Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: LAqrTkkJ/b2+27rYVA1oQ3Lu7UCEZFHmHhf7ZQ2VUuQ=
Subject key identifier: CB:6B:8E:6F:80:80:C3:2D:59:89:77:E8:DC:E4:AE:55:E8:9E:3E:3A
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019D9AAB76B9357580E547729AA009756589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 1797
Signing time: Fri 17 Apr 2026 09:00:21 +0000
Manifest this update: Fri 17 Apr 2026 09:00:21 +0000
Manifest next update: Sat 18 Apr 2026 09:00:21 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: maZIrBiKrL/fIS7gm8xkZdKoJvpaw5kj5ugIRbb3/8w=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:76:b9:35:75:80:e5:47:72:9a:a0:09:75:65:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Apr 17 09:00:21 2026 GMT
Not After : Apr 18 09:00:21 2026 GMT
Subject: CN=cb6b8e6f8080c32d598977e8dce4ae55e89e3e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:36:cd:33:c4:96:03:c4:64:bc:43:79:80:
e9:c5:91:aa:f3:09:4d:ff:ec:8d:30:27:5d:50:78:
2c:d6:0f:05:37:04:bf:d0:ba:6e:7a:59:d7:4e:08:
d7:e3:65:45:65:93:79:47:c1:44:9e:82:fa:a4:91:
38:da:74:7b:df:81:59:b4:0f:f0:39:e8:f0:31:9f:
86:8f:5f:b1:c4:59:0b:48:cc:2d:e3:d2:2f:85:bf:
c6:33:2c:77:7d:31:10:7f:bd:e2:20:64:b1:40:99:
d5:93:38:07:02:52:f2:5a:34:85:29:ef:e4:91:08:
9e:e8:9c:68:55:d8:07:ce:86:c7:3c:79:70:fc:22:
2c:ac:76:4f:48:d6:ea:a0:f3:05:6c:01:a1:01:62:
f0:c1:38:e1:80:ef:48:ec:e1:6a:58:60:99:a4:93:
69:b4:3d:f7:67:ec:6c:59:3b:21:05:0a:44:57:c4:
6e:8e:3a:d5:50:2f:cd:ff:3b:4c:0f:a8:2f:23:b4:
96:15:2b:f6:56:7d:9a:e5:6d:39:ca:87:af:8d:93:
9b:f3:b6:ae:d6:e8:b5:39:68:0e:40:35:c0:84:6e:
8e:d3:9b:ac:45:a5:65:63:9b:fe:78:e5:52:7d:4b:
4e:f9:c4:d8:57:e4:33:6f:af:29:30:24:ff:48:84:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6B:8E:6F:80:80:C3:2D:59:89:77:E8:DC:E4:AE:55:E8:9E:3E:3A
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:bd:4d:d7:6e:78:b6:0e:8f:57:ef:1d:90:46:97:21:cc:
3d:27:ed:36:6c:d7:7c:f7:cf:e4:f3:eb:e8:78:ca:d7:ab:cd:
93:76:57:cd:01:94:32:f1:2c:b4:d2:f0:23:fd:f8:bf:d6:ca:
e4:b0:bd:f3:db:49:39:21:6a:ea:6c:71:63:65:a4:6f:83:dc:
7b:e7:dd:60:d7:e9:26:f7:fc:58:81:78:52:c7:88:d8:27:3d:
00:23:1c:56:8b:53:56:76:29:c0:18:ca:8a:7f:aa:96:43:b9:
f3:13:1a:10:d8:68:1b:8d:5e:f8:c9:22:d4:dc:f9:2e:1d:34:
d1:4f:b7:22:69:f4:85:66:53:ce:62:81:95:36:e1:ba:0e:8a:
5b:67:e7:b3:17:a6:01:20:53:6a:73:ce:1a:e6:a1:79:57:55:
f0:e7:e4:64:e9:cf:da:80:04:41:e9:ee:23:3f:71:97:5d:ce:
08:b9:6e:e2:74:57:e8:89:3a:16:90:bd:75:1a:0f:48:c0:32:
5e:b6:02:be:ce:b2:54:f0:77:a4:8d:cb:82:40:0c:65:19:c9:
fe:b9:7f:bc:59:69:86:dc:30:6d:31:eb:ae:ea:e6:39:59:84:
7b:c7:93:3b:47:e5:7f:10:26:c7:a8:8d:73:00:81:ef:14:71:
ea:47:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:55 2026 by rpki-client