Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: FN3CjJY6UkBqgBx2CT+3/lo9Lu3XzU17I1NjVO995KQ=
Subject key identifier: 5F:F3:1A:B4:AB:8B:9A:27:EF:3C:97:6D:2F:C0:7F:89:9B:5D:6D:E0
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019D9A3E8930157559FC031C4366F3349965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 1930
Signing time: Fri 17 Apr 2026 07:01:22 +0000
Manifest this update: Fri 17 Apr 2026 07:01:22 +0000
Manifest next update: Sat 18 Apr 2026 07:01:22 +0000
Files and hashes: 1: 1ZMsVQGAWg2it-JAEuC_i_hCIyc.roa (hash: ZLAKov/0hadhlGoY/KwpJKZ7o/B0xm108yvYfzR8PiE=)
2: 4dzv8ZUCzL8D043G29d4Vay_L1A.roa (hash: 1/yelAOHz555q/lBgGrJ6Dvvgooi9UHUahxGzfdOfoE=)
3: ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa (hash: drk6qrOhljg5/CDI9FQXdFU1YNYaPplLqtldYNHdpKY=)
4: WhS9iKVaUFg38uZaHtFMBX5xGXA.roa (hash: AUcEJ+4tf05fJdicnZl50BMdPlLmWRqkiu+wHdC3Q9g=)
5: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: /j9nzmkqk/YM+6A2ocx1y6xcrSIBlCYwXQ6kkcwjhR4=)
6: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
7: y3D_6T7LItZVGNAAIM2oiQLXK4k.roa (hash: wbaR1iGKJRGc1NnOpfqCm7AMxI+gqPXjh0axv9TvfKE=)
8: yM-BRopjf51qtduhIy15MptpHyA.roa (hash: cYXBlJN/z+ptyvUxLCa1zDp3B5VQu0MKslmhphO0gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:89:30:15:75:59:fc:03:1c:43:66:f3:34:99:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Apr 17 07:01:22 2026 GMT
Not After : Apr 18 07:01:22 2026 GMT
Subject: CN=5ff31ab4ab8b9a27ef3c976d2fc07f899b5d6de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:02:de:a8:5e:cf:3e:a0:3f:b9:6d:c2:28:
c7:63:85:dc:99:9e:19:b6:a9:96:e8:d5:61:dd:ad:
fe:db:b9:3c:0a:c6:6d:44:10:c6:85:1e:fa:67:45:
b0:a6:76:d0:5c:cc:34:bd:ae:5e:09:79:bc:21:a2:
17:ff:4b:ff:db:0b:91:14:ae:fb:e7:e4:06:aa:40:
b6:1b:a7:6c:b4:dc:0a:ad:6d:80:94:a5:cf:0a:52:
01:41:7f:1c:72:23:5a:65:ff:44:51:e0:16:03:ef:
38:cc:f8:e7:0d:68:78:a2:6d:7a:f0:58:3e:b5:f4:
f4:2e:ba:34:60:df:e9:40:1f:56:ad:27:03:2f:b5:
93:b8:2b:8c:a2:ad:eb:59:1a:1e:76:21:11:23:bc:
6e:72:2e:10:d4:c8:32:92:d0:9e:02:fb:0e:aa:b0:
89:3a:cb:6d:46:23:4a:26:af:2d:8d:af:93:12:54:
48:26:45:3a:ad:80:11:a3:07:89:0b:f5:92:fc:c7:
f6:ae:92:01:cf:b4:72:4d:32:b4:25:9c:74:e2:ea:
79:db:56:69:70:29:ff:a6:1e:08:33:c4:51:31:6b:
d1:73:db:eb:7e:fe:92:a3:25:8f:a5:73:59:36:99:
cb:d9:a3:4b:32:ba:27:53:33:c4:ac:a1:3c:8d:8b:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F3:1A:B4:AB:8B:9A:27:EF:3C:97:6D:2F:C0:7F:89:9B:5D:6D:E0
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7c:8c:ab:24:a9:93:43:52:bf:74:18:d8:1b:1b:d3:b2:bd:
d4:cf:af:1c:0d:56:0b:74:d3:af:9d:e4:a3:11:1f:67:37:a3:
60:b6:fe:4f:6c:84:5c:63:fa:69:13:79:cd:d5:4e:09:58:08:
4c:19:4d:3e:17:5d:5e:b4:91:03:d0:47:fe:55:e8:b9:54:b0:
ec:21:e3:81:44:b8:d6:3f:c6:d4:4d:66:2c:62:6d:45:38:a7:
02:bc:73:40:fd:10:2c:69:7b:2f:22:a9:32:10:0b:82:f3:38:
9e:0f:2c:d2:ea:05:91:83:49:43:e6:da:8e:de:f8:f4:8f:6d:
57:0c:8a:5d:db:05:8f:40:5e:47:3d:98:9d:85:c6:7b:57:ec:
91:64:ce:72:ce:ff:03:89:96:0b:7c:71:d8:51:74:5e:dd:ba:
a3:12:e1:f3:60:74:5d:47:ff:9a:9e:29:61:32:e0:a6:93:d3:
07:cf:47:4f:48:e1:51:7b:d6:3e:8f:df:22:e8:f0:ec:0c:2b:
c7:a0:bd:09:7e:6c:de:20:74:48:dd:b6:7b:1a:eb:67:38:d5:
40:16:35:b6:39:64:ef:6c:0c:27:f9:e2:b9:94:68:a9:28:b0:
c3:f3:8e:c2:a0:a5:2d:33:82:3e:b6:0a:a8:1b:07:f9:bc:ff:
84:d9:9c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:29 2026 by rpki-client