Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: 30Ufj7DFEMFRdbNifzdyMDxgQSSUGyUMpQIJyK4Yfp8=
Subject key identifier: 91:63:04:23:9E:A9:F3:FE:29:61:C1:2B:82:07:9E:12:1B:A5:A1:B4
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019E9B8557F6A08BBE19021C38B19EF57F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 08AB
Signing time: Sat 06 Jun 2026 06:01:07 +0000
Manifest this update: Sat 06 Jun 2026 06:01:07 +0000
Manifest next update: Sun 07 Jun 2026 06:01:07 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: CipD/tL9P+h24YKkWt0Li0h/yAGtiDnKzLySruMLPkU=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:85:57:f6:a0:8b:be:19:02:1c:38:b1:9e:f5:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Jun 6 06:01:07 2026 GMT
Not After : Jun 7 06:01:07 2026 GMT
Subject: CN=916304239ea9f3fe2961c12b82079e121ba5a1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:de:ef:8d:e5:4e:bd:e4:71:e6:d7:db:80:
ea:49:db:f0:39:bb:eb:fb:3b:16:7d:ec:e7:bd:f8:
d5:e9:da:ee:19:38:5f:53:07:4f:78:1f:46:6f:3e:
c1:53:ec:49:31:42:96:05:ca:ab:27:a2:9d:a8:8b:
d7:61:3f:4b:56:a4:65:a1:eb:ec:84:c6:26:48:39:
da:8d:46:ae:67:3c:2b:e7:41:5f:71:54:ff:66:f9:
46:3e:d9:4c:85:e0:cc:4d:42:5b:08:d5:f4:6c:e4:
b0:45:32:66:45:cb:31:87:3e:99:c0:9c:91:ac:ef:
72:d6:8e:a3:58:fd:09:39:5d:38:99:f4:71:d4:7a:
b4:db:ee:90:f1:78:22:2f:42:e7:bc:9e:6b:00:7e:
98:ad:7c:3c:91:fa:08:41:59:35:e1:3e:df:96:99:
91:6c:24:6b:10:c9:39:56:3b:1d:8a:e0:d0:77:d9:
33:46:65:d7:57:e2:5c:ec:e7:11:50:65:2a:90:44:
a8:f9:64:0a:50:96:f1:18:4f:5e:d4:08:93:0d:58:
bb:70:2d:75:9e:f2:55:2c:92:cf:0b:e8:53:08:66:
74:20:ea:57:d8:78:e7:ce:be:90:7b:4f:25:05:6c:
d2:01:62:58:67:cd:15:01:07:1c:d0:c7:14:d2:60:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:63:04:23:9E:A9:F3:FE:29:61:C1:2B:82:07:9E:12:1B:A5:A1:B4
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a5:9d:5f:ad:5f:c9:47:cb:aa:5c:e3:47:e3:53:84:ae:6a:
bf:12:8d:0a:42:fb:07:e8:cf:28:c0:1b:3e:6f:e5:b4:f2:8c:
b2:45:77:b1:98:88:3c:c7:00:d7:64:6e:f1:27:1e:fa:93:51:
dc:3d:8e:8b:c0:4f:c4:ec:dd:2c:03:6f:8b:ef:13:3e:93:26:
a2:22:fc:b7:4d:7e:71:30:1f:0d:6f:71:3d:78:0b:50:e9:37:
54:92:24:85:0c:d2:85:25:5c:97:c4:c3:e4:00:fe:fd:ea:22:
38:8a:70:be:3a:08:5e:99:6b:bb:af:8e:08:0c:17:a2:b3:e3:
0e:08:c2:2a:7c:c3:12:48:e6:49:61:52:b9:4f:86:79:65:9a:
ae:a7:75:41:b9:df:76:19:4b:2c:53:f3:e2:ec:19:83:00:15:
ed:d9:54:d4:03:b1:3b:3c:2e:2d:aa:23:f6:84:90:fc:35:0d:
42:b1:c5:23:81:9d:10:96:9e:dc:a6:fa:94:e1:66:76:ca:d1:
31:8f:58:7e:6c:c7:bd:40:e9:ff:13:d7:5c:59:d6:af:d9:4a:
9b:92:b1:88:bd:96:eb:bc:24:58:d6:af:ff:34:b9:4d:1f:4c:
f2:40:8d:43:0a:dc:1b:32:fa:49:d2:f3:4b:d2:d8:69:7d:92:
b0:af:6c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:19:14 2026 by rpki-client