Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
File: YYcWngMONyXW60eKMn5r3za-jS8.mft (raw, json)
Hash identifier: g+kuZ3wDF33cXpya6i+wHpi7JmS1DsuQ97WUC9/H4mc=
Subject key identifier: 09:BF:98:B4:7B:B0:01:32:7C:F3:E5:1D:F1:39:B8:24:1A:66:D2:D4
Authority key identifier: 61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
Certificate issuer: /CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Certificate serial: 019D9A74A7090DD4FD86CA188B4B4A3851A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
Manifest number: 02B7
Signing time: Fri 17 Apr 2026 08:00:29 +0000
Manifest this update: Fri 17 Apr 2026 08:00:29 +0000
Manifest next update: Sat 18 Apr 2026 08:00:29 +0000
Files and hashes: 1: YYcWngMONyXW60eKMn5r3za-jS8.crl (hash: 93/Cvo9jjzFRCZoM/UMwg66DKQXwu6Gbrd58qEp6hhA=)
2: dlAKs2OGLWJirE63ZpdfiOJ1IDw.roa (hash: 1fH4y0wj0PpFc5LsMAZ3oXLqRp58JujDDG0+JToDmTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a7:09:0d:d4:fd:86:ca:18:8b:4b:4a:38:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6187169e030e3725d6eb478a327e6bdf36be8d2f
Validity
Not Before: Apr 17 08:00:29 2026 GMT
Not After : Apr 18 08:00:29 2026 GMT
Subject: CN=09bf98b47bb001327cf3e51df139b8241a66d2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:99:85:a1:87:f5:2a:ac:94:17:14:9a:20:
e5:2c:fb:71:fc:53:bd:53:8b:15:56:b1:ec:be:f2:
65:d7:c2:83:88:58:ce:8d:ec:a1:60:b0:bd:9e:35:
96:37:c1:f2:76:94:01:50:2c:3e:b4:97:69:be:ca:
0a:d8:b8:b1:19:82:95:91:20:82:30:bf:ae:53:5b:
f5:3c:41:4c:f7:15:70:dc:66:3c:cd:31:4f:98:d8:
84:de:07:f9:b8:98:4f:09:a0:65:16:b6:0c:e7:aa:
2e:04:03:16:38:ba:19:57:e3:a5:e7:42:93:d1:73:
d0:ca:a1:0e:53:c9:e5:ef:f3:2e:b5:d9:1a:e6:fc:
82:53:6d:7c:84:c1:23:9c:1f:4d:98:d2:a1:73:a1:
da:ea:56:f7:5f:dc:06:37:5f:4c:48:90:39:1e:23:
1e:f5:c9:73:b4:12:ca:ee:d6:8d:25:fb:3a:3f:d8:
cd:5f:d1:97:5f:b9:be:a8:1f:da:ad:82:8f:56:12:
f3:9e:c8:9b:ff:99:09:e4:cf:a5:2d:6d:13:0e:1d:
b8:8f:8f:85:9d:f9:26:91:d1:46:8e:0a:f8:5b:c1:
8a:09:a8:c7:53:0b:6e:9c:c9:70:a1:b6:52:e2:3b:
ac:57:2a:65:98:fd:1c:89:11:cb:91:63:5b:b3:c4:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:98:B4:7B:B0:01:32:7C:F3:E5:1D:F1:39:B8:24:1A:66:D2:D4
X509v3 Authority Key Identifier:
keyid:61:87:16:9E:03:0E:37:25:D6:EB:47:8A:32:7E:6B:DF:36:BE:8D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYcWngMONyXW60eKMn5r3za-jS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7619ec-5438-4552-abab-480df8f41e44/1/YYcWngMONyXW60eKMn5r3za-jS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:0a:73:25:db:19:e2:98:83:95:92:54:79:3e:0e:4c:3a:45:
22:6a:e1:b2:ab:17:1f:5c:bf:5c:87:df:e1:6e:2f:6d:bc:7f:
99:47:ac:89:44:42:b9:87:53:48:58:6e:41:64:3a:2c:87:bf:
85:a2:10:a1:a9:6c:2c:7a:4e:63:fe:1a:e4:37:11:e9:ed:a5:
80:54:3c:d2:5e:4d:03:34:1f:b1:4e:62:31:67:ae:5b:88:fa:
33:1b:bc:47:24:35:0b:b0:ef:44:8c:e9:df:2c:5e:b0:14:15:
79:a9:97:ed:e6:2d:90:43:23:83:eb:18:b7:42:e9:66:18:9f:
1c:f3:69:19:98:39:2d:41:05:fe:45:61:e5:b6:94:0e:92:ec:
cd:67:66:3d:76:ea:ff:c6:db:c8:99:dc:94:bb:ee:6c:10:f4:
26:d9:2b:b2:3a:03:00:74:fd:bf:96:33:58:c5:32:d8:47:d4:
d8:ae:d6:e2:0c:15:9e:62:0b:13:88:51:b4:72:8f:42:50:3b:
b9:16:a4:bf:33:07:b3:f7:4e:9c:85:13:7d:1f:be:4f:7f:ec:
c2:bf:97:40:c4:d4:66:98:63:b5:98:db:6c:e6:c6:94:5a:22:
61:01:15:17:14:d5:46:f8:ef:5a:1a:fe:9f:40:55:52:41:90:
93:5f:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:51 2026 by rpki-client