Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
File: YG03z4fxLyqy3vMTgMOGuCbBnWU.mft (raw, json)
Hash identifier: 2L9fiXOsijJaJ/WMGLjVQXzF75kl636nnxSFbpeMfM0=
Subject key identifier: 9E:86:51:D1:35:82:40:BB:BE:F4:B8:13:E5:D6:F2:A7:9E:78:BC:B9
Authority key identifier: 60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
Certificate issuer: /CN=606d37cf87f12f2ab2def31380c386b826c19d65
Certificate serial: 019D99D05D912B800B963497831981CF7C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:01:02 +0000
Manifest this update: Fri 17 Apr 2026 05:01:02 +0000
Manifest next update: Sat 18 Apr 2026 05:01:02 +0000
Files and hashes: 1: YG03z4fxLyqy3vMTgMOGuCbBnWU.crl (hash: 0De2Y+0QQUszN4PeSjKc+KiKcb38dIOtw/mQMgomZq8=)
2: nYvqn5kV5F9eabpIomemvJsL_Qg.roa (hash: V5VSGZcEQmaqLWAdKNhlKguBGH4P4kr/kPeIkQ2hxfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5d:91:2b:80:0b:96:34:97:83:19:81:cf:7c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606d37cf87f12f2ab2def31380c386b826c19d65
Validity
Not Before: Apr 17 05:01:02 2026 GMT
Not After : Apr 18 05:01:02 2026 GMT
Subject: CN=9e8651d1358240bbbef4b813e5d6f2a79e78bcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:e9:48:96:a1:d6:88:44:26:47:4d:75:44:
6b:b9:c6:6f:ba:19:21:25:a1:83:09:2d:73:7f:50:
f2:6c:e3:3d:df:90:bf:19:e5:21:f7:cb:04:d8:2f:
8d:5a:15:7f:47:e3:e4:62:d6:ce:06:c9:48:a1:e2:
29:a7:7d:97:c7:54:dc:33:b7:83:bd:5c:b9:ea:1f:
18:c3:b6:fd:dc:40:dd:ba:00:11:ce:13:b5:83:50:
65:20:de:ea:41:d4:2e:b8:8e:b6:df:3f:c1:5a:05:
ea:62:90:0f:c6:19:57:9e:59:0f:57:ae:c1:62:39:
d9:84:51:dc:8a:16:05:2e:74:27:6c:1b:d4:43:47:
a7:eb:13:89:d6:71:43:a9:d7:72:63:92:0f:75:8a:
b4:34:56:6d:a0:8e:12:d0:de:9e:1f:03:87:cb:4a:
74:2e:53:67:d6:7d:82:af:d8:05:be:96:65:32:08:
4a:3a:11:a3:50:75:f7:de:a3:9f:37:ea:2a:18:57:
f1:de:2a:b3:f8:44:58:fc:64:d4:46:a6:4c:9a:cc:
71:d7:51:49:bd:7f:3c:eb:e2:8d:9d:1b:58:69:87:
ff:7d:2c:fe:f0:88:c0:b9:59:87:be:13:bc:09:3f:
ee:41:55:8c:d2:9b:2c:1a:83:e9:fa:64:37:b3:a4:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:51:D1:35:82:40:BB:BE:F4:B8:13:E5:D6:F2:A7:9E:78:BC:B9
X509v3 Authority Key Identifier:
keyid:60:6D:37:CF:87:F1:2F:2A:B2:DE:F3:13:80:C3:86:B8:26:C1:9D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YG03z4fxLyqy3vMTgMOGuCbBnWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a20d6a-91ba-442f-8927-dc0043e9bb4d/1/YG03z4fxLyqy3vMTgMOGuCbBnWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:db:a9:10:91:6b:a8:e1:e8:65:3d:e2:01:d6:4b:db:7f:ad:
2f:64:99:50:b4:78:97:25:28:02:dc:5d:ae:71:13:2c:7a:f9:
72:69:b2:cc:c6:29:7f:7a:80:23:f8:06:cc:24:0a:1a:71:04:
5c:3d:7e:89:75:08:ff:3b:2f:fa:8d:26:fb:fc:59:1f:99:ea:
1d:6a:2e:8a:6a:32:b0:c7:97:b4:75:90:e6:00:ce:8d:1b:cb:
dd:01:f7:e1:f7:ac:8c:c6:22:04:0e:50:1e:3e:58:65:05:27:
be:19:2b:e5:8a:dc:a6:48:49:d4:b2:af:88:5f:27:bc:c3:b6:
c4:b6:85:18:d2:fb:35:2f:58:9c:33:41:dd:65:30:a7:47:26:
8b:97:62:b5:92:96:af:9d:be:e4:12:a4:68:be:fa:52:36:68:
34:ba:ef:b2:86:1f:b1:9b:ec:47:ed:ad:60:56:9b:55:8b:e9:
df:78:0d:51:5d:a5:37:00:ec:a3:22:11:6d:d5:dd:1e:02:41:
6b:6a:fd:d1:08:70:c3:1d:24:92:dd:d4:4e:a5:e1:57:94:cd:
32:f9:4f:92:11:76:71:c9:f5:5e:94:6c:c1:05:ac:33:b8:bc:
19:04:31:bc:ff:2e:27:00:dd:28:94:43:bc:e3:51:90:da:9d:
49:a0:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:20 2026 by rpki-client