12:8f:7b:f6:90:1d:7b:4a:a1:84:29:
c1:e6:26:d2:f2:bd:fb:d4:da:6c:7b:7a:c3:84:d5:
ed:57:9a:8e:bf:ea:a6:c5:3c:1a:f1:af:29:6a:47:
71:d8:e4:65:d5:5f:d7:14:49:48:cb:8b:7e:e1:fd:
3b:ee:b6:08:bb:b5:9b:1f:5c:70:2a:63:4b:ca:c9:
23:a4:86:84:91:56:25:16:7f:8d:29:f6:f4:32:25:
04:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:63:99:D9:61:08:3E:85:7D:FD:7B:03:70:60:4B:DB:78:C0:2F:F7
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:54:fb:1c:e4:83:9d:1b:c8:9f:db:c5:eb:a1:79:e2:9a:85:
68:4b:67:56:c3:31:fa:a6:0c:ce:6f:a0:93:85:5b:70:d4:42:
d5:94:bd:15:04:cb:79:15:c0:03:36:59:5b:25:29:97:85:91:
43:e1:a6:98:31:ea:35:b7:48:97:d6:6c:53:2c:bb:f2:78:0f:
9b:8d:38:82:80:10:86:1b:94:70:8d:4e:ea:e7:58:dd:d9:19:
ad:d9:5f:0f:80:b6:eb:b1:b4:29:52:9c:98:b9:eb:eb:9d:ae:
d3:51:d3:66:7b:da:1e:54:30:6f:b5:7c:c5:9b:19:d0:8d:8b:
46:ae:12:77:6e:03:35:58:85:71:01:5e:81:7d:fb:78:2d:40:
4d:fa:8b:e6:b9:45:be:13:22:94:db:86:ae:60:c0:94:a1:2f:
04:46:70:10:20:90:21:5d:06:a6:de:73:ae:18:37:7e:f5:cb:
8a:c7:1a:e3:8e:a2:93:b7:ec:9e:54:b0:32:eb:5f:9b:e8:d4:
ba:61:85:df:f9:37:07:47:75:3d:86:c4:6a:64:74:3a:0f:76:
d8:15:c2:bf:86:ae:de:6c:4d:c3:aa:24:01:b3:a6:56:d4:15:
d7:b5:0a:46:c1:cf:11:bd:56:7f:91:dd:a8:cf:e4:25:9e:e3:
65:88:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:37 2026 by rpki-client