Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
File: Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft (raw, json)
Hash identifier: ll7XQ0MFZE4JpuF1kIX0I9Qzr4Aa2pU2RgqYiGvmbc4=
Subject key identifier: 8C:17:86:E4:36:6A:6D:32:54:80:69:AB:3B:FB:58:D5:6D:83:8F:0F
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 019D996316B1FE7B1B6FE39C0D5846325E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
Manifest number: 147E
Signing time: Fri 17 Apr 2026 03:01:40 +0000
Manifest this update: Fri 17 Apr 2026 03:01:40 +0000
Manifest next update: Sat 18 Apr 2026 03:01:40 +0000
Files and hashes: 1: QSgiyH11wyAURvatj9-ZAc4hYVY.roa (hash: clDL8JVxHAo7Ey2O322dbo1WNKZNfLWVEI2vSjSdkIA=)
2: Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl (hash: WUZbl8q3XCDAwcoIuJsaFnGEZPrepHWInUyDG6SHSxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:16:b1:fe:7b:1b:6f:e3:9c:0d:58:46:32:5e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Apr 17 03:01:40 2026 GMT
Not After : Apr 18 03:01:40 2026 GMT
Subject: CN=8c1786e4366a6d32548069ab3bfb58d56d838f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:c8:16:6d:59:76:60:87:b5:0b:a1:9b:54:
b9:a4:75:7d:f5:e0:86:91:8c:2e:d5:e7:66:6d:2f:
77:67:6a:7b:4f:98:de:89:b5:3b:f5:c1:06:4a:51:
c6:3c:af:db:c8:f1:7a:07:dc:e9:ae:78:2c:37:71:
39:32:2d:6a:ae:73:b0:93:c0:3c:93:2c:8b:77:2a:
94:71:7d:6c:06:dc:76:97:bb:97:60:4c:40:6b:ee:
ea:78:ee:cb:52:76:18:c3:0c:ff:0f:7e:24:fc:00:
75:16:83:5d:bb:d7:a2:2b:99:0c:a6:77:b6:05:e3:
f0:f7:19:5f:6c:cc:d1:98:22:31:7f:c1:fe:71:98:
97:64:3c:00:cd:3e:0f:6a:bc:57:64:ea:ea:96:d8:
2e:06:3d:71:d4:00:53:54:65:7e:e6:00:8a:cc:7f:
d5:6c:57:44:ca:c6:4a:35:44:25:3b:8f:84:66:5b:
51:49:02:12:86:05:15:fd:95:5f:b5:f1:c1:73:fe:
05:48:82:18:40:e0:32:f4:e7:b7:93:ee:72:6a:6b:
ae:da:a6:a9:26:42:68:36:50:69:95:8f:44:46:ab:
a6:eb:06:02:d3:d8:e8:58:87:3f:d4:3e:8a:c8:b7:
1f:30:5c:89:db:8d:b7:4c:c7:9e:42:96:16:7d:d4:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:86:E4:36:6A:6D:32:54:80:69:AB:3B:FB:58:D5:6D:83:8F:0F
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a5:f6:65:76:fb:23:6f:8c:c7:3f:41:26:8b:b0:2b:08:96:
f2:cc:8c:8f:8e:fd:db:e9:8a:30:6c:19:e2:5d:d3:76:6d:4d:
1a:c0:4e:1d:b2:76:d4:50:c8:73:19:ec:af:23:74:5e:be:85:
ec:5b:8a:97:26:c7:37:74:30:26:b4:8f:f1:b9:97:ab:88:91:
75:cd:a3:b5:96:80:1a:78:ff:d9:d5:40:c5:fa:74:9a:e6:ee:
04:30:4b:b1:c8:a5:e8:a7:fb:6c:e0:73:98:20:e2:1d:c2:d4:
f0:c6:e8:5f:27:04:a5:0d:cc:63:66:d1:85:6d:0a:36:49:63:
6b:42:39:1f:7b:db:44:e6:e1:af:ba:85:0a:fc:ef:74:38:b7:
20:72:e8:48:bb:bd:4f:bc:02:5a:2d:2d:6e:4a:1f:22:c8:d9:
bb:2e:20:13:a7:74:e8:40:ea:56:af:af:43:c7:8d:35:9a:7f:
cf:bd:47:72:f1:7a:4b:a2:b6:5b:58:b6:9c:b5:2a:fd:54:d0:
8f:fd:8d:5d:36:dd:c5:84:96:b4:a7:da:b6:f9:53:e6:37:09:
77:ff:e1:1a:4b:13:ed:15:73:f7:61:99:34:5f:45:dd:22:6b:
46:e8:36:3f:7c:5b:3d:ae:38:5f:60:ff:e0:d9:26:76:cc:98:
c2:1f:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:01 2026 by rpki-client