Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
File: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft (raw, json)
Hash identifier: QJzzYhDVjFovfnUONcpxKp8P3MWUPxJjkqteTddLV0A=
Subject key identifier: 10:43:2D:0F:DA:AD:1F:B0:AA:A4:0E:49:59:1F:27:9F:5D:17:69:B7
Authority key identifier: 62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
Certificate issuer: /CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Certificate serial: 019D9BBED0CA2B15F06F396628F53CA76B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
Manifest number: 08DF
Signing time: Fri 17 Apr 2026 14:01:06 +0000
Manifest this update: Fri 17 Apr 2026 14:01:06 +0000
Manifest next update: Sat 18 Apr 2026 14:01:06 +0000
Files and hashes: 1: 1xbn_UMCw0INiad24Fz-EfLf1Gw.roa (hash: SZrNeUwfQoqqElnDWbZPqxb5PbXGACF+9AzBOt+xfa8=)
2: 6XExm7Uo-EU0Ms0tsb7xKnyJkVk.roa (hash: BWgqT1gKxehU5OIENtOQqrP4y0cmP4jYKvHGk1A4LAc=)
3: YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl (hash: Ficageak7HupIakXNL4OM/h/G7fBrfobZko8y0euJZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:d0:ca:2b:15:f0:6f:39:66:28:f5:3c:a7:6b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c66267943d413cdf760dc6850104c1c0fc1d65
Validity
Not Before: Apr 17 14:01:06 2026 GMT
Not After : Apr 18 14:01:06 2026 GMT
Subject: CN=10432d0fdaad1fb0aaa40e49591f279f5d1769b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:31:51:26:b9:64:e2:17:94:3a:56:32:16:70:
41:58:01:2b:32:42:b9:95:34:eb:3a:c5:7f:ff:7a:
3b:23:5a:16:b5:ca:98:ab:35:1f:c3:3b:e0:83:f9:
33:92:91:1c:ff:29:06:af:c6:57:e9:3b:88:94:89:
ca:24:0e:89:0a:6e:eb:67:bc:83:ea:cf:51:e5:34:
66:3f:91:31:50:a7:e7:67:61:e2:48:56:08:42:de:
b7:31:22:a6:a9:52:12:e3:d4:d2:47:5b:71:d0:84:
bf:4d:31:a8:23:5b:cb:fb:6e:1c:9d:99:53:79:b0:
2f:d0:76:8a:99:c8:90:9c:3c:14:a9:fa:36:7a:07:
70:d7:a1:ef:e6:99:1e:6b:c4:f5:01:7d:0f:4d:7e:
c2:82:cf:a5:be:97:07:d2:17:8a:54:ac:54:6e:92:
19:53:64:2d:d9:aa:39:d2:0b:8d:14:a2:37:67:8f:
e2:fb:71:a9:e0:73:cb:bb:f0:5e:b9:3a:3c:c5:8a:
fd:fe:31:c3:81:1e:ee:a5:f2:6f:8f:e7:da:b6:11:
22:5a:24:19:ac:ca:27:93:10:39:89:16:34:3b:34:
a4:c1:7a:e2:06:74:7a:8a:00:39:d2:a5:74:35:ad:
fb:e6:14:e8:51:27:9f:bb:90:ab:a7:8f:24:38:3f:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:43:2D:0F:DA:AD:1F:B0:AA:A4:0E:49:59:1F:27:9F:5D:17:69:B7
X509v3 Authority Key Identifier:
keyid:62:C6:62:67:94:3D:41:3C:DF:76:0D:C6:85:01:04:C1:C0:FC:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/50f4f7-49cc-4c82-9324-a9d7ad442b3b/1/YsZiZ5Q9QTzfdg3GhQEEwcD8HWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:a7:93:a6:85:a0:c1:82:9f:23:ee:a3:23:47:af:eb:11:
34:15:11:ea:4b:38:36:b0:4b:1b:95:80:80:ca:e6:5e:fc:01:
a5:c0:19:48:b9:34:5f:eb:af:d6:56:bc:2d:89:73:98:80:11:
ea:ac:50:d8:29:77:3a:76:75:87:cc:af:78:48:ad:43:04:a5:
9d:de:48:90:bb:73:0c:86:f1:1a:14:39:de:48:53:a0:97:4b:
0d:52:88:69:a6:0b:9a:5d:34:7b:67:3b:03:43:db:f6:df:5c:
ec:34:c1:a4:31:b0:4b:8c:f5:5e:f9:b5:e7:1e:0d:99:ec:9b:
14:94:b9:57:7c:5d:c8:2a:c1:c1:0e:13:a6:48:48:80:8c:ea:
a0:f1:cc:9a:ae:0d:ff:13:6f:dd:c3:12:3f:e7:f9:1a:09:81:
d4:8d:5d:fc:84:13:bf:c5:ed:0e:a2:82:66:92:fc:f1:95:71:
f0:de:84:d1:28:79:f0:e9:fc:0b:25:b4:1b:fe:d7:76:6b:61:
c0:60:fd:64:56:13:42:b0:f0:23:d2:e0:ce:cb:c7:7d:24:54:
e1:c2:3e:d5:b7:bf:e7:e3:ed:d2:c0:e3:01:1f:10:e5:53:9b:
10:97:bf:97:5b:7c:34:b6:31:a8:85:c2:f1:27:39:b3:63:80:
2f:c4:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:01 2026 by rpki-client