Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
File: YYd_TODTYWF3JNSyiaiRjFxtci0.mft (raw, json)
Hash identifier: RF9R6ftfEvg/iCmnbtcPeQkLmwuEdfscx4HFHuVN2t4=
Subject key identifier: AE:60:CB:04:0F:3B:EB:01:9B:70:4D:C9:C7:04:E7:C1:B9:0E:90:53
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 019FFCB6DFA21C5EF469322235419B3AF574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
Manifest number: 0EE6
Signing time: Thu 13 Aug 2026 20:01:10 +0000
Manifest this update: Thu 13 Aug 2026 20:01:10 +0000
Manifest next update: Fri 14 Aug 2026 20:01:10 +0000
Files and hashes: 1: 1lPDb-Qc7dgd58_k0ugXvgO36w8.roa (hash: up0wKM+by5cZA7R34zmGPf+ho8Ei16Ys0MiWkd/R1jk=)
2: NbUyaKZBv1RnKePQIxmyxsT9zGw.roa (hash: YfuIIb8IL5a5Ql6qciTZgKEuG43i9WjmWByHoP25V3M=)
3: YYd_TODTYWF3JNSyiaiRjFxtci0.crl (hash: A1VS0hK1DLIa9dPdSxndhTcrYb2kjvQZkAsLTCwJrVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:b6:df:a2:1c:5e:f4:69:32:22:35:41:9b:3a:f5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Aug 13 20:01:10 2026 GMT
Not After : Aug 14 20:01:10 2026 GMT
Subject: CN=ae60cb040f3beb019b704dc9c704e7c1b90e9053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:2f:0e:4c:d6:0e:d5:60:7a:2f:24:ca:8a:
3a:7a:3d:de:58:a8:1e:dc:d2:aa:6b:74:15:21:e2:
fc:5e:41:6b:b8:4d:7a:fb:26:8f:10:9d:cc:10:03:
dd:f7:1e:2f:dc:cd:a8:d0:43:fe:d4:07:08:78:28:
fd:70:72:3a:3c:9b:6b:a6:58:a9:2a:56:e2:38:9d:
de:86:24:07:7d:bf:23:3d:f3:ec:3d:1d:55:83:15:
31:e6:e9:2d:7d:d9:f7:80:33:3c:bf:8f:de:ba:34:
c4:c8:e3:42:e9:88:d4:cc:49:e4:4e:5a:2c:e2:26:
d7:b9:28:6e:3b:d0:72:7a:0e:54:a0:13:2b:be:fb:
69:a4:f0:46:ee:a1:f4:b1:6e:fd:5e:6a:89:7c:39:
32:cb:0e:f7:8a:0f:bc:33:a9:85:0b:cf:bf:92:b9:
9b:9d:3f:1c:a0:af:95:94:13:e4:29:a6:78:b9:16:
be:f4:0c:fb:c2:08:02:9d:c7:e1:c8:1f:08:98:a5:
6c:50:92:a1:a9:5d:53:ac:f4:53:bd:b7:14:31:1c:
fc:3f:3a:ba:4b:2a:cc:d3:0b:f6:0c:3f:8f:07:07:
56:2d:b8:f7:94:6b:fa:73:e5:57:77:79:36:1f:06:
97:65:d8:ee:e2:ed:65:f6:4b:45:ce:5c:e7:5b:63:
48:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:60:CB:04:0F:3B:EB:01:9B:70:4D:C9:C7:04:E7:C1:B9:0E:90:53
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3a:8d:c5:5f:48:f6:7c:59:0e:a7:d3:05:09:a6:30:c7:6f:
51:2d:a6:2f:56:65:9d:e7:b7:96:90:41:52:30:03:0e:49:db:
f2:2d:59:28:8b:18:da:09:a0:39:eb:40:d4:12:c9:32:5b:85:
cb:f5:c1:76:d4:fc:f5:0d:b8:1b:9a:f2:69:99:48:9f:24:f2:
e4:c3:f9:36:b4:aa:1c:66:fd:86:11:4a:fd:72:6d:d5:8e:ac:
86:dc:7d:9e:08:41:91:1d:06:a7:f7:f0:dc:48:0e:e1:8b:b2:
d3:d0:98:37:fd:cf:52:e8:e4:56:37:2a:bf:0f:cc:1f:99:d4:
7b:52:28:8f:6c:53:3f:88:2a:4b:71:af:9d:b9:25:46:fe:52:
23:61:8b:b5:6c:1a:f0:8a:ca:e0:4d:b9:42:d9:85:cc:10:d9:
21:25:5a:7a:4f:4e:af:21:34:1f:3f:40:9e:b2:e3:3c:65:cc:
f2:1a:6b:4f:ec:0b:65:5a:76:ca:6b:55:7a:ea:ff:4d:52:66:
88:12:37:b7:c7:ca:e8:65:9f:8d:c5:59:25:1c:7c:86:66:04:
ee:d1:02:0b:70:2a:5a:25:06:27:3a:90:37:48:e1:c6:0e:0f:
6f:1c:08:6c:37:9d:17:df:40:4f:fe:93:84:fe:21:14:9c:4d:
a6:d9:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:37:57 2026 by rpki-client