Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: eMM3VnZT/usTwkulfOd5WnNCw/q9HtvUMsCTWx6xQ78=
Subject key identifier: BF:60:85:41:43:F9:3E:58:C2:12:CF:EA:A8:56:3D:7B:7F:11:E7:02
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019E88A330E3D0A64A8669DD81339BEFBD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 1264
Signing time: Tue 02 Jun 2026 14:00:56 +0000
Manifest this update: Tue 02 Jun 2026 14:00:56 +0000
Manifest next update: Wed 03 Jun 2026 14:00:56 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: BX0Fzi8prI/SV0ehvCYxXquMQxC5s3Me15eCMnf1M7M=)
2: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
3: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:a3:30:e3:d0:a6:4a:86:69:dd:81:33:9b:ef:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Jun 2 14:00:56 2026 GMT
Not After : Jun 3 14:00:56 2026 GMT
Subject: CN=bf60854143f93e58c212cfeaa8563d7b7f11e702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:3e:57:d3:ce:a0:3b:07:37:87:f3:e1:fc:
26:bd:06:06:e8:de:00:90:c3:12:d6:f1:e6:b9:ac:
e2:cc:f7:b3:6d:b4:94:dd:13:2a:f2:fc:ab:7a:3f:
7a:e7:68:d1:b6:07:6c:6e:ec:03:8e:30:6d:14:97:
b2:c7:85:93:86:04:71:5c:a7:78:c2:f8:44:cf:ea:
cd:af:f2:ce:ae:9a:23:58:3f:b6:91:ae:22:7f:96:
50:6f:4b:5c:13:5f:2d:6a:0e:4c:4c:7c:a3:ef:19:
3f:37:96:9c:a0:01:95:a0:f7:5a:b1:31:c0:fe:13:
9e:48:8f:6e:42:eb:f7:81:de:e8:6c:04:08:2e:b3:
43:d5:13:2d:45:ae:69:f7:01:4d:18:b4:75:85:74:
8c:4c:83:10:46:d0:aa:fc:70:67:7b:eb:9c:74:ee:
5c:05:58:0a:31:2d:c9:78:90:9f:fe:a5:1e:60:f7:
cb:1f:c3:4b:15:f0:9f:95:ec:57:2f:bc:61:6a:e6:
cc:59:56:36:a8:06:a1:0a:95:b0:98:88:b7:c9:53:
1b:b7:2f:46:2b:db:5d:b5:c7:5b:c4:99:59:72:70:
f8:97:5e:a1:93:d5:86:65:d9:32:97:80:27:ab:4f:
a1:d9:e0:47:08:cf:7e:55:e5:6f:a2:b9:eb:19:73:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:85:41:43:F9:3E:58:C2:12:CF:EA:A8:56:3D:7B:7F:11:E7:02
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:a1:43:78:ed:a7:99:04:0d:2f:2b:6a:7b:70:e1:52:0d:
af:3c:2f:66:6a:29:8f:6b:7e:c3:51:31:ba:2f:f4:bc:bd:ec:
d1:ba:f2:1e:d7:85:32:19:37:21:95:b4:be:7e:03:20:22:ea:
8d:5c:77:77:19:12:dc:3a:6c:4c:7b:01:28:70:93:9d:01:ee:
83:11:15:21:dc:05:fb:5a:a6:5a:75:de:51:1e:ae:78:7f:f1:
dd:87:e2:7e:09:00:0e:e1:78:e4:52:71:4d:9c:4a:2b:db:5f:
16:18:78:34:ce:fb:43:e8:77:73:2e:70:43:91:75:1d:fe:31:
1a:49:3f:37:e1:69:6a:bd:03:fb:cc:93:e6:dd:f6:38:14:0d:
8a:5a:76:b7:24:9f:54:a0:54:f1:40:cd:4f:69:f2:bf:d2:19:
23:42:8d:3f:bb:2d:74:55:6a:90:03:90:9d:08:78:1e:1c:50:
95:81:02:0e:d1:2c:62:d1:10:24:42:57:12:68:29:96:f3:b2:
0f:1c:8f:8b:57:23:f8:a8:9f:9c:7d:9d:2c:62:9d:9f:f9:3d:
a7:3f:d5:16:21:b1:92:6b:4a:c7:6d:c5:ca:61:b4:39:44:3f:
12:5e:d9:da:f5:95:70:66:44:4d:6e:57:30:2b:da:c8:f0:d0:
24:bb:e3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:34 2026 by rpki-client