Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: unqvVleUzy15IJL6iIi+YwqtPq46BG4AOGpwP7/+7kU=
Subject key identifier: 63:6E:82:4B:F6:1D:AC:62:77:DF:40:E2:CB:DA:21:76:CC:5E:12:F9
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019D9AE2A534CE1A283EBD49E83871E1FA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 148E
Signing time: Fri 17 Apr 2026 10:00:37 +0000
Manifest this update: Fri 17 Apr 2026 10:00:37 +0000
Manifest next update: Sat 18 Apr 2026 10:00:37 +0000
Files and hashes: 1: BGkcJfFENHuGNqi5KdKaJIpLpGs.roa (hash: 14oAN4dkpEIBe9l+/o/n9bZWb4SWffTykhypz7bbQig=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: 7YzMQho/uEzvIs8HqWem8v8G70+rdqlxdxYk8biuGIg=)
3: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (hash: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a5:34:ce:1a:28:3e:bd:49:e8:38:71:e1:fa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Apr 17 10:00:37 2026 GMT
Not After : Apr 18 10:00:37 2026 GMT
Subject: CN=636e824bf61dac6277df40e2cbda2176cc5e12f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:53:fa:37:9b:a3:cd:e3:ff:60:ff:d4:f7:49:
60:af:8a:22:b8:84:6c:66:f4:9f:f4:99:b0:d7:1f:
c5:dd:2f:f9:45:ea:04:f7:03:12:a2:3e:d4:ad:4d:
bb:be:37:87:de:f0:1d:b9:f4:14:f8:11:28:e7:3d:
91:4c:48:d7:05:d2:3d:f3:9f:f4:84:8c:99:ec:a7:
59:6a:9d:07:1f:3d:b0:0e:cc:87:50:b5:1a:ff:95:
78:33:0e:37:57:1f:36:fb:f7:51:b1:46:0e:e2:01:
61:41:97:13:67:69:5b:98:59:99:70:8d:43:14:be:
d1:d6:b4:21:b6:21:c9:38:79:c2:2f:bd:b4:fe:df:
e6:00:e6:b9:73:21:ef:1a:00:59:80:9d:84:64:53:
05:33:ad:d4:db:7e:d6:1e:8b:98:b6:f1:8e:6d:1f:
fd:cb:b3:08:24:99:2e:a0:50:ec:9e:90:7b:8f:ca:
90:19:b8:59:b5:79:d7:11:05:f2:a2:eb:1c:72:be:
9a:fd:77:bb:c2:61:f1:e4:a1:60:23:b7:f1:c1:69:
c7:bd:68:c3:ef:11:fe:16:41:f7:ff:8b:2c:07:99:
c5:fd:55:e6:54:f9:52:b0:04:5d:60:6e:7c:12:f7:
19:87:17:30:55:0f:d9:d7:48:af:b3:22:7c:d4:42:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6E:82:4B:F6:1D:AC:62:77:DF:40:E2:CB:DA:21:76:CC:5E:12:F9
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7e:32:e2:f1:2c:00:c1:91:55:4b:ef:55:6d:c4:26:a5:04:
7e:e6:f2:5b:63:e6:44:c8:18:33:04:7d:2d:da:28:07:4d:1c:
17:9f:0a:87:c6:7d:98:fa:54:86:00:65:78:f6:47:c3:87:42:
be:b8:65:65:51:8c:9e:54:46:fd:21:70:78:be:bb:d5:83:64:
f0:54:44:27:19:b6:5f:ca:f9:af:46:da:34:23:34:eb:eb:72:
fc:16:86:9e:45:fa:81:21:42:9d:c5:8f:15:3b:79:a8:e4:d1:
c5:ad:98:e6:1f:88:a0:89:3f:04:2c:2a:ba:d9:17:9b:0d:24:
7d:e9:40:5f:e7:6c:13:0b:fd:ac:24:ee:d8:8b:6d:c8:f4:2b:
fc:7a:8c:f2:4b:03:ab:2d:a7:9d:3e:0c:2d:bd:e0:e2:35:c7:
08:4e:e8:ea:d4:50:47:03:21:c0:9a:22:25:77:f0:60:db:68:
ba:c1:22:89:0c:41:d2:72:bb:a3:d1:d9:d3:26:83:4a:99:19:
ec:51:2b:9f:1f:5f:cf:17:bf:57:80:f9:98:81:82:da:20:e8:
41:e6:32:8d:51:ae:6c:ac:df:90:5a:f7:2f:44:cf:dd:99:73:
21:b2:bb:94:eb:57:67:1a:04:2a:c2:b2:e0:ab:1e:53:cf:3f:
82:50:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:25 2026 by rpki-client