Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
File: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft (raw, json)
Hash identifier: bF/pg++oJDvZQCZ4yYSKTVpvZcDQd165vhuf+A2LikM=
Subject key identifier: 7F:7E:9F:84:A1:3B:56:16:B8:00:BB:FB:F2:75:76:80:06:4D:84:99
Authority key identifier: 60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
Certificate issuer: /CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Certificate serial: 019D999906C6A2CC3AA87CBEE4633D772901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
Manifest number: 10BD
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: 3ExD7nKcCYNGR68ATw2vAixFfPw.roa (hash: PRfZSceh3jh1FTBUXpKPdAPCRhio/qZFjdbYjEajKSY=)
2: EyM4wivbpkVOKedhB97D1lcXuLE.roa (hash: ztSlxeB82WQ5Ip3+c+gguWX+u1grG8UgGeYQslXQHlM=)
3: YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl (hash: SGDorAup5n2JVEayaMNcGJiGW2gcxedVe8UoVLhbNfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:06:c6:a2:cc:3a:a8:7c:be:e4:63:3d:77:29:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608011ea51a9fbcf8bae0df1ed499a3407d63053
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=7f7e9f84a13b5616b800bbfbf2757680064d8499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:8c:c3:a4:48:4c:51:4b:42:48:38:0b:9a:
50:0b:52:16:39:0c:3c:4b:e4:37:39:75:b7:66:60:
d9:c1:bc:76:a8:95:35:80:57:b7:25:93:56:9b:7f:
73:b5:3f:1d:3b:6b:82:01:e5:ba:62:8f:4f:2c:66:
c3:dd:15:16:3e:9a:c7:b3:9d:6d:a0:bd:bf:8a:8f:
24:67:df:e9:73:d2:ea:2d:8d:9a:dd:7b:ce:a0:7d:
c3:22:37:a7:49:bd:de:76:85:c4:12:20:5f:1a:c0:
a4:5d:20:30:6d:4d:91:44:50:0c:a0:5d:d0:04:a7:
02:4b:e8:00:ca:d4:f6:0a:b9:c6:70:68:fe:bb:ea:
cb:30:2d:1d:17:23:fa:ad:93:bb:8f:d6:cb:c8:14:
03:e0:d2:07:07:e7:7e:f8:89:01:73:83:52:1b:06:
7d:13:f2:16:06:85:0b:05:8b:f0:cb:fd:2a:ff:33:
c9:aa:fb:fd:6b:34:e0:30:f8:0f:29:43:8d:ef:3c:
2d:ea:d2:e8:dc:61:fb:91:ee:d0:db:22:66:f0:9d:
8f:86:b8:08:c4:83:59:4a:ce:4c:10:5f:a2:15:37:
95:86:76:64:1e:b9:43:bd:58:94:a4:69:62:63:36:
f8:7b:49:ce:fd:1d:21:cc:0f:6d:5e:ee:d7:18:06:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7E:9F:84:A1:3B:56:16:B8:00:BB:FB:F2:75:76:80:06:4D:84:99
X509v3 Authority Key Identifier:
keyid:60:80:11:EA:51:A9:FB:CF:8B:AE:0D:F1:ED:49:9A:34:07:D6:30:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4f0ec5-54d2-40fb-9498-742f8691beaa/1/YIAR6lGp-8-Lrg3x7UmaNAfWMFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:27:64:69:97:07:dd:ca:b4:66:af:14:f5:b2:0e:3f:4d:0a:
c9:36:c1:97:91:0b:13:74:09:a0:4e:0d:d2:2c:37:4b:51:3c:
2f:49:31:59:0c:43:9e:69:43:86:0f:13:ea:2b:3e:ad:81:9a:
69:e0:47:d2:d0:04:b2:16:f3:a7:40:c1:61:eb:c9:05:98:93:
1b:04:28:81:4c:ec:c9:5f:df:e8:d5:07:c0:be:3b:93:db:ef:
59:d7:53:35:13:fd:3a:e2:fe:2a:09:78:23:0e:73:d9:ee:c1:
42:18:a4:8d:68:e0:8a:6c:35:51:c3:da:70:cb:ad:42:8d:ad:
70:65:1e:c5:c5:3c:39:cb:18:ff:cb:01:86:f0:77:60:f2:0a:
56:d3:41:b3:44:be:83:9b:1a:a6:2a:0d:38:e1:7a:96:84:08:
72:b3:3d:3c:d9:07:99:9d:4f:1a:bc:d8:8d:cc:bc:3b:77:aa:
ec:2b:f1:5f:b6:a9:a7:1a:93:7e:9c:a2:13:25:e4:8b:c2:7c:
78:26:37:26:67:7a:8d:87:85:10:6e:fa:8d:2a:99:b7:91:18:
ae:55:0d:ed:ab:b1:a7:be:e1:46:22:37:95:7a:2e:54:2a:d5:
0f:c4:8e:0b:57:29:2d:bd:54:5e:fc:53:53:90:9d:59:c8:b7:
a7:c8:79:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:06 2026 by rpki-client