Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
File: ypAPHhHi0l0LIxatbgEmhIOayB4.mft (raw, json)
Hash identifier: kPONouRYkFahF/bzCjzQokppD5zIgLRROBpSt0aKwZ0=
Subject key identifier: 54:98:CA:AE:9A:D9:A9:DA:D0:1C:44:DA:83:B7:56:7E:DF:2F:4F:F7
Authority key identifier: CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
Certificate issuer: /CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Certificate serial: 019EED0FCFCCB8C42DC9D59583B0CFF920D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
Manifest number: 1972
Signing time: Mon 22 Jun 2026 02:01:36 +0000
Manifest this update: Mon 22 Jun 2026 02:01:36 +0000
Manifest next update: Tue 23 Jun 2026 02:01:36 +0000
Files and hashes: 1: K2muBRhSzEeWwEOKyiaVJYw5K3c.roa (hash: 9FMIKD8yGkaykJTy68XJ8mxhdE87R0V7qtYcMc3oayY=)
2: ypAPHhHi0l0LIxatbgEmhIOayB4.crl (hash: MCLjT7fLXtu1EOMck8qa/xmLtF89hP2gi05XIoySlZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:0f:cf:cc:b8:c4:2d:c9:d5:95:83:b0:cf:f9:20:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca900f1e11e2d25d0b2316ad6e012684839ac81e
Validity
Not Before: Jun 22 02:01:36 2026 GMT
Not After : Jun 23 02:01:36 2026 GMT
Subject: CN=5498caae9ad9a9dad01c44da83b7567edf2f4ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:8e:66:73:05:98:2e:62:9b:fb:a0:92:68:
26:5c:f8:b9:2c:04:d2:8b:46:fb:4e:7d:0f:24:03:
05:14:38:d5:2b:b9:ae:7a:ba:47:8e:11:b1:49:df:
17:c1:f0:b0:e2:55:c6:e6:9b:17:71:bb:21:4d:c4:
d8:7b:8e:50:e8:50:a3:96:d3:c2:98:da:ce:7d:82:
2f:58:fd:f1:68:d2:12:05:a4:3c:17:a3:c4:bf:de:
23:ae:f0:ec:1f:54:c1:7f:ad:c5:06:a0:6c:67:f7:
be:75:1f:7a:08:fa:a7:20:b6:4a:bc:5d:b9:18:f8:
9c:78:89:6e:0a:ee:05:69:ad:44:3d:a3:70:71:d8:
f7:f6:60:a5:23:8a:40:ba:90:83:c8:87:71:f1:df:
d4:31:74:56:3d:1d:6c:61:2d:3c:b0:00:56:23:01:
59:7a:af:8f:8e:9d:ea:08:05:41:4e:38:67:dc:9e:
de:2d:94:ad:68:f0:70:da:01:7c:9f:23:7d:4a:6c:
dd:89:cf:8a:c0:ec:23:c3:15:fa:54:de:fa:d7:c7:
fa:7c:7f:29:17:25:95:f9:f1:5f:90:2a:9c:5b:d9:
fd:eb:89:14:ad:80:7e:5c:88:bb:a5:f7:df:d6:bf:
30:27:61:34:59:29:4e:18:d4:8d:62:c6:24:86:d5:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:98:CA:AE:9A:D9:A9:DA:D0:1C:44:DA:83:B7:56:7E:DF:2F:4F:F7
X509v3 Authority Key Identifier:
keyid:CA:90:0F:1E:11:E2:D2:5D:0B:23:16:AD:6E:01:26:84:83:9A:C8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypAPHhHi0l0LIxatbgEmhIOayB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f6969c-3a6e-4bec-9742-ece87c6a0318/1/ypAPHhHi0l0LIxatbgEmhIOayB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fb:fb:9a:ed:12:15:22:33:9a:77:f2:8b:e2:f0:d9:b3:ec:
6b:13:5f:eb:1c:34:d7:c8:4c:e7:94:ad:21:1c:28:e5:fd:f6:
27:a6:d7:11:89:e6:25:7e:06:f0:d1:f5:76:46:28:93:b2:90:
4e:cf:34:06:70:18:3b:98:d4:03:39:cd:08:9f:e7:66:bd:f8:
23:ca:8b:da:6c:69:ab:6c:22:ba:de:e5:5d:c5:91:4b:b7:89:
1b:64:e0:b3:fd:70:ad:9c:b1:bf:ee:b7:9d:6a:1e:f6:a5:0c:
a7:00:01:10:c5:b4:a9:1e:30:87:0e:aa:68:8e:fc:31:75:30:
6b:a5:ec:59:83:28:be:ee:b9:02:e8:3a:52:32:e7:4f:c9:8b:
8e:b9:b6:55:c3:6d:17:83:11:17:33:d4:1a:dc:9a:f3:33:8d:
45:40:b8:92:38:17:fa:2b:a9:c9:9f:c7:2c:d6:ca:f1:ac:25:
c6:ff:8d:be:3c:30:45:67:ae:0c:9e:97:b0:cd:43:42:e0:dc:
78:95:f4:dd:07:a5:af:97:0a:d3:f2:c0:5e:c3:0b:dd:28:1c:
ee:7e:1d:a0:37:94:da:1b:ca:56:3e:3e:26:41:19:65:35:6a:
78:3f:bd:e3:ea:33:f0:f8:45:ae:db:8b:5e:02:f6:bd:f8:f7:
3a:3e:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 12:49:51 2026 by rpki-client