Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
File: YfvYiH2oRHExjYOISsAF8BtE_Uk.mft (raw, json)
Hash identifier: ly49Fjw0rB4SCvZNj4/bQiQZTXx3Nn8VmG7bxF7abnA=
Subject key identifier: A7:D9:B1:D4:6E:BC:92:27:5B:96:8E:98:D4:B8:3A:CD:C4:53:10:ED
Authority key identifier: 61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
Certificate issuer: /CN=61fbd8887da84471318d83884ac005f01b44fd49
Certificate serial: 019E314E424ACAC3751716B031C28CF8E3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
Manifest number: 1233
Signing time: Sat 16 May 2026 15:01:12 +0000
Manifest this update: Sat 16 May 2026 15:01:12 +0000
Manifest next update: Sun 17 May 2026 15:01:12 +0000
Files and hashes: 1: DhX1AL3YLB9SdItGYNcjsUvsOGE.roa (hash: +Q+chkOuahBdoqYleJ582M9GOlo0NXVt0stFukum49g=)
2: YfvYiH2oRHExjYOISsAF8BtE_Uk.crl (hash: H5Clw5lVmoIRQPlH/M9Y47p5lDpVS26S6oZ28Q+5kIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:42:4a:ca:c3:75:17:16:b0:31:c2:8c:f8:e3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fbd8887da84471318d83884ac005f01b44fd49
Validity
Not Before: May 16 15:01:12 2026 GMT
Not After : May 17 15:01:12 2026 GMT
Subject: CN=a7d9b1d46ebc92275b968e98d4b83acdc45310ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:25:1e:64:5c:59:55:f0:17:02:83:90:8a:
bf:01:c6:bf:83:a5:31:9e:3a:de:7b:63:90:8a:54:
59:35:83:63:eb:22:c1:32:fc:e7:61:7b:ee:a5:6c:
e6:da:36:03:22:bd:81:73:96:d5:b4:8d:80:73:22:
c3:4f:27:9a:63:a6:86:21:7c:32:f1:33:bc:99:48:
74:57:c0:17:2b:f7:8f:ed:85:a0:ab:93:3d:0c:6c:
1e:b8:0c:48:5a:97:4a:d7:aa:93:98:7c:e5:3e:6c:
05:4c:77:d5:d9:be:5f:86:b6:30:8a:ba:32:36:50:
e3:4c:1e:59:08:0c:01:ba:b0:b4:ad:64:d8:a1:fa:
8c:79:4a:c0:27:3f:85:ce:6c:a1:0a:01:8d:4b:77:
87:aa:7c:0d:32:f6:b8:89:d3:5d:d2:80:93:1f:4d:
13:ce:69:63:77:37:a7:35:7d:b9:3e:f5:87:f4:24:
5f:89:c7:20:ba:17:64:ae:2f:9b:0f:c8:67:f9:5c:
ed:01:36:a9:c0:b5:0b:63:e9:80:76:ab:c8:9f:c9:
43:0a:06:b9:5f:00:70:4c:da:e1:b8:4f:94:74:16:
6d:2c:5a:7d:e0:54:dd:65:8f:98:92:e6:57:7d:f5:
99:51:b3:bc:ee:60:cf:66:40:a6:0b:b7:ae:da:66:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:B1:D4:6E:BC:92:27:5B:96:8E:98:D4:B8:3A:CD:C4:53:10:ED
X509v3 Authority Key Identifier:
keyid:61:FB:D8:88:7D:A8:44:71:31:8D:83:88:4A:C0:05:F0:1B:44:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfvYiH2oRHExjYOISsAF8BtE_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0ce569-ab8e-4712-949a-cec9e17f504b/1/YfvYiH2oRHExjYOISsAF8BtE_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5d:df:46:d0:a0:f3:b1:f5:73:d9:f9:a8:0f:b7:8b:0a:77:
bb:00:48:78:b1:d6:af:42:28:9c:06:8f:c8:3d:d8:03:24:50:
37:ca:35:84:1f:f2:4f:a2:95:cb:f8:85:60:dc:cd:f0:9b:ae:
4a:75:40:f5:24:1c:f7:9a:53:34:ad:bf:ea:ac:f6:f2:fc:14:
b0:0a:e9:4e:b5:dc:12:1f:19:a2:6f:70:8b:ca:eb:6f:fd:56:
30:18:f0:b9:fa:f9:cf:8a:14:3c:fa:3a:11:10:ca:b5:d9:37:
80:5a:01:3c:5b:e0:ed:01:60:5c:69:3d:ab:12:d7:50:01:02:
b9:38:64:fb:0a:1d:53:b3:44:db:a0:0e:4b:20:97:b0:99:76:
d5:1f:17:0a:61:be:c3:7e:dd:bb:68:20:86:c9:7a:a8:67:8c:
ce:b1:82:d1:00:39:7c:0f:df:bc:3b:89:41:ba:4b:9f:2b:d3:
75:bf:57:61:3e:e7:1b:ba:44:a6:aa:3d:e8:32:3d:12:ff:0b:
22:de:39:bc:62:5f:78:e9:24:13:43:6d:62:9c:17:e0:12:77:
93:db:a8:26:50:65:e8:37:18:6c:70:3e:fe:b5:2f:d0:40:9e:
ab:bd:e9:63:83:63:33:24:ec:98:36:d8:a9:b0:0f:35:97:d2:
4d:51:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:52 2026 by rpki-client