Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: E9h/nig6HKPEGHY8q3Dkz/FqVT9Lo4XSgJQyzlGxjaM=
Subject key identifier: 61:B0:47:8E:C1:CD:FF:71:05:B9:9C:DB:BF:42:2D:23:D6:17:69:B2
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 019D9961E366EA74B8A46DE38E6EE3D80CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 1332
Signing time: Fri 17 Apr 2026 03:00:22 +0000
Manifest this update: Fri 17 Apr 2026 03:00:22 +0000
Manifest next update: Sat 18 Apr 2026 03:00:22 +0000
Files and hashes: 1: 49DXB44yIji8t0Vtkb2JOEt-9YU.roa (hash: Q0egqvB13KLmhzjLlUFrH7e6woM10xcOj+hIzVjBTDA=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: J5uIoL3dtYNKSIWUqybEgqschjp4ds20uissGWylmvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e3:66:ea:74:b8:a4:6d:e3:8e:6e:e3:d8:0c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Apr 17 03:00:22 2026 GMT
Not After : Apr 18 03:00:22 2026 GMT
Subject: CN=61b0478ec1cdff7105b99cdbbf422d23d61769b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:7b:f0:9a:57:9d:98:ea:3f:4f:2f:02:fb:
53:89:db:aa:12:86:58:6f:90:8c:68:03:70:b4:58:
ed:1a:f7:27:cc:3a:43:51:0c:d2:a1:d1:62:f9:20:
77:73:2d:bf:30:58:9a:a4:fe:16:ed:61:7a:c6:3a:
92:73:bb:ef:19:99:81:3e:47:31:9f:2c:8f:72:96:
81:20:d5:86:2f:0e:ad:6e:26:79:49:89:04:ff:27:
3d:43:0e:b5:af:0d:65:58:3e:8e:9e:b1:4a:eb:1c:
8c:d2:84:49:d1:e8:77:0a:d1:c9:1d:51:75:60:ea:
d4:61:0a:7d:0f:1f:e4:9f:99:93:66:e2:74:6c:3c:
7d:9d:fa:8a:ab:a4:2f:e9:bb:62:d2:1f:0d:ac:3c:
19:fb:08:ca:ce:9c:5a:49:2c:c2:6c:7f:4d:41:59:
87:12:33:51:2c:5a:2c:fa:e9:12:22:a3:09:9a:e5:
e9:f6:40:cf:11:f7:61:6e:a7:0a:d7:58:6e:86:77:
8b:28:b4:ef:cd:22:28:7a:48:c5:40:9d:78:9d:f0:
e3:f6:45:5e:bc:fc:65:42:0f:e2:2a:37:2c:ff:c6:
a7:ad:19:ad:37:7e:26:c9:49:a9:fc:2e:31:ab:95:
be:17:5b:fa:fb:91:4a:5a:af:35:1d:f8:ee:43:d2:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:47:8E:C1:CD:FF:71:05:B9:9C:DB:BF:42:2D:23:D6:17:69:B2
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:33:81:5d:d5:f4:8d:4f:59:83:99:c7:e4:29:8d:18:47:d4:
ba:6a:1b:2e:12:b5:27:6c:4a:b7:65:0c:70:f7:08:94:9d:d4:
73:06:12:5e:af:05:14:16:f7:d0:2f:cd:63:72:fb:86:27:c0:
07:29:f9:94:bf:f8:4e:e5:6e:1a:4b:98:86:f0:f0:91:ba:b7:
03:e0:c6:b0:25:f6:f9:9b:21:fc:d4:e3:41:0b:35:ab:e6:79:
a6:d2:85:7d:e1:2f:61:b3:84:f7:9b:ae:df:27:db:7e:9b:1d:
51:dd:80:ec:1b:53:5b:b8:db:18:f5:c9:6b:0c:21:c7:e9:e8:
ea:0e:bd:a7:ff:6e:7c:55:36:c9:84:a7:0f:8e:a6:61:e8:bd:
4f:ca:51:70:78:ec:ac:38:6a:ee:33:59:8d:e1:b2:27:e3:3e:
43:e4:a6:94:3f:8a:73:68:d0:24:5b:96:78:4e:3f:36:24:d4:
9e:61:0e:aa:d6:5b:8e:06:58:e0:e5:73:a0:15:6f:2b:14:d4:
e3:91:e8:e4:82:2b:4b:1f:d8:bd:cc:fa:76:e3:26:65:d7:95:
35:67:f6:db:40:f2:da:ec:46:bc:d6:eb:46:52:4e:a3:8f:9b:
19:ed:da:59:52:91:05:65:bb:53:f5:62:95:18:19:71:90:17:
df:cd:11:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:21 2026 by rpki-client