Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: NtfKqbCORFThD5tyu7ITZ+3jPIg8Zc895vot9RjKr2I=
Subject key identifier: 56:94:AC:1E:99:1B:CE:66:33:73:7A:A2:8A:90:65:8B:A5:D0:74:03
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019D9999017BFEA268108451A032EA8A658A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0C7E
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: cgiaZwDI+gs30tJICeTua7Dt8D6cpmVfQMATcGr/ho0=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:01:7b:fe:a2:68:10:84:51:a0:32:ea:8a:65:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=5694ac1e991bce6633737aa28a90658ba5d07403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:55:b4:fe:b1:2c:fc:71:29:6d:0c:91:a6:
5e:01:9e:3a:28:ea:4d:62:50:6a:af:01:83:20:a4:
8f:8c:c0:02:f7:04:4b:d3:d9:77:9a:57:e3:cc:b4:
ee:39:e5:4c:aa:53:af:22:1c:a4:0a:57:6d:57:67:
5c:9d:7d:e9:9e:75:12:5e:4f:60:ff:f5:f6:06:cb:
24:f2:57:4e:f1:e8:89:be:a3:fb:83:e3:51:dd:77:
18:62:68:7d:8c:ca:e1:19:12:1b:61:3e:a7:95:84:
67:e9:34:60:52:4e:9b:82:71:97:a4:d8:18:97:c3:
63:9b:cb:d2:07:90:c8:e2:66:14:b1:4a:ab:f6:54:
4b:92:5e:74:1f:55:d4:bb:23:af:54:29:3a:2a:da:
34:57:6b:f7:a9:db:eb:30:f8:e5:03:be:f7:20:00:
cc:b0:73:70:a7:ba:28:b7:b4:6f:1e:e6:67:2d:96:
c7:d6:08:a4:35:c4:fb:64:44:1a:00:3a:82:8a:5c:
83:5c:96:85:66:3d:58:de:cd:a5:60:9b:a4:1e:52:
2c:aa:54:33:89:10:68:25:1a:b9:3e:92:a9:20:4f:
11:3a:30:5f:8e:b4:0a:bc:d9:31:9e:0a:a0:8e:dd:
f2:7d:fd:9d:98:9e:85:f1:cd:75:83:78:e5:47:01:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:94:AC:1E:99:1B:CE:66:33:73:7A:A2:8A:90:65:8B:A5:D0:74:03
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5b:db:19:10:d2:e2:24:1d:e1:bf:e0:1c:f2:e8:fb:49:66:
d3:a0:bb:a6:f0:fb:af:a9:0d:8d:36:e5:ac:9b:9e:57:62:3f:
ab:0a:c1:6b:e7:2e:35:1d:06:b0:fc:2b:5e:5f:8a:d3:bf:a0:
07:82:55:f8:93:e1:9e:99:20:25:98:65:05:be:ba:b8:83:0c:
c1:23:d6:3c:a8:b7:1a:39:49:6a:c7:1d:95:8e:5e:90:53:5f:
71:4e:55:a8:2b:2a:70:82:53:fc:ea:3f:d0:28:a3:a4:23:45:
b0:26:df:76:c8:62:7b:f7:9c:33:ed:21:63:24:3e:3f:2f:db:
7a:ad:d8:82:d9:53:a1:51:63:1f:9b:53:bf:69:a5:a9:49:0e:
37:18:9a:6b:40:53:d7:c3:34:ac:66:2e:2e:6a:04:af:65:13:
4b:cf:1f:d7:13:ff:e1:ac:93:cc:f0:37:ae:7c:1c:fa:aa:7a:
91:8b:c9:a0:9d:6c:e7:fb:5c:2e:0e:47:69:8a:45:47:48:87:
90:80:b0:51:04:25:cc:56:fe:a0:e6:ed:e3:d5:68:e6:7f:8a:
47:ab:a3:78:98:d8:6d:7c:7e:88:42:11:1f:08:f5:f4:dc:41:
94:af:44:f2:09:e1:82:52:f4:61:45:3e:f6:28:dd:3b:b2:b2:
ca:78:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:01 2026 by rpki-client