Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
File: YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft (raw, json)
Hash identifier: L9TiflqMCgh9EHQ1whixXLKoN/fFOlbx6VzhMfo6FrY=
Subject key identifier: 98:16:6F:47:C7:BC:B3:EF:48:D2:B9:9C:B3:DD:8B:5A:18:97:28:DF
Authority key identifier: 63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
Certificate issuer: /CN=63062302b438592376c4264f49dc5e673edb2cfb
Certificate serial: 019DA4C1DD83DF5D8E986C17B072239CC5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
Manifest number: 0CB2
Signing time: Sun 19 Apr 2026 08:01:01 +0000
Manifest this update: Sun 19 Apr 2026 08:01:01 +0000
Manifest next update: Mon 20 Apr 2026 08:01:01 +0000
Files and hashes: 1: MIQkIHdhTszjAc1iDyqPsWr05vI.asa (hash: q47vAO9a9jNCz72lMsICdLEfl+TVo350DLcpbspUzro=)
2: YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl (hash: QlEM1FN+43/G/OB7G3BDiK0o8D0aFv/GFetZsfAE8oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:dd:83:df:5d:8e:98:6c:17:b0:72:23:9c:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63062302b438592376c4264f49dc5e673edb2cfb
Validity
Not Before: Apr 19 08:01:01 2026 GMT
Not After : Apr 20 08:01:01 2026 GMT
Subject: CN=98166f47c7bcb3ef48d2b99cb3dd8b5a189728df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:8b:96:71:77:ea:d0:dd:22:82:a0:09:d6:
c3:cf:2c:60:f7:ab:cc:43:74:f0:0f:27:47:7a:bb:
92:53:66:f3:d0:02:83:77:80:38:bd:0e:4d:ed:1a:
a0:23:6d:b4:b6:a8:70:53:e8:a1:69:31:16:18:c6:
f2:6c:09:a1:63:1e:a6:f9:e2:54:19:d9:d9:18:f6:
34:f8:f2:40:54:1e:59:21:43:86:11:b7:e7:74:31:
ca:03:2a:f3:4f:60:66:7d:f4:c8:c2:af:62:0c:15:
64:47:03:3c:b4:91:ed:2c:46:a8:57:d6:2a:d6:72:
6e:92:e2:ec:02:1b:94:a5:f0:75:17:aa:06:b1:c6:
fa:4f:f4:47:7f:b8:dd:77:6f:20:ff:d4:fe:94:bd:
f2:04:9f:af:66:0c:82:81:00:35:83:6e:e1:c3:c1:
c3:d0:9a:4e:ea:36:53:e9:37:7a:25:87:1e:e3:30:
61:c4:77:f5:01:2e:ab:6d:65:5e:a8:3d:1c:8b:02:
e3:a2:8e:97:14:20:2a:4c:25:29:86:71:44:33:c2:
8b:06:2e:df:49:fe:21:73:ef:d9:09:e7:1b:c7:64:
4d:30:bc:6a:64:e5:1a:f7:3f:bc:9c:af:a5:d1:ae:
a8:c4:59:7b:df:43:37:84:0e:a1:ed:65:f1:a5:18:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:6F:47:C7:BC:B3:EF:48:D2:B9:9C:B3:DD:8B:5A:18:97:28:DF
X509v3 Authority Key Identifier:
keyid:63:06:23:02:B4:38:59:23:76:C4:26:4F:49:DC:5E:67:3E:DB:2C:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwYjArQ4WSN2xCZPSdxeZz7bLPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8bdd00-7943-4584-84f3-3b242d54e788/1/YwYjArQ4WSN2xCZPSdxeZz7bLPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b3:e3:9a:49:0a:6b:ad:39:e3:09:44:8d:75:f1:49:b0:2d:
65:e1:98:16:13:82:fc:c1:d5:9a:44:f0:56:47:a9:06:2b:7f:
0a:5b:86:4a:e5:f0:27:72:65:67:e3:9b:42:c6:56:f1:f2:f5:
3e:6a:0b:95:d7:04:65:ce:f5:99:c7:1d:69:4e:af:c6:cf:a0:
ea:23:ca:06:4c:59:00:52:6f:22:5c:83:6c:03:d4:a8:48:0f:
16:53:32:52:f6:11:6e:82:16:5a:77:0d:e8:72:e0:53:dc:e9:
5d:ac:d8:34:cf:47:a8:e1:c9:d3:71:f7:63:44:ea:ae:27:e0:
97:6c:39:49:00:7f:98:cf:b0:a3:ac:a4:43:2b:40:7b:7c:06:
4e:f3:b0:12:8d:a1:93:ac:b7:dc:51:54:c3:6b:98:f1:3a:a0:
94:ce:8c:6e:23:5d:72:51:38:ad:a6:f5:e5:66:84:bf:1d:ac:
69:8a:31:7b:e3:47:40:8b:ba:b7:ba:31:90:72:45:83:d4:5f:
97:c6:48:c7:48:b3:15:bd:ea:f7:c6:b5:b3:a0:26:10:2b:58:
fd:bd:aa:cb:ae:06:b9:9c:a9:3a:9d:a9:a4:b7:61:15:a3:2d:
a5:64:8f:c9:02:b9:e9:fa:01:33:94:58:03:2f:56:af:0d:cf:
56:04:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:06:26 2026 by rpki-client