Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
File: YTXB97cUDIcufz_zRitO3GMddnQ.mft (raw, json)
Hash identifier: e1b5yxxZtG5aCiybrqQl7MHiTeTFAzXOV6NOT7u3+6M=
Subject key identifier: 32:6D:88:11:3B:34:3E:06:46:25:81:DC:79:EF:70:08:DB:B4:B0:12
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019D98F4DF63CA4147F470E0ADFD6863287E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
Manifest number: 148D
Signing time: Fri 17 Apr 2026 01:01:17 +0000
Manifest this update: Fri 17 Apr 2026 01:01:17 +0000
Manifest next update: Sat 18 Apr 2026 01:01:17 +0000
Files and hashes: 1: BGkcJfFENHuGNqi5KdKaJIpLpGs.roa (hash: 14oAN4dkpEIBe9l+/o/n9bZWb4SWffTykhypz7bbQig=)
2: YTXB97cUDIcufz_zRitO3GMddnQ.crl (hash: 5AzC8E1urFeNYmX0ScC/HAZCoybtNpnUZYjG50crPhI=)
3: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (hash: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:df:63:ca:41:47:f4:70:e0:ad:fd:68:63:28:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Apr 17 01:01:17 2026 GMT
Not After : Apr 18 01:01:17 2026 GMT
Subject: CN=326d88113b343e06462581dc79ef7008dbb4b012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:b7:24:e6:63:21:d9:04:c2:81:b8:65:ff:
fe:6d:2e:04:6b:e4:96:8f:d6:f1:ba:d8:a7:a9:fe:
58:d1:91:2b:19:0a:59:c3:74:d8:57:0a:2b:02:08:
a1:fa:33:a0:00:96:ef:11:d6:ab:0c:9a:b8:2c:25:
c6:ed:0c:cf:82:8f:dd:96:65:67:4e:d7:b3:86:c6:
a6:14:73:e8:bf:4c:9e:fc:c6:7a:02:10:27:75:bd:
cd:12:35:8b:98:df:83:49:db:ac:f5:b9:ab:48:ea:
da:cf:84:89:f0:b3:7e:2e:e3:40:20:d6:7b:9e:c0:
54:e0:2a:33:b4:37:8f:c9:d5:6c:a4:b0:75:a0:2e:
2a:45:53:96:f3:68:8a:80:2c:6e:c8:11:33:c2:3b:
4f:ee:df:c8:90:2e:85:00:e7:4a:5c:4d:59:44:ed:
21:b9:83:f0:6b:e5:75:81:ea:4d:d9:be:cf:05:0c:
bd:53:80:62:52:bd:30:05:4a:a0:02:ed:b1:03:a6:
b5:63:b6:2f:9c:2e:66:25:9a:98:4c:e0:54:62:d5:
e7:d4:01:a6:11:88:ad:87:87:01:6a:d3:93:36:88:
b3:7b:e3:50:79:00:0b:9f:42:00:09:ae:95:1b:ae:
6f:7c:37:3e:04:a0:cb:23:d7:40:d7:86:60:c4:9d:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6D:88:11:3B:34:3E:06:46:25:81:DC:79:EF:70:08:DB:B4:B0:12
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:8d:21:cc:49:b7:86:56:a9:03:1f:2a:c3:7f:c2:00:6d:75:
cd:18:e0:6b:68:13:93:30:a6:77:47:d4:d9:e9:d2:93:ce:45:
4a:8e:86:fa:8d:3f:a9:7a:78:27:07:e4:c7:37:36:c8:f5:54:
b4:ac:14:dc:d6:c2:5d:88:2a:b8:c7:03:2c:8c:99:2d:7b:94:
02:ea:6a:ad:c3:7d:28:49:59:16:56:c6:9c:8f:46:32:41:f3:
86:a0:c4:c0:6e:ae:28:e1:fb:78:ef:d9:42:56:6c:fa:2f:53:
57:75:4c:03:88:c0:23:37:ed:99:ba:d6:29:ca:a1:0c:48:5d:
dd:9e:63:14:6c:df:de:22:c4:fd:41:94:f7:cf:bb:a7:d5:2c:
11:b6:19:5d:ea:6d:c2:6a:2e:09:09:4c:56:c6:17:d8:60:50:
3c:60:a2:2b:a6:b4:9c:13:fd:34:18:5f:b7:77:df:61:d4:73:
6c:ba:d6:96:a6:0e:c8:db:e7:db:ae:d6:ab:f8:3a:eb:04:77:
f0:31:ea:fc:c0:8b:0f:83:64:0a:04:85:d4:a5:e8:ba:08:dd:
01:2c:25:bf:d9:10:28:91:a0:27:2c:82:08:c8:16:72:55:a7:
eb:3e:68:2c:3d:89:69:7a:4c:1a:b6:3a:30:7e:85:43:1f:78:
1f:37:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:19 2026 by rpki-client