Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
File: ya74cWdYXSiYMVqjdT8_po2tLG0.mft (raw, json)
Hash identifier: ktT75lcHXTRJphvLI5Esq7xkIXsuui8VS308mLw6HWM=
Subject key identifier: A4:9E:4E:6D:78:41:FD:B2:CB:CA:25:1E:31:29:0C:4F:0A:AD:0D:D2
Authority key identifier: C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
Certificate issuer: /CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Certificate serial: 019DA453BA730C20712357D0CAFB5AFFDD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
Manifest number: 0591
Signing time: Sun 19 Apr 2026 06:00:43 +0000
Manifest this update: Sun 19 Apr 2026 06:00:43 +0000
Manifest next update: Mon 20 Apr 2026 06:00:43 +0000
Files and hashes: 1: 4PMuCFyBSoj7qyq3rjq0aPdFuCI.roa (hash: kOdph/hAaSpeDx3Y3960ZxqCLZYMPimF4UrI1AiHxJA=)
2: ya74cWdYXSiYMVqjdT8_po2tLG0.crl (hash: kfPm+oCLGIiEAWOJA8R78mghbW2A7GWBmO7q/E/4vn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:ba:73:0c:20:71:23:57:d0:ca:fb:5a:ff:dd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9aef87167585d2898315aa3753f3fa68dad2c6d
Validity
Not Before: Apr 19 06:00:43 2026 GMT
Not After : Apr 20 06:00:43 2026 GMT
Subject: CN=a49e4e6d7841fdb2cbca251e31290c4f0aad0dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:11:23:3d:93:fb:a6:70:5b:dd:f1:68:4d:66:
09:17:6f:bd:00:96:01:e4:05:a7:c5:17:77:f2:c3:
c5:14:97:a6:87:a1:e5:cb:50:8c:2a:ba:9a:85:6e:
80:e5:76:71:80:54:b1:b0:58:04:ea:ff:ce:cb:58:
cb:b7:c6:f9:e5:84:28:bb:a2:a2:2f:05:a2:c3:a0:
98:63:d7:19:80:90:f6:19:51:c6:25:32:ff:c0:52:
2f:3c:1a:fa:5c:75:97:ca:f0:e7:34:3b:fb:06:b1:
44:bf:9e:04:48:18:44:ea:65:06:be:7a:31:b0:9b:
24:d9:db:51:82:21:ac:eb:fd:05:f9:3c:1c:80:b3:
f9:5e:6e:5a:93:d9:90:b1:a9:3b:19:74:44:7d:57:
83:93:e7:f3:ea:a8:3e:16:9e:42:0d:d8:d4:d5:ae:
2e:df:fc:d4:9c:8c:33:29:49:10:bf:da:12:4c:e5:
c5:b4:21:46:7a:e1:0b:e6:3f:21:2e:cf:cd:f5:b5:
da:10:e8:25:fb:ff:2c:10:97:40:9f:21:05:bc:67:
93:a9:99:b7:d2:1e:a9:0d:83:f6:1b:8e:f9:f4:15:
e3:16:9c:6b:d0:00:0e:be:d6:83:c4:f4:f2:c6:2b:
d1:81:4b:92:74:05:76:40:0a:cd:c5:a4:ca:a1:64:
60:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:4E:6D:78:41:FD:B2:CB:CA:25:1E:31:29:0C:4F:0A:AD:0D:D2
X509v3 Authority Key Identifier:
keyid:C9:AE:F8:71:67:58:5D:28:98:31:5A:A3:75:3F:3F:A6:8D:AD:2C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ya74cWdYXSiYMVqjdT8_po2tLG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85ce82-dd06-4958-9e82-db10dcfec4bf/1/ya74cWdYXSiYMVqjdT8_po2tLG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4f:c5:62:6e:bf:9f:65:e2:82:bc:df:40:57:96:3d:11:24:
93:f3:f9:e8:89:aa:26:71:27:74:1f:9a:14:ea:01:3c:58:f8:
ef:97:13:17:a0:4a:d6:81:1e:86:8e:00:b0:12:48:78:c9:05:
af:f0:c3:e2:f8:fc:d6:57:2d:1b:6f:d4:f6:26:a4:0a:5f:41:
b7:c9:32:9d:db:c8:1b:76:67:08:1e:d7:f1:f9:73:df:7c:f1:
27:08:cf:7b:4f:c1:7c:cb:37:ab:b3:85:fc:6a:73:d0:20:b9:
46:47:83:3a:3c:51:87:a8:57:cb:e7:e4:7a:07:7d:fa:df:6f:
55:f7:85:90:0b:9a:6b:e9:d3:9c:c6:fa:2b:d9:c1:15:be:f2:
e0:04:46:a4:3a:60:1a:b5:38:14:b3:89:3e:6a:63:7e:87:c2:
23:7c:35:54:6c:35:9c:cc:19:a9:65:8f:d5:39:93:ba:0f:04:
ff:0a:c0:95:37:64:b4:9e:7d:9f:d1:84:db:b7:e6:99:65:bd:
11:5f:cc:b1:5f:06:36:ea:f9:20:c2:4e:79:46:37:4b:56:9a:
db:4e:e8:16:f0:7f:8d:5c:65:cb:07:e5:96:01:87:d6:9f:e0:
8d:3f:3d:08:e0:c8:98:8d:02:e2:f1:ad:77:74:75:7c:fe:40:
8d:e4:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:02 2026 by rpki-client