Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
File: YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft (raw, json)
Hash identifier: 2gOu0NFA+zHfWfSYjHIOIvK1qrsI60aIaB4adfHnn1s=
Subject key identifier: C7:70:37:DA:99:6A:89:24:17:B1:C3:F2:7B:BB:D0:3E:F6:8E:99:72
Authority key identifier: 60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
Certificate issuer: /CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Certificate serial: 019EBAD91FE5C7DB37DE0E6C10CAC05F3C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
Manifest number: 152A
Signing time: Fri 12 Jun 2026 08:00:52 +0000
Manifest this update: Fri 12 Jun 2026 08:00:52 +0000
Manifest next update: Sat 13 Jun 2026 08:00:52 +0000
Files and hashes: 1: 7r9SX9HuGtf2H3oy1bdYUxs6ERM.roa (hash: gZE5Lnpr7kALC+H2K1SiEYZZcM/wPDOptHC62z3JpZM=)
2: TJ2UCD3Urxqqt9VYyEf23Fmmaqc.roa (hash: ofKvq3GVg7zKLaiA8CE5CKSDJCDWtrOUHXHufuUJ1ug=)
3: Xrue8_3iZIf-q2iZjaX1I5eh5v4.roa (hash: GCW1dLjeWZhLx2VOYd6Yk9RjDyKldIOTznHcOf+v7tI=)
4: XzpLOyyVemQ6RelT4l5NRJSoZY8.roa (hash: 7T31BDFOxFp2/Pv8ShUq1oXNZxQJBzRZFs2H/DMrRxs=)
5: YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl (hash: /cf/5I5dDUHpZ03wiNekNXfd2/Q/e9CjG9xHZc4f5IY=)
6: i900lZucCqA9DZUrSkDMsObY6hA.roa (hash: BwcsBww5LOQDT5JOaN5lMmUCh3Hs0MQx3s5Tm8CrQME=)
7: uTIQo1iOi6huXk_fCeCJe7xarCY.roa (hash: ivcVjW4Q8NkzPjE4iMw0GCYLeKdEXAuPpRYl7NOH1pY=)
8: zaFkNKXL7XugoMho6gsyI_tFULk.roa (hash: N8aOmUkSfhnOWq2kc5KVJ3lVeRhazZVqeZC0mkdlrjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:d9:1f:e5:c7:db:37:de:0e:6c:10:ca:c0:5f:3c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ebd4f7ac3d24920de1c1ff1185d9507e9ad078
Validity
Not Before: Jun 12 08:00:52 2026 GMT
Not After : Jun 13 08:00:52 2026 GMT
Subject: CN=c77037da996a892417b1c3f27bbbd03ef68e9972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:9c:2f:dd:7e:33:5c:de:98:b1:f6:46:c0:
50:e6:8b:97:c3:64:8e:d7:2f:a5:5c:f2:46:b3:4d:
a1:10:03:4f:8c:8d:e2:5e:ca:77:2a:4a:5a:9d:fd:
6e:9f:7c:6a:5b:e5:a0:2e:66:66:c1:30:5d:d3:b6:
2d:51:2d:aa:eb:c8:af:07:b1:81:8c:cd:8e:e7:6c:
81:8b:7a:71:ac:5f:8a:4e:ac:ef:bf:20:4f:ad:38:
aa:d1:04:d7:7f:6f:e8:51:ad:50:52:59:10:a9:65:
ab:62:59:55:d4:13:9f:df:0b:5e:81:c8:d1:e0:c4:
22:ea:05:d9:62:aa:91:ef:18:3e:67:c4:36:9e:e7:
8d:60:bd:d8:36:58:3b:c6:1e:26:20:7e:7d:00:74:
1f:b9:5b:a2:06:8d:f2:15:e5:37:8f:83:65:c0:8b:
9b:a9:60:ea:a1:a4:91:41:fb:03:64:ee:e6:20:90:
72:78:32:a7:fe:ac:75:28:26:77:64:a4:f1:5c:42:
b7:f6:70:1d:6f:7a:fe:91:5e:9b:f9:fe:1e:cb:ea:
36:6b:46:f3:68:c3:83:51:e1:eb:ff:9e:7a:10:96:
29:c4:21:9e:5e:1f:f8:23:e2:05:41:29:01:2a:9f:
a6:86:42:52:0e:3c:12:23:56:03:75:d4:6b:4d:c4:
4e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:70:37:DA:99:6A:89:24:17:B1:C3:F2:7B:BB:D0:3E:F6:8E:99:72
X509v3 Authority Key Identifier:
keyid:60:EB:D4:F7:AC:3D:24:92:0D:E1:C1:FF:11:85:D9:50:7E:9A:D0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOvU96w9JJIN4cH_EYXZUH6a0Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/905378-228a-41b4-bce8-87d3b023d919/1/YOvU96w9JJIN4cH_EYXZUH6a0Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b4:33:d5:b8:b4:81:c7:56:78:e6:e4:50:15:03:13:75:4e:
a2:35:2d:b5:7d:0b:f1:3f:37:04:b7:79:46:25:8a:51:e2:a4:
73:9a:1c:ab:05:d3:d6:a2:88:17:dd:47:b0:bc:21:ac:d3:1b:
3a:99:44:5d:18:b7:04:f8:34:fa:4c:97:f0:01:7b:e7:ef:5a:
23:45:81:b2:a3:21:61:cd:02:19:3b:12:60:83:9e:f1:c4:c1:
70:ef:51:56:d5:c6:5a:e9:c3:57:a2:9e:87:60:6a:38:4b:2c:
be:3d:b0:b2:03:d2:bc:6d:ed:c1:3f:9a:57:83:53:3d:87:24:
9b:97:22:a3:1f:bc:65:2f:8d:2b:fc:2a:3b:03:37:7b:9a:11:
e4:d9:8b:f6:d7:c5:0f:27:25:70:28:0f:9f:2d:31:ab:c5:51:
0b:00:b6:e0:7e:5e:56:bd:07:10:e0:7a:93:09:39:bb:30:d3:
d4:bb:03:a3:f5:ff:9a:30:f6:6c:d9:03:bc:68:12:2b:f3:88:
34:ad:71:c7:37:f5:f7:3b:67:04:79:f5:08:8f:58:84:60:8f:
9d:10:20:eb:35:4f:9c:0d:e0:3e:14:15:ba:41:df:24:4d:1c:
af:33:32:52:ab:c4:36:52:2c:f6:9b:94:87:51:2e:df:01:4f:
c1:50:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:11:51 2026 by rpki-client