Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
File: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft (raw, json)
Hash identifier: 79MC1vueNn4ikdhp8/rHwXfF2yZtelsN6lK7KYw0iqQ=
Subject key identifier: F2:6E:A2:DA:D8:55:34:D1:F4:EF:38:BD:A8:7C:6E:4C:30:89:DE:48
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 019D9A06C2F501FE4E23E26B42B6DCD9668B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
Manifest number: 11AC
Signing time: Fri 17 Apr 2026 06:00:27 +0000
Manifest this update: Fri 17 Apr 2026 06:00:27 +0000
Manifest next update: Sat 18 Apr 2026 06:00:27 +0000
Files and hashes: 1: BWIxZ78uKyw4vY-xhhwszjKA1Gg.roa (hash: DJhZH5ULKuTFx2qZjif4i5VCgjFcTYiLUvWNXLkT1QQ=)
2: GILkzrnW-WLXBiCMka03WJecbH4.roa (hash: V4r8aFoZHB6LWJUUFH9l/6/JEctMKZK9VcW+Qg7PzwI=)
3: YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl (hash: hmccY+aOx7u54th69GDJKEfUAI724U6WqMtPnV//f1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c2:f5:01:fe:4e:23:e2:6b:42:b6:dc:d9:66:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Apr 17 06:00:27 2026 GMT
Not After : Apr 18 06:00:27 2026 GMT
Subject: CN=f26ea2dad85534d1f4ef38bda87c6e4c3089de48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:c6:16:d9:05:be:b6:8a:ab:ff:cf:99:ed:
9e:5e:23:70:c7:3c:b6:57:07:c1:f6:9b:07:30:2c:
03:e8:7f:56:bc:d6:af:d6:3a:9f:7e:c7:e5:8c:13:
73:5b:14:98:51:b7:5a:1b:89:61:e5:6d:67:bf:ae:
3f:c2:09:63:44:76:ca:b6:c9:db:3f:e2:16:c5:15:
4d:b7:32:8a:fb:d3:f3:61:8d:df:a8:6d:c7:66:6c:
d8:9f:10:c8:2d:56:1a:6d:6a:61:00:f5:cd:f3:13:
ee:2b:59:68:fc:73:6c:59:94:ef:db:ab:e3:bd:91:
19:b9:e4:7d:a6:f4:f5:3f:a1:a9:50:67:af:04:e4:
35:c1:20:20:83:08:15:12:d5:b4:c3:43:b8:23:59:
8d:44:0f:88:c8:fb:4d:00:c3:fc:5b:5c:a8:8c:c0:
2a:df:86:05:a7:6d:c1:cc:3b:ad:c5:c1:07:3c:83:
f6:90:7a:6a:25:97:6f:80:9d:1d:42:76:b2:62:6b:
3f:81:dc:06:b6:cc:e6:37:48:67:7c:9e:c6:9b:53:
45:2b:fe:9b:64:cd:0a:85:38:c8:a0:a6:46:0f:e8:
38:65:49:9b:6f:fe:8d:52:43:22:0b:cd:53:5e:6e:
c2:20:5a:ce:2c:3c:15:c0:f2:d0:08:a0:9e:7e:87:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6E:A2:DA:D8:55:34:D1:F4:EF:38:BD:A8:7C:6E:4C:30:89:DE:48
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f3:cb:ed:6c:5c:fc:1e:84:48:fc:8f:75:00:10:bb:c1:0e:
b5:a0:f0:4f:30:0a:94:6b:f6:1c:18:6f:85:28:62:2a:ff:3f:
02:dc:5b:33:4a:f1:3b:e1:d2:55:3e:b0:02:fb:ae:e9:57:26:
c1:61:29:bf:8e:1c:71:69:09:73:ab:29:c1:fb:52:31:fb:29:
5b:4d:c4:e3:9a:e0:0b:b6:59:ad:ed:7f:84:88:5c:b2:45:21:
b4:ef:25:83:71:e2:19:20:b0:dc:87:9a:6d:8d:aa:1f:ef:90:
b5:06:55:f6:78:ff:ff:b4:94:98:46:4c:69:19:67:00:e0:31:
da:c7:6c:c8:24:e0:f9:12:c9:19:d8:3a:08:46:d5:89:3f:ee:
d1:b9:82:74:70:91:8a:82:7d:93:10:8e:29:ac:b9:5b:76:0a:
f1:5a:ec:dd:87:68:cd:27:b5:1b:7c:c1:b4:dc:aa:5b:0b:c9:
d5:30:b1:fa:8f:5f:62:34:88:3b:22:a4:6f:40:3d:c5:29:4c:
da:a6:92:02:a5:e4:50:c1:8c:eb:91:fd:6e:13:64:23:0c:56:
b1:98:df:d9:bc:bc:c8:05:60:4d:41:05:70:1b:31:a5:5b:c3:
5f:65:55:df:6e:61:66:db:9f:36:e7:e7:8b:9d:cd:3c:9e:b8:
12:2b:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:46:41 2026 by rpki-client