Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
File: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft (raw, json)
Hash identifier: v6aJPQUFNMkz4+RpxoUx4B8z+jzav21oHimBq5Zqexs=
Subject key identifier: 98:23:04:74:86:A5:EB:2E:ED:34:90:46:57:7E:6D:A0:0B:B9:76:68
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 019D99D04283F64C7E4B5881B7FBF36DF6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
Manifest number: 0CD2
Signing time: Fri 17 Apr 2026 05:00:55 +0000
Manifest this update: Fri 17 Apr 2026 05:00:55 +0000
Manifest next update: Sat 18 Apr 2026 05:00:55 +0000
Files and hashes: 1: T4MHAA0kaBLSaNbR8DoNuRmsGR8.roa (hash: VtgvY+pr4Qh9U0W3p9dUNdOupQfVK9H5yjxhbie2llY=)
2: Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl (hash: AY8tyAjFBq6/OqolOuSQiFGGrpmusCkxEIQnxfPNPsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:42:83:f6:4c:7e:4b:58:81:b7:fb:f3:6d:f6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Apr 17 05:00:55 2026 GMT
Not After : Apr 18 05:00:55 2026 GMT
Subject: CN=9823047486a5eb2eed349046577e6da00bb97668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:f9:d8:1d:6b:6d:a8:a2:c6:6b:8b:37:9f:
ac:28:39:d5:b7:5d:16:fc:f1:40:6a:e9:f5:59:b3:
72:76:d4:0f:c9:22:af:45:8f:2b:de:4a:4c:1d:c0:
0f:6f:d1:1c:fc:3f:8d:a5:f8:d4:c8:fb:2f:40:a5:
a6:f8:74:1b:35:66:1c:d0:a7:55:fd:b7:fe:50:b7:
c2:19:73:67:a1:e6:a3:59:af:70:08:bc:36:6c:b1:
b7:b5:1d:2f:c3:cb:87:ea:a1:73:6a:ed:14:46:03:
67:c3:92:de:2a:8d:5a:12:b4:c1:32:11:4e:bd:0e:
f7:7d:af:62:82:c9:31:e9:a6:6f:3c:ce:c0:29:f4:
5c:3b:9f:62:0d:f1:b1:6c:34:3c:7f:4c:89:d9:de:
65:9f:73:b7:53:c3:4c:8a:a3:cd:dd:40:49:59:29:
39:a4:45:b9:44:0c:be:a9:85:65:30:02:b1:2b:5e:
17:d7:9d:02:15:4c:1c:49:78:48:82:64:24:68:5c:
7d:9c:91:be:67:28:89:97:68:9b:b5:d2:ab:ff:b9:
91:cc:d9:6d:2e:67:51:38:e0:a2:67:a8:1d:29:c5:
0a:24:4d:0d:3f:55:de:48:98:b1:c8:16:2a:88:9d:
84:bb:d1:2f:12:af:fc:a1:d2:ff:fe:1f:58:8c:14:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:23:04:74:86:A5:EB:2E:ED:34:90:46:57:7E:6D:A0:0B:B9:76:68
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:62:47:94:b8:d0:5c:fb:ff:ea:94:f8:30:7e:f1:7b:17:a0:
26:0a:9a:13:7a:3a:f4:fc:38:ec:41:71:58:90:92:2d:46:2b:
eb:4a:84:a1:05:61:45:46:98:a0:c4:47:13:78:b1:a0:d4:ca:
12:db:fa:56:d9:e1:39:c3:03:aa:d2:d0:0a:dc:c4:a2:77:90:
54:89:25:fa:20:48:c0:fd:cb:a8:1e:39:f7:6f:0f:f7:d9:c1:
aa:08:87:ba:3b:c9:54:65:82:8b:2b:da:1f:4a:aa:c2:25:3a:
3a:8d:0a:08:e5:c5:86:f3:e1:50:1e:6a:da:40:b2:30:6d:78:
92:fe:92:64:ce:e9:58:1d:bd:4d:02:f2:f4:2f:ea:af:d7:d2:
7f:ee:be:6d:bb:33:a3:d8:d3:a2:f5:32:30:b3:6d:d8:3f:ce:
8e:5c:80:2b:bf:4f:d6:6f:b1:e1:90:fe:3b:de:31:09:8e:87:
c4:83:8d:78:46:ab:fe:78:8f:00:fb:d7:af:2d:ca:d8:8a:88:
62:17:8d:99:39:ea:b7:cc:74:c8:9f:67:a5:6f:80:f1:2a:95:
32:15:7e:4d:a5:11:cf:94:6d:d9:2e:37:f9:91:63:ee:d2:98:
83:7b:8e:da:3d:aa:61:27:8c:d6:35:f0:35:d4:e9:67:2f:f6:
93:06:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:18 2026 by rpki-client