Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: BaqagdLbZW4Aidls+meqtwQKL9RmOSDm6PU21duDgzY=
Subject key identifier: E2:40:2B:6A:53:0C:2F:31:36:9F:20:EE:CA:67:E2:B1:8E:6E:93:0C
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 019D9962810ABE7D6A32152C383D9320D0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 1087
Signing time: Fri 17 Apr 2026 03:01:02 +0000
Manifest this update: Fri 17 Apr 2026 03:01:02 +0000
Manifest next update: Sat 18 Apr 2026 03:01:02 +0000
Files and hashes: 1: txC54j_S7HZrQJFinO7KZYt-RYQ.roa (hash: Brb/AGg54bXB31WxKutqNfmuYrMVTPjvpdr/gdDFZQ0=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: 4lDi5hPQfIGWXuikLSofiFRkFc+vzermnWeG7OzPWqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:81:0a:be:7d:6a:32:15:2c:38:3d:93:20:d0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Apr 17 03:01:02 2026 GMT
Not After : Apr 18 03:01:02 2026 GMT
Subject: CN=e2402b6a530c2f31369f20eeca67e2b18e6e930c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:66:ed:80:9c:33:aa:45:9d:32:51:c2:96:ff:
ac:10:f6:a7:f5:2f:29:95:31:36:56:c9:01:3e:ac:
9e:59:38:45:23:d0:c1:36:ee:c7:d3:fc:83:bc:0e:
23:97:82:2c:40:26:7f:b4:bc:28:df:df:99:fa:6a:
98:58:56:7b:63:55:f4:02:99:53:ed:1a:d4:c4:90:
5e:79:24:7f:95:8c:6f:9f:d7:33:7f:8b:4c:55:1d:
bf:4b:7b:48:03:79:8e:ac:e1:26:f9:a1:e4:13:57:
2e:eb:f9:d5:62:8e:1f:ec:64:93:52:d0:09:36:bc:
70:ad:c5:53:f4:01:49:9d:45:97:c6:d2:32:4a:67:
93:99:f8:e2:be:3c:7e:6e:7c:44:ac:7d:00:a7:64:
21:9d:2e:f2:db:d0:6a:c2:3c:bc:b6:58:09:07:6e:
6b:c7:a2:e6:9c:6f:97:99:3c:7e:96:21:ed:0d:5a:
2a:56:a0:2a:dc:67:bc:eb:c3:3e:4f:aa:91:6e:97:
b2:81:55:6b:60:95:23:e7:f6:84:cd:c7:68:54:cb:
22:64:18:aa:c1:e2:39:c9:12:b2:f0:75:4f:a2:0d:
5b:35:76:d2:45:30:e3:31:7d:56:85:32:94:cf:ea:
16:f3:17:36:31:bb:59:0c:a0:fa:12:5c:13:71:3f:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:2B:6A:53:0C:2F:31:36:9F:20:EE:CA:67:E2:B1:8E:6E:93:0C
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:25:c0:9d:88:4f:2e:cd:1d:16:ac:3c:c0:09:09:f1:d0:8a:
8c:2d:c8:5a:96:b2:58:ed:c8:92:41:bf:3f:23:4d:dd:61:7e:
34:1c:10:61:42:61:a0:e2:34:09:3c:b8:9f:c4:91:f7:71:c4:
48:33:0f:5c:ac:d5:19:f7:1b:71:15:09:c4:02:86:55:25:46:
28:44:dd:9c:6a:10:28:3a:6b:67:f7:36:2b:64:84:ec:a8:22:
fb:fc:e3:9e:d0:07:16:b9:89:cd:b5:85:9b:a1:5f:4e:69:78:
7e:52:3c:5c:cc:ec:25:0c:85:be:b8:da:61:37:64:d4:bd:00:
21:d4:36:b7:d1:2d:38:bf:29:bb:34:d4:75:86:2d:27:6e:00:
b0:b4:7c:7f:0a:b2:84:bf:cd:84:55:5c:da:21:60:90:f1:bb:
a6:c8:35:1a:af:09:f5:75:77:ff:a1:fb:0f:cc:7b:f9:42:17:
e8:3a:e1:b1:a5:df:b3:1f:e9:44:19:e2:be:32:55:62:4b:bb:
ef:4e:9e:3c:2c:0d:a5:b8:67:70:d9:bf:65:aa:9e:af:4d:5f:
75:36:34:0d:ec:c6:fc:14:c3:52:02:a0:f7:73:cf:14:d0:b4:
96:3d:ac:fc:76:f7:41:72:20:66:e7:fc:93:60:e0:22:d1:e1:
49:9b:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:20 2026 by rpki-client