Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: 4Ec/Kjfl6VA3OCN/Rd+CN3aG3QXE7E97svw0rJe5DO0=
Subject key identifier: F5:6E:3C:26:84:F6:A8:C7:93:EA:EA:F1:CF:FC:C3:49:07:B6:38:F4
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019EB9589213542B43972E50C8EC5535DDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 08AA
Signing time: Fri 12 Jun 2026 01:00:49 +0000
Manifest this update: Fri 12 Jun 2026 01:00:49 +0000
Manifest next update: Sat 13 Jun 2026 01:00:49 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: MxVxXjrrPSqIWqgQpr5wDF5jP+dkLXdE9Q8X0T3PeiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:92:13:54:2b:43:97:2e:50:c8:ec:55:35:dd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Jun 12 01:00:49 2026 GMT
Not After : Jun 13 01:00:49 2026 GMT
Subject: CN=f56e3c2684f6a8c793eaeaf1cffcc34907b638f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a0:51:65:50:76:54:47:6a:2a:7d:22:55:44:
f7:b2:2a:d0:70:1b:f5:29:59:db:cd:20:d3:d4:b1:
4f:e5:c9:77:09:eb:2f:30:17:2a:f9:57:0e:ca:5d:
2d:68:62:65:35:09:9c:b2:eb:36:85:8e:55:0b:e0:
bb:6a:1a:1b:82:41:4d:a7:32:49:09:2e:c7:fa:70:
f4:29:f2:9a:60:04:19:9f:9b:ad:6f:8c:99:b8:6e:
a8:48:76:04:fb:14:ba:a5:c6:b4:b9:f5:9c:70:2c:
f7:66:13:7d:0f:98:b5:17:1f:07:16:03:25:7a:89:
9c:19:ba:4f:6b:ff:e0:5b:db:37:ab:92:b4:9e:08:
28:c1:0a:c1:2c:34:c3:f9:f8:e6:e0:30:6f:2a:23:
f5:6e:1a:34:eb:79:0d:d2:a2:1e:a1:b3:52:72:42:
80:54:31:cf:ab:e1:35:21:e4:88:6e:78:2b:75:cf:
1b:29:52:8b:b3:54:11:7c:d8:e9:73:d9:97:02:ba:
1a:97:e1:24:4d:77:f6:1d:34:ca:24:31:17:5a:54:
1c:35:37:34:5b:93:fe:92:3e:33:94:99:d6:07:90:
32:15:66:ca:ea:8c:9e:b0:64:47:f0:8e:78:1a:c8:
fb:ee:30:6d:44:50:0c:06:87:3b:ae:9b:06:be:ed:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:3C:26:84:F6:A8:C7:93:EA:EA:F1:CF:FC:C3:49:07:B6:38:F4
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:66:9a:08:16:8f:c9:79:f7:92:a7:f6:51:70:be:fe:1a:
6d:dd:e0:74:c1:c7:ef:2d:6b:d3:e1:cb:2c:31:6a:08:08:a1:
a1:84:36:4d:1c:8f:69:bc:8b:39:48:48:73:5a:33:fd:65:d0:
e6:2a:c2:2c:47:db:5d:8b:d2:ea:23:da:52:21:6b:c8:13:1c:
20:5f:02:3e:e6:d1:99:ea:cf:ab:ad:59:06:4c:79:bc:af:4c:
ac:9c:61:f7:94:43:09:b4:85:6d:f5:51:8b:66:e8:9f:10:27:
e1:2b:37:34:56:60:ee:84:52:1e:55:1d:49:09:2d:78:bb:66:
10:f5:05:44:f1:f2:ac:9f:0f:5f:d0:f4:1b:b3:26:26:83:08:
24:05:64:bc:31:ee:e7:11:ed:15:21:53:15:33:b7:4b:a2:f8:
68:75:78:2c:f5:ed:d7:4d:17:96:55:1b:7a:4e:13:5c:c7:e7:
9e:a5:9d:a3:a5:8f:a8:4e:ee:51:47:d0:56:9f:92:fb:fd:06:
a4:08:18:93:4f:6e:6e:c2:f7:ce:ae:70:72:68:6c:06:1a:7c:
96:5c:e6:8c:4a:6c:fd:00:c1:84:08:21:a2:f6:af:3d:b1:b2:
8c:00:3a:80:30:5a:50:02:90:ac:f0:b7:d6:b5:77:09:cb:12:
63:d5:f2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:09:38 2026 by rpki-client