Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: HOFxH3x5YmT2HxzH+D6GAyn+2SFHHxxpbaiuiA/0FOE=
Subject key identifier: DF:16:9B:7B:92:C6:60:47:CA:90:8A:02:78:21:63:09:DA:E5:60:3A
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019D99999A8D58604B9E9254C93B733B9202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: Q7jDfTUfZRUKziV9Hgta3w+BFFa0xBkj32jdA1szzL4=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:9a:8d:58:60:4b:9e:92:54:c9:3b:73:3b:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=df169b7b92c66047ca908a0278216309dae5603a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:03:f2:c0:7f:d5:ca:07:2c:2c:ae:2d:93:87:
a2:8f:14:2a:53:21:f4:40:05:8f:c2:a2:83:55:df:
e9:c8:d9:45:87:11:0a:6d:fd:ce:a7:6e:c8:0e:db:
2e:58:0e:9b:50:a6:21:c6:4f:c7:3c:b6:e0:e8:61:
e7:fe:8a:92:a8:30:ae:b6:94:6e:1b:18:64:18:de:
82:8d:82:c5:d1:42:94:f6:20:42:ee:02:d2:58:8a:
c0:4c:e3:cb:7b:b4:cf:a4:11:56:32:a6:00:fb:7f:
a4:18:a4:cb:9e:4a:9c:ae:cd:33:db:e8:d9:ae:86:
5d:cd:5e:d9:ab:3a:21:73:32:46:ab:ae:cf:9b:22:
00:d5:3e:66:d8:2c:59:dd:51:bd:04:2e:c3:82:7e:
c3:e2:5a:72:4d:40:7e:78:c0:86:82:54:ac:a2:b5:
48:52:9f:f0:7c:b5:18:41:1a:03:99:c1:3a:a4:c7:
50:17:7c:fd:32:dd:c4:41:a0:97:79:f6:be:f6:27:
c5:2e:12:88:39:09:e3:ee:a5:a3:fc:95:63:f1:d2:
b6:1a:41:d7:ba:3c:4d:1b:ca:8d:d1:52:c3:d9:0f:
75:0f:4d:23:a6:5c:dc:69:10:11:d0:f5:fb:83:49:
1a:fc:2e:b4:9c:f4:07:3f:78:8c:2e:5a:7f:c7:49:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:9B:7B:92:C6:60:47:CA:90:8A:02:78:21:63:09:DA:E5:60:3A
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6d:91:41:24:53:7c:42:b6:00:77:b7:71:ff:10:bb:b3:f7:
6a:28:4d:b0:f9:32:38:45:da:7d:47:e1:17:90:d7:3b:ac:f5:
70:56:cb:c6:43:93:65:84:d6:86:b6:7f:5a:e6:2e:8f:4a:43:
79:be:54:87:57:94:46:17:bf:24:be:64:14:20:43:a1:47:42:
da:97:a8:12:54:51:56:73:41:c7:b4:5a:7a:1d:20:cb:f1:dc:
de:d8:2f:2f:05:ab:e2:c0:01:dd:c4:15:af:dc:3c:13:80:be:
93:2e:41:81:0e:e6:27:b0:41:7f:93:de:e5:b5:d1:64:26:8c:
8b:fb:d7:c5:bd:2b:d8:16:69:28:a8:db:6f:90:c1:ac:bf:f6:
85:cd:95:a3:af:c9:38:e2:80:6d:dd:6d:e3:e4:c7:8b:1a:2a:
f0:7a:bc:18:fb:d5:e7:7a:26:73:33:bc:81:17:2f:82:23:b5:
83:df:d7:1e:e9:a6:81:a1:93:24:05:67:28:e3:83:e7:56:07:
29:08:23:0b:16:e5:d1:90:69:c4:b1:e6:fb:f6:e0:8c:0a:c1:
dc:90:c6:36:1d:e0:02:8f:4f:b1:d8:66:80:81:99:95:2e:4e:
54:68:85:90:5a:04:e5:d4:a7:48:39:94:fd:79:7d:95:dd:3e:
50:f6:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:30 2026 by rpki-client