Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
File: Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft (raw, json)
Hash identifier: OT6CBUFg1WYec04yAT1IwcZqUwH4rgYTQVcXgutG98s=
Subject key identifier: AC:18:42:06:5F:92:6F:21:1A:05:E2:55:44:A1:10:22:63:8C:CB:EE
Authority key identifier: 63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
Certificate issuer: /CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Certificate serial: 019D9AE3A1AC173470AB52163D0B31826DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
Manifest number: 0DB5
Signing time: Fri 17 Apr 2026 10:01:42 +0000
Manifest this update: Fri 17 Apr 2026 10:01:42 +0000
Manifest next update: Sat 18 Apr 2026 10:01:42 +0000
Files and hashes: 1: Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl (hash: DVx1VxjFeByXcdCM7e9eXjzi5zkPXECE0pfz+jtaMjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:a1:ac:17:34:70:ab:52:16:3d:0b:31:82:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638e0fd18832475695995f4507f8fcfdaf1c1ce5
Validity
Not Before: Apr 17 10:01:42 2026 GMT
Not After : Apr 18 10:01:42 2026 GMT
Subject: CN=ac1842065f926f211a05e25544a11022638ccbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f4:e4:ac:70:f7:e9:23:6b:11:e4:cf:b9:a6:
ab:7b:fc:00:0c:24:c8:05:42:9b:63:fb:cc:8b:dd:
16:e8:c4:bf:48:b4:fb:18:8e:f2:2d:6d:1a:be:60:
e6:46:e5:c8:8a:ea:1b:97:d8:6c:40:29:d4:fc:da:
89:f3:fb:fc:db:88:37:d8:f7:53:30:fa:e8:43:96:
d3:a6:50:66:a3:9e:27:d9:ff:3a:aa:e1:42:ef:44:
e0:74:fd:7e:86:79:b6:78:48:6d:ba:71:a6:f0:a4:
4b:f0:ba:c7:02:ce:5f:b9:b5:51:52:d6:a0:c9:3f:
e1:2d:9f:41:94:63:af:31:fe:00:66:b4:a6:51:f3:
a4:7a:bc:49:3d:b6:f0:19:ba:07:b8:85:23:90:12:
c4:50:c7:fe:bd:fe:4f:82:1c:42:83:8d:6b:4c:6c:
8d:ee:2f:6d:57:71:88:a8:16:3e:66:e8:1e:be:d1:
10:ef:77:1c:18:b8:70:3b:d3:17:d7:7f:93:b1:4c:
e7:3b:75:de:a6:10:eb:8c:e5:ed:41:da:e0:67:65:
26:46:95:b2:c5:be:2b:5b:85:da:bf:75:f1:b2:f2:
14:c3:aa:48:9d:d4:d2:f7:41:b2:1b:81:e9:ae:16:
2f:b4:4a:0d:5c:0c:1a:9c:92:3d:5d:53:1b:c8:ca:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:42:06:5F:92:6F:21:1A:05:E2:55:44:A1:10:22:63:8C:CB:EE
X509v3 Authority Key Identifier:
keyid:63:8E:0F:D1:88:32:47:56:95:99:5F:45:07:F8:FC:FD:AF:1C:1C:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y44P0YgyR1aVmV9FB_j8_a8cHOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/266e98-4576-447a-9825-b4e25d40a383/1/Y44P0YgyR1aVmV9FB_j8_a8cHOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:54:90:56:99:86:c9:2c:db:b5:cd:da:cb:7f:a0:04:67:b7:
0f:35:57:37:cf:78:73:15:8d:8e:0c:9b:b8:8c:ee:4e:fd:45:
7d:85:b8:a3:29:90:d0:27:c5:32:75:dd:1d:51:9f:3a:88:6d:
e6:50:66:6d:b9:f2:48:1b:80:5d:db:84:27:56:88:62:de:bb:
27:ec:ec:b8:9c:19:e0:93:c3:31:38:db:5c:e9:b0:a2:06:71:
ca:f0:72:b0:f8:82:e0:0e:00:ee:e8:75:4e:7a:00:9d:3d:b8:
8f:bc:bd:dd:af:39:f7:41:4b:4e:30:c2:1c:f8:ab:16:7a:87:
5e:00:f5:9e:34:43:e4:8f:46:b9:35:0e:7e:18:74:e8:e9:01:
06:a4:b3:16:bc:12:cc:06:d6:07:e3:11:01:00:a6:08:4b:e9:
ac:ce:1a:63:0e:78:52:b1:4a:0d:c9:7b:00:08:0d:30:48:20:
2c:ea:f3:6e:85:e4:4c:0a:5b:0e:3e:83:80:31:0e:15:0d:85:
80:7e:b9:2c:e5:61:b2:ca:44:8c:36:9c:95:59:6c:2b:26:ef:
3a:9f:16:54:dc:b9:26:76:6e:ff:6a:40:f1:f1:9a:d2:af:28:
2b:6f:b2:65:eb:e7:47:ba:bc:7c:ed:04:1b:4f:cc:d5:02:79:
57:5a:c5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:31:39 2026 by rpki-client