Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
File: YxkpXTrafm6zKYRJYcqhACyqTYY.mft (raw, json)
Hash identifier: 8PQhQMKxnlqFmRxx/unXZsW0KH670hRILyO7RfsoZ/g=
Subject key identifier: 21:F9:E3:DA:D8:B0:5E:8D:00:41:81:3A:8A:2C:C2:23:D7:D9:30:09
Authority key identifier: 63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
Certificate issuer: /CN=6319295d3ada7e6eb329844961caa1002caa4d86
Certificate serial: 019D992B0F44C2FC04B771EE7B99DEDEEB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
Manifest number: 086C
Signing time: Fri 17 Apr 2026 02:00:29 +0000
Manifest this update: Fri 17 Apr 2026 02:00:29 +0000
Manifest next update: Sat 18 Apr 2026 02:00:29 +0000
Files and hashes: 1: YxkpXTrafm6zKYRJYcqhACyqTYY.crl (hash: ztbgjXe5lRJhQNclma2kmO4/GZAWO+MBPw9NjgiuLGM=)
2: q-dlc0RnKGXQQKCzBekmdoQdLBc.roa (hash: BVWF+eiynzBU7NWIb18jSV9kqUVVHyUBCS+BjOc+ZKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0f:44:c2:fc:04:b7:71:ee:7b:99:de:de:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6319295d3ada7e6eb329844961caa1002caa4d86
Validity
Not Before: Apr 17 02:00:29 2026 GMT
Not After : Apr 18 02:00:29 2026 GMT
Subject: CN=21f9e3dad8b05e8d0041813a8a2cc223d7d93009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:51:4a:80:71:6c:a6:06:f0:59:e2:33:24:
ce:ca:54:81:98:ae:0c:e6:b2:8a:68:54:fe:96:bc:
bb:f2:ca:8e:db:ea:33:df:f8:dd:12:f8:37:d5:87:
24:84:5a:b4:a2:de:d9:f0:14:f2:f0:bc:6d:8b:34:
da:69:3e:1d:bd:d6:71:2e:8e:af:59:48:75:93:6b:
be:10:fb:34:3b:70:1b:62:72:b0:4c:ed:d1:d2:3f:
9d:90:2d:23:46:0e:fb:9e:89:90:ea:af:0e:82:8f:
3d:5a:cc:06:ed:fe:5b:0b:c8:b1:76:24:4d:c1:53:
6d:a6:f3:cb:7d:b1:ce:d5:44:75:70:8d:9a:d8:94:
92:a4:f8:4b:01:e4:6a:69:02:7f:fb:90:06:6c:6f:
5e:fd:47:fe:c0:9b:11:e0:fb:81:96:22:b1:d7:47:
c0:e6:00:c1:a1:20:4c:1a:5a:4e:72:b1:72:9e:5e:
49:7a:6f:4d:34:8b:ff:d4:26:c2:dc:92:da:14:69:
e7:ba:44:d4:34:25:f6:9e:c1:cf:1f:35:cb:b2:3d:
d0:c7:89:d4:d0:5d:81:d2:20:45:4c:11:ff:b3:e9:
9f:a6:02:b9:f0:f5:43:16:43:21:ab:b2:9c:4c:a5:
98:19:ae:a6:cb:eb:af:cd:b3:3c:f7:22:93:3c:bb:
c1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F9:E3:DA:D8:B0:5E:8D:00:41:81:3A:8A:2C:C2:23:D7:D9:30:09
X509v3 Authority Key Identifier:
keyid:63:19:29:5D:3A:DA:7E:6E:B3:29:84:49:61:CA:A1:00:2C:AA:4D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxkpXTrafm6zKYRJYcqhACyqTYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/26cc92-8bf7-48e0-937a-7e4e2f8b5b16/1/YxkpXTrafm6zKYRJYcqhACyqTYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4c:71:4b:18:a0:a3:a2:fa:33:b0:94:9f:00:af:a1:dd:f1:
f0:50:c7:b9:38:4e:2c:de:85:57:b1:19:02:e3:9f:62:5d:3f:
2b:fd:64:31:a7:62:55:35:d8:a4:06:c2:80:ca:ca:74:d1:4c:
34:2d:84:20:29:ad:ab:49:7d:f7:e4:29:06:fa:09:b5:55:be:
62:9d:7c:f4:b2:6a:b7:2f:69:54:c2:5b:b3:9a:9f:5f:e9:fd:
c4:00:16:b9:cd:2f:86:40:4f:1d:ee:e5:b9:c5:7f:9e:a2:17:
5b:5a:5e:05:80:f0:dc:f2:4a:d5:43:c7:df:ca:59:09:8a:b8:
1b:67:7e:4b:e8:3c:b6:e6:d3:d5:9a:6e:aa:96:4f:e5:b2:06:
d3:7f:01:1f:06:12:fc:5f:86:be:1c:0b:b6:ed:1e:8d:f4:03:
bd:27:7e:c4:69:4f:d6:8b:e9:e4:b2:48:17:d5:e7:1e:cf:53:
d6:26:e3:28:9d:ec:23:97:9f:ef:83:a2:00:30:39:11:9a:c3:
f1:ab:c6:43:76:43:e6:c4:6f:ec:8e:6b:5e:9f:5e:47:89:79:
34:51:97:19:ec:6e:80:71:c6:76:43:1c:b2:48:48:91:bf:43:
31:63:e8:d9:a6:16:53:59:c7:48:51:d5:c7:e1:4a:c5:a2:00:
b6:97:36:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:51 2026 by rpki-client