Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.mft (raw, json)
Hash identifier: qRXYhVsghTmqp9VKhTFD/LPs0ltYjgr4083EUCByt70=
Subject key identifier: 7C:E3:DC:F0:E6:20:92:BE:59:8A:96:E1:38:50:47:F0:D6:06:62:65
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 019D9AAB7AB9F82F77DBEF2B0B9D941AA133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
Manifest number: 10E3
Signing time: Fri 17 Apr 2026 09:00:22 +0000
Manifest this update: Fri 17 Apr 2026 09:00:22 +0000
Manifest next update: Sat 18 Apr 2026 09:00:22 +0000
Files and hashes: 1: YJDN0x06cdoc5KS9hfGYfjyk6vo.crl (hash: txWXp3qyHiU8d66+ODvGF6rQHuxcaGQqCO55ptbtvoI=)
2: buEP_tZTxcCY5cv35wHnd5QJtA4.roa (hash: kDd7vjY1Gmajtb+yM1iA4kXpv1+b295rNuhM3eEotP4=)
3: cu3LpBG8kS_4KP69qmFhIuC6yn0.roa (hash: +A0QFPa6rFKeurJR0BtJfs29ZpJr1qidekf5t2vt70c=)
4: iwCms-jh7sNOnDjyiQ87SCaskPM.roa (hash: F9m0OaxudVEa/uHDWRuOEKekT6jQQYP93RpjR2bYjX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:7a:b9:f8:2f:77:db:ef:2b:0b:9d:94:1a:a1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Apr 17 09:00:22 2026 GMT
Not After : Apr 18 09:00:22 2026 GMT
Subject: CN=7ce3dcf0e62092be598a96e1385047f0d6066265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:37:a5:a6:04:d9:85:d0:1b:82:58:44:5d:
3d:30:21:aa:e4:6a:3b:49:0b:1f:b0:23:d0:68:9f:
ac:c9:c6:21:6e:b8:2a:8e:ae:0c:c6:bd:88:95:ac:
70:75:72:a9:db:c3:03:6c:cf:83:2e:a3:c8:d9:51:
cb:41:f2:1f:da:85:05:ef:1a:e1:9c:38:e8:58:da:
6c:10:69:28:8c:8f:33:43:08:81:fe:ed:43:63:99:
54:6b:0d:e2:e9:96:3f:61:b0:80:36:08:bf:32:a8:
dc:f9:02:22:bb:ff:83:78:69:d9:45:d5:f0:89:42:
f3:92:5f:4d:6f:0f:a7:d3:31:b1:e2:6e:91:25:29:
72:83:f7:d6:1c:aa:6e:ad:03:8c:f3:f2:f6:6e:54:
30:9d:20:dc:c0:fe:19:7d:05:19:f8:71:d1:44:17:
58:c5:d0:89:12:a0:96:d0:82:97:9f:53:c9:0f:ae:
c0:d0:53:2f:1c:cb:7e:65:60:d0:71:31:83:b1:4f:
1c:a3:1a:db:10:e5:8f:0f:bc:17:b3:5f:ae:62:0c:
c5:9e:e0:40:60:c3:b8:18:52:59:d1:04:f9:5e:fa:
58:04:4e:e6:0c:51:18:0f:1f:ed:3c:a6:b6:3b:31:
62:e4:75:f3:70:2d:f5:33:bf:d8:3b:68:1f:f8:70:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E3:DC:F0:E6:20:92:BE:59:8A:96:E1:38:50:47:F0:D6:06:62:65
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:72:33:c1:03:3e:5f:51:50:e6:9f:04:9b:89:f6:35:58:
f9:fa:7a:30:fc:41:68:b0:92:db:c2:76:64:f6:43:b7:a2:92:
fc:a8:ce:c3:77:26:40:16:21:3d:94:3a:61:6a:07:aa:e8:e3:
e1:ec:d8:c4:45:fa:79:d3:af:6c:bd:fe:aa:91:60:41:8e:9d:
5f:86:c6:6c:9e:1d:20:7f:98:3f:c8:54:e8:b1:16:93:fe:48:
e2:c4:16:c9:10:e5:50:b4:bf:fc:50:37:98:f3:29:8a:96:9e:
b7:be:25:34:4d:6f:e7:81:ef:7a:96:61:91:bc:e3:c7:3e:77:
f4:4f:67:69:3e:c7:9b:a0:3d:78:9a:cf:65:2c:84:99:7b:9c:
cc:5c:52:ec:18:e5:1f:8f:38:54:9c:78:64:38:ad:d6:64:70:
5f:47:ba:9e:8f:3d:73:40:97:ff:f9:af:b1:37:c9:00:47:61:
47:3e:7e:a8:d2:f5:74:24:7b:1e:44:b7:d4:3e:87:6d:86:cf:
32:00:1a:07:16:3d:6f:15:c5:5e:7f:e5:0c:f1:2e:63:21:64:
bd:d4:9d:c4:17:4e:e2:08:01:88:7e:9a:24:04:b1:f9:0d:4b:
32:fe:cc:ba:9b:60:7f:4e:45:f1:35:be:77:fa:58:e9:0b:af:
93:74:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:15 2026 by rpki-client