Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: Q266Pkf771Wh1Nzppdg/IOff54/k2y9LK5D5N7szU1k=
Subject key identifier: 07:C8:1A:1E:74:27:59:D2:FD:79:18:98:7F:4A:7E:6B:54:B6:41:E8
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019EB8EAB6E7E4E188BB9D63803B1EA0AE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 1529
Signing time: Thu 11 Jun 2026 23:00:50 +0000
Manifest this update: Thu 11 Jun 2026 23:00:50 +0000
Manifest next update: Fri 12 Jun 2026 23:00:50 +0000
Files and hashes: 1: 7r9SX9HuGtf2H3oy1bdYUxs6ERM.roa (hash: gZE5Lnpr7kALC+H2K1SiEYZZcM/wPDOptHC62z3JpZM=)
2: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (hash: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug=)
3: Xrue8_3iZIf-q2iZjaX1I5eh5v4.roa (hash: GCW1dLjeWZhLx2VOYd6Yk9RjDyKldIOTznHcOf+v7tI=)
4: XzpLOyyVemQ6RelT4l5NRJSoZY8.roa (hash: 7T31BDFOxFp2/Pv8ShUq1oXNZxQJBzRZFs2H/DMrRxs=)
5: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: ymN0UKuedULz7efkdhVFDTtvAhsgcSX5nTnDB+xfx1I=)
6: i900lZucCqA9DZUrSkDMsObY6hA.roa (hash: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME=)
7: uTIQo1iOi6huXk_fCeCJe7xarCY.roa (hash: ivcVjW4Q8NkzPjE4iMw0GCYLeKdEXAuPpRYl7NOH1pY=)
8: zaFkNKXL7XugoMho6gsyI_tFULk.roa (hash: N8aOmUkSfhnOWq2kc5KVJ3lVeRhazZVqeZC0mkdlrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:b6:e7:e4:e1:88:bb:9d:63:80:3b:1e:a0:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jun 11 23:00:50 2026 GMT
Not After : Jun 12 23:00:50 2026 GMT
Subject: CN=07c81a1e742759d2fd7918987f4a7e6b54b641e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:7c:f9:1c:43:97:10:8d:6c:dd:05:9c:18:
ac:8c:31:11:2d:b2:24:e0:a6:95:c6:b8:2a:b0:06:
04:1c:e4:36:39:80:72:61:3c:0c:0d:20:8b:3a:8c:
09:c7:79:9f:b2:ca:b4:4c:d0:24:51:f0:45:28:c6:
3b:02:9e:93:a4:43:87:95:bd:e8:0a:1d:6b:65:7f:
8e:58:fd:78:d3:65:97:56:f7:a6:c7:3a:9e:6d:9f:
71:d6:52:e5:72:d2:2e:84:fe:a0:8e:32:14:7a:4a:
a5:99:1a:17:ca:04:c2:6f:51:5e:a5:5a:08:6e:71:
78:c9:fc:d8:aa:d8:2d:12:26:61:55:97:c1:00:c4:
6f:20:80:1b:cc:7d:b0:ef:35:6c:80:ec:07:87:93:
79:4f:34:9c:1b:88:6a:41:ed:40:f6:76:19:b1:d3:
ce:fb:96:df:c0:ea:93:c2:0b:f6:8b:1e:41:21:01:
8e:f4:a1:8d:c8:30:0e:db:19:88:dc:f6:3a:bf:87:
41:3e:6a:f1:5b:72:f9:0f:fa:1f:00:be:ff:1d:8c:
9b:95:59:50:b3:8f:36:a2:a9:b5:d4:02:9e:47:54:
3c:f2:c4:fd:08:d7:8d:cb:a0:4d:32:45:88:69:b8:
da:64:cf:1f:b0:2f:fc:dc:56:0a:95:50:47:68:c8:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C8:1A:1E:74:27:59:D2:FD:79:18:98:7F:4A:7E:6B:54:B6:41:E8
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ce:4a:7a:ad:90:ac:6a:92:97:ff:e4:8a:9a:2e:0d:b6:f7:
cc:80:58:73:47:d5:56:6e:a3:d9:b3:80:3f:0d:31:9a:d8:ab:
be:57:b3:f8:d2:3b:bd:6f:29:96:53:08:07:93:bb:b6:05:52:
dc:5f:c1:99:15:b1:82:d9:70:ea:0a:2d:a0:70:51:9c:e1:89:
71:07:2b:32:00:bc:ff:6d:18:f1:04:77:0a:e7:83:6d:be:2f:
9e:37:a1:e9:eb:bf:26:22:1d:93:68:3e:2a:a4:66:0c:fb:94:
7b:3d:98:2f:da:11:aa:a7:b9:05:50:46:97:48:1c:6e:d6:be:
c6:3d:b5:d3:d0:16:0c:55:af:c7:0f:b4:f9:43:7d:1e:38:11:
2d:f9:9d:88:aa:51:52:8b:6e:24:00:28:a7:0d:72:3a:80:e8:
04:70:ec:5d:1b:7b:10:b1:0c:f6:f3:ea:57:9a:22:f4:f7:72:
22:db:11:ec:eb:39:f9:ce:fb:35:c2:27:91:92:ef:90:d3:fd:
67:38:86:07:27:bd:fa:fc:1c:ed:34:80:ae:47:6e:ce:19:2b:
7a:f2:c5:d0:4a:94:a4:89:1d:bc:7f:67:e6:a8:26:64:9f:3b:
b0:b0:fc:1f:8a:95:6d:b2:83:92:80:db:3e:24:00:12:97:51:
bf:e1:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:13:58 2026 by rpki-client