Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
File: Yj80T9SpG_rRODCNUnFVu85Sr24.mft (raw, json)
Hash identifier: LNfe3k4rYhgl0ms8+DKjPN5EUMRMFGz0TJikAN+ORTQ=
Subject key identifier: 69:47:31:E2:FF:9B:9B:C5:F5:27:81:B1:94:67:F3:E5:59:62:A0:78
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 019D9C6375A51BC49276C9D8DD40EF2CD2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 17:00:56 +0000
Manifest this update: Fri 17 Apr 2026 17:00:56 +0000
Manifest next update: Sat 18 Apr 2026 17:00:56 +0000
Files and hashes: 1: Yj80T9SpG_rRODCNUnFVu85Sr24.crl (hash: r36VOmNUsOTQqqU1ZJhBB/XBfNXxybzFHDD1JFpFp3U=)
2: ovYaAbe26D-xe8lCheafK_LrtWY.roa (hash: 6eO0/Dtd7168WHT10a4JQBuUdq1q7SgJYtnU/qwqLfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:75:a5:1b:c4:92:76:c9:d8:dd:40:ef:2c:d2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Apr 17 17:00:56 2026 GMT
Not After : Apr 18 17:00:56 2026 GMT
Subject: CN=694731e2ff9b9bc5f52781b19467f3e55962a078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:67:66:77:8a:76:63:d2:61:07:08:00:3b:0c:
d7:75:a5:8f:de:c4:61:6b:47:1b:e8:87:91:b6:67:
f9:7e:93:21:b5:54:59:dc:7c:22:b9:fd:42:1d:b9:
aa:7e:d8:0d:d0:b9:2c:e8:33:4f:87:de:78:63:72:
33:3e:42:25:3f:e7:08:8a:42:b9:98:32:41:7f:0e:
c1:c9:99:70:c8:30:73:91:9d:bb:21:1e:03:a7:56:
3b:23:07:d1:46:5e:0c:6e:21:67:7d:9b:fa:ea:6b:
b0:d6:42:2e:96:41:6a:0c:ac:42:9c:50:00:b6:8a:
ed:d7:0c:f1:bf:ee:54:0f:51:9a:89:9b:50:8c:64:
80:fa:95:3e:60:34:88:68:3d:2a:69:f7:0c:f9:ef:
f7:fa:ed:1b:da:c1:7d:e3:98:18:cc:a6:c3:76:87:
ec:37:7a:2a:5c:9c:fa:5b:00:e7:67:6f:1d:11:27:
c5:58:ba:b6:56:33:15:a3:ef:ae:50:dd:86:9a:fb:
df:ca:1e:4e:e7:5c:a5:93:d3:aa:33:2b:55:a4:09:
ab:37:59:42:13:88:af:26:b2:c8:61:e2:85:32:d7:
18:11:2c:4a:b3:cf:9d:42:96:d6:6d:e5:12:4b:2a:
07:5a:7c:7c:0a:11:64:f4:a7:c1:ef:b4:56:be:c6:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:47:31:E2:FF:9B:9B:C5:F5:27:81:B1:94:67:F3:E5:59:62:A0:78
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:ef:35:a8:75:72:ee:55:df:38:f7:11:80:2c:d5:34:1e:0c:
92:32:9d:cd:98:b4:98:d8:79:e7:02:2b:3f:84:bf:47:be:00:
59:fd:63:bd:76:48:30:49:1a:d5:09:b4:4c:21:61:0f:55:d6:
c3:52:47:07:5d:6b:e8:5d:1d:0f:52:df:32:a6:d7:fa:1a:56:
e9:dc:7f:0a:da:e4:28:28:58:9c:c7:2d:76:84:f1:08:8b:85:
97:48:1c:2e:0e:84:b7:c9:66:13:32:57:04:a4:ed:2d:1b:d6:
29:a5:2a:f4:06:5d:a7:6d:62:cc:4f:c6:85:2b:02:df:c9:5c:
b0:a1:c5:c7:e7:26:8b:9a:72:95:04:2e:a7:a4:8a:97:50:ff:
e3:d3:1d:43:44:89:c4:9c:3d:f1:86:9a:e8:e0:d6:07:d2:ae:
0d:c3:d2:63:90:78:a6:66:85:af:6c:47:4a:0b:8a:59:2d:c3:
34:e7:16:f9:05:1f:86:2c:19:b0:63:53:e6:7e:ef:50:56:f0:
e5:bf:52:94:8e:c2:c4:bc:09:2d:c2:ef:81:66:db:15:8c:94:
f3:01:5c:07:aa:34:ed:57:af:98:90:fe:f6:97:60:47:e0:06:
20:46:83:03:8c:06:7f:f5:48:82:8a:42:b1:a9:02:a4:41:c7:
25:bf:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:13 2026 by rpki-client