Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: pIuFm0tO/qMk2W/JwlAPJNzaYFPGtkTcjRFXdgAyhr8=
Subject key identifier: 8D:80:6C:2E:1C:EB:94:79:DB:9D:AF:F1:46:C4:4B:C4:45:15:EC:C8
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 019F935ACF1706415BFA317B393EFBC17095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 0436
Signing time: Fri 24 Jul 2026 09:00:29 +0000
Manifest this update: Fri 24 Jul 2026 09:00:29 +0000
Manifest next update: Sat 25 Jul 2026 09:00:29 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: ZQ7OAYHgJWmOITDnJfJ2WARUT9OH/f7s1AkNtOvmXQM=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:cf:17:06:41:5b:fa:31:7b:39:3e:fb:c1:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Jul 24 09:00:29 2026 GMT
Not After : Jul 25 09:00:29 2026 GMT
Subject: CN=8d806c2e1ceb9479db9daff146c44bc44515ecc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:0e:20:9d:0b:74:70:27:ee:17:75:af:71:
19:60:95:d2:0a:ba:67:0a:ae:cc:b2:ce:1f:77:e5:
7c:51:b9:6d:f0:cf:93:ea:05:11:2c:0e:3c:b0:34:
36:f2:73:cc:83:72:86:04:b5:46:4c:6e:3f:a5:10:
8a:df:0c:e1:f5:9c:ff:1e:d0:b0:b7:1a:02:d9:a6:
80:a6:45:52:92:17:18:0a:ed:b8:7b:a8:95:6d:bc:
02:cd:ee:14:fb:2c:21:b3:76:35:d0:2f:a1:97:4e:
ce:db:61:f6:ff:1c:d0:d8:43:e1:fc:ee:8e:e0:a8:
eb:2b:94:16:b7:d3:ee:66:60:9d:92:85:02:d1:66:
e5:e0:86:6a:b3:49:17:3b:23:f9:1d:4f:3f:89:c7:
d3:1e:ca:ba:69:e3:bf:e7:81:92:97:18:39:16:6a:
95:3e:2c:93:49:04:2a:76:b0:69:23:58:98:ea:8a:
b6:5d:d3:6d:aa:8c:f6:17:f9:ac:07:98:85:71:2b:
4f:8b:1f:98:f0:93:74:04:d0:2c:5b:46:da:4e:1d:
f9:23:94:19:cc:e3:46:78:4b:f2:1b:cf:8d:4e:75:
31:9f:b7:21:7e:0d:39:d4:43:1a:c0:70:46:df:0b:
f5:ff:c2:e1:96:c1:9e:c9:37:62:d5:3d:f3:f4:21:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:6C:2E:1C:EB:94:79:DB:9D:AF:F1:46:C4:4B:C4:45:15:EC:C8
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:d1:cd:d2:db:f0:0a:ff:04:5b:f5:c6:03:69:d6:d9:11:
dc:8a:f5:70:a2:bd:17:45:a2:9d:be:92:ff:b2:5a:4a:23:82:
97:47:09:50:dd:65:c6:1b:06:8c:5d:0d:c0:62:fb:c6:4d:9d:
34:8d:db:75:b7:da:39:65:d8:a4:50:b1:5b:d0:54:c6:cc:11:
20:ef:62:44:11:f4:5e:74:94:78:e0:c4:70:85:d3:eb:80:9f:
af:ac:50:53:8b:13:df:57:a0:9d:f0:00:a2:05:33:db:a2:3d:
52:ea:da:b2:bf:00:6b:fc:8b:dd:51:5c:b8:4a:2a:83:00:c8:
fd:18:c4:1a:96:25:3e:1d:2b:5c:3a:41:9a:59:c2:85:22:96:
4c:48:e9:28:92:fe:5d:6e:7b:cd:b0:78:c7:aa:8b:b7:bd:18:
93:6b:69:14:b8:66:31:ab:2b:60:1c:14:1f:a2:4d:e2:b3:97:
c8:03:36:76:07:7c:9c:6d:03:8f:b1:8e:a3:24:02:29:10:45:
d7:1c:8c:16:32:35:5c:20:e6:06:78:2a:75:f8:59:ee:7a:97:
31:cd:a3:65:12:de:1b:7a:a3:be:de:6a:2a:6d:a1:fc:94:e6:
fd:45:88:4a:50:fc:b2:63:0f:dd:e6:06:2d:e9:60:2a:60:ed:
03:d2:61:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:54 2026 by rpki-client