Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
File: YGhXxDyh3wTLaaSgqshim98ydWs.mft (raw, json)
Hash identifier: T5GtR5QJhd37Xxxlih/xR0u0x8uUugy9SNlr88EHVr8=
Subject key identifier: 43:A7:56:45:74:10:39:64:0D:C3:B0:D1:EC:4A:43:F7:0C:1E:8C:74
Authority key identifier: 60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
Certificate issuer: /CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Certificate serial: 019F12D300C3554C63F881680A30B841B4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
Manifest number: 163C
Signing time: Mon 29 Jun 2026 10:00:45 +0000
Manifest this update: Mon 29 Jun 2026 10:00:45 +0000
Manifest next update: Tue 30 Jun 2026 10:00:45 +0000
Files and hashes: 1: YGhXxDyh3wTLaaSgqshim98ydWs.crl (hash: 9CsFX4twWfb4vJvj27QeAEwQRt7bF941JoLgvfGK8DA=)
2: r07b59Kbc0tU4fUroKjDGDeksk4.roa (hash: VbjM5vBRkz4uK7ac3fSu6tjCMa1PBV229HM3K4xTekY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:00:c3:55:4c:63:f8:81:68:0a:30:b8:41:b4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606857c43ca1df04cb69a4a0aac8629bdf32756b
Validity
Not Before: Jun 29 10:00:45 2026 GMT
Not After : Jun 30 10:00:45 2026 GMT
Subject: CN=43a75645741039640dc3b0d1ec4a43f70c1e8c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:50:f4:37:90:c2:aa:62:14:3d:c4:0f:ea:
2d:c2:1f:d6:d6:ef:6e:c2:6b:51:b5:1c:ea:43:83:
ec:f3:9b:4f:89:ce:5f:45:eb:88:6a:2d:22:8a:63:
ec:94:eb:55:36:f1:80:36:12:64:81:2d:f5:89:e1:
b7:ef:cb:80:c1:33:77:11:99:98:de:5e:72:40:75:
b7:67:f4:7d:96:f0:2a:fe:ba:8b:26:1f:8b:d0:30:
60:a6:83:90:4f:45:0d:70:3b:89:b7:2c:c7:91:49:
ee:b5:c9:3f:26:3f:9d:cc:fc:34:7b:f0:c1:65:1a:
69:eb:1f:a5:66:94:8a:43:78:76:78:73:20:eb:43:
82:07:7f:89:cb:37:29:73:d6:4f:3c:27:59:e7:6a:
05:64:c4:48:14:7e:13:b4:56:ee:cc:c1:5a:1b:1e:
e9:56:6e:4b:70:a2:ed:6c:ee:4e:8c:34:45:fd:c4:
60:f6:f1:20:cc:e4:31:63:a2:21:d9:f6:7e:b7:02:
ef:18:6d:c6:f8:43:ca:28:42:c6:78:fc:b4:e9:9c:
90:ad:6d:3d:0c:1c:aa:4d:4f:2f:e1:22:13:74:b8:
bd:93:58:f6:2f:01:c6:91:67:a1:4b:7f:e9:d9:e7:
15:10:7f:8a:cc:70:cd:10:ef:c6:19:27:86:de:c4:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:56:45:74:10:39:64:0D:C3:B0:D1:EC:4A:43:F7:0C:1E:8C:74
X509v3 Authority Key Identifier:
keyid:60:68:57:C4:3C:A1:DF:04:CB:69:A4:A0:AA:C8:62:9B:DF:32:75:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGhXxDyh3wTLaaSgqshim98ydWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/95d7dc-0c8b-4941-b9c1-d4710d022336/1/YGhXxDyh3wTLaaSgqshim98ydWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:57:ac:a9:80:4a:d1:be:32:6f:51:7e:f3:43:e7:42:43:2c:
88:a9:05:ae:17:b4:99:dd:39:87:90:8f:43:12:3d:f1:f9:17:
51:1b:ae:dc:ff:dc:a8:1a:b0:6c:cb:dc:16:27:f6:99:2b:d6:
ed:6d:d6:ec:ca:29:86:ea:fb:a2:c9:f0:91:c5:6c:8b:ee:0d:
44:c9:c6:e6:07:d2:9d:f1:22:98:57:bc:cc:a9:41:f4:2d:27:
13:8d:d1:9a:ac:ff:eb:4a:b7:78:39:2d:6f:74:5c:b4:46:7a:
74:73:f7:63:78:8b:06:7e:7f:26:1a:c5:f5:37:2f:2e:47:8e:
c7:bf:e6:7c:d7:0e:af:b1:a6:70:33:97:9a:28:7e:25:26:85:
a9:bb:5f:75:7d:e8:a8:56:4c:cf:7f:97:fe:70:d0:97:af:82:
e1:d3:13:5c:43:90:18:d2:e4:ae:92:cb:22:96:f8:f3:7b:71:
57:91:57:d0:c1:f7:61:38:df:cf:59:44:d5:31:70:f1:19:81:
05:83:9c:1e:0b:0c:3e:d8:83:83:50:61:5a:30:a6:d0:00:5d:
fc:1c:c9:b4:01:6d:0b:05:6e:02:32:87:8b:93:82:b0:e1:76:
86:85:fa:40:eb:72:8d:a9:d4:9c:2f:c9:41:16:65:65:29:0d:
1b:17:04:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:32:58 2026 by rpki-client