Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: eaG8+WvBINTgwgz0yEvvrdEEB+COlsLbOOprUYyGJKQ=
Subject key identifier: 2B:6F:15:44:EB:F0:E1:B6:AB:AA:5B:A8:34:9C:6C:B6:44:5A:15:29
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019E9CCE72C364CA7CE18275D9BCC254A512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 02FD
Signing time: Sat 06 Jun 2026 12:00:35 +0000
Manifest this update: Sat 06 Jun 2026 12:00:35 +0000
Manifest next update: Sun 07 Jun 2026 12:00:35 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: e6JwB0RoOH864ocOaspwMJoK0GcrrdWq0rXCl1owuFE=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:ce:72:c3:64:ca:7c:e1:82:75:d9:bc:c2:54:a5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Jun 6 12:00:35 2026 GMT
Not After : Jun 7 12:00:35 2026 GMT
Subject: CN=2b6f1544ebf0e1b6abaa5ba8349c6cb6445a1529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:a7:81:19:0b:c0:ba:2d:c9:a2:75:4e:d2:
f2:46:92:64:ce:e2:6a:f0:62:7a:4b:72:e9:11:f8:
05:e6:ad:70:1e:66:3a:45:7d:88:81:92:c3:96:3e:
51:0e:61:ec:5e:54:7c:cb:4e:23:0e:57:5b:91:90:
9d:eb:20:27:9e:69:49:c1:63:6d:90:51:65:ae:6e:
62:73:88:a6:70:13:30:19:da:40:94:52:ec:58:0a:
bc:0e:80:17:27:be:f4:a2:f7:28:4d:31:f3:94:de:
47:9e:95:00:4c:8b:2c:ba:3e:7f:d0:29:64:6c:cb:
73:d3:ed:a1:e8:d9:1e:54:d3:4a:d3:b1:df:7f:ed:
af:3b:d3:df:63:6b:1f:18:11:ec:d5:a6:6c:29:51:
32:ea:bd:48:91:1c:56:54:81:db:e9:08:a0:45:f9:
ad:09:c0:33:f1:65:a4:32:3c:47:19:24:5c:70:91:
52:b3:16:27:62:dc:29:ae:fa:7b:fe:1d:01:52:50:
3e:c5:0e:f3:95:68:ee:2b:70:b4:7a:65:43:01:4c:
3f:b1:c5:2d:d5:3c:e1:a1:2f:45:10:26:6b:4a:5c:
b4:29:eb:95:4a:c1:4d:f6:dc:98:7f:6b:fe:92:dd:
e8:98:ce:cc:4a:3d:41:0c:21:d6:46:e5:07:6b:12:
00:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6F:15:44:EB:F0:E1:B6:AB:AA:5B:A8:34:9C:6C:B6:44:5A:15:29
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:74:3b:49:98:50:70:42:bc:51:23:90:67:71:1f:59:ed:
47:9e:d4:8e:72:3b:6d:92:92:22:c9:35:98:71:4f:41:a6:a7:
02:9e:5f:91:52:6e:b7:b8:8c:73:41:83:ae:eb:df:98:76:ea:
c9:80:36:cc:cc:ff:c3:cd:4c:6d:3b:de:97:1f:6c:39:4c:62:
ba:04:4b:45:18:34:db:71:43:76:11:43:04:ba:84:04:0d:9b:
e3:32:37:72:68:70:71:56:e5:d0:99:4a:7c:ea:84:21:f4:c0:
80:45:bc:12:14:ff:df:21:a0:ca:31:27:28:e2:eb:7b:ee:81:
a1:e1:d2:56:64:b8:3f:6e:4d:e0:37:02:91:2c:cf:a2:7b:69:
d1:2b:79:04:91:44:73:29:69:de:9f:2d:05:74:15:76:10:45:
54:cf:ba:54:16:be:1e:f2:57:23:5e:cd:ed:d9:7a:0c:cb:44:
0e:9d:36:19:21:0a:ec:f7:a6:c0:e7:c8:6d:07:59:c4:a3:ae:
d8:d4:f1:72:68:ed:0a:43:f7:cd:31:d6:11:08:5f:97:51:cb:
2c:37:45:3c:74:25:91:37:83:ea:50:43:c3:7e:1c:8c:ee:6d:
4e:a2:6a:fc:ca:73:c3:f1:d9:4d:37:a7:21:a6:4d:22:a5:62:
6e:db:85:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:50:56 2026 by rpki-client