Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
File: YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft (raw, json)
Hash identifier: NKW5sHR8D8hjXiaauhjNvEQqgpHF0mxlBdtQwyWszvI=
Subject key identifier: 23:45:BE:29:FD:D6:55:FE:29:61:FE:A4:5B:F1:4D:D9:AE:70:DC:A7
Authority key identifier: 62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
Certificate issuer: /CN=6238410338e21e8eab94119d80e41a3958491de6
Certificate serial: 019D98BD447BDC0D8EE594DACC6C2F028E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
Manifest number: 0EBE
Signing time: Fri 17 Apr 2026 00:00:33 +0000
Manifest this update: Fri 17 Apr 2026 00:00:33 +0000
Manifest next update: Sat 18 Apr 2026 00:00:33 +0000
Files and hashes: 1: YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl (hash: ujS9RSzADEQlftYaE0zzkOaGoL+bFBlmMWrx3Y64YWk=)
2: kN8hpyULYXpGgg0l4UycfzoLM_8.roa (hash: p1hs9U044hjwHEauuvzM9PUu0iEmpC7Sk80cjjzAgHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:44:7b:dc:0d:8e:e5:94:da:cc:6c:2f:02:8e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6238410338e21e8eab94119d80e41a3958491de6
Validity
Not Before: Apr 17 00:00:33 2026 GMT
Not After : Apr 18 00:00:33 2026 GMT
Subject: CN=2345be29fdd655fe2961fea45bf14dd9ae70dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:d7:2a:40:29:f2:3a:4d:57:8d:f6:7b:3f:
7f:d5:6e:ec:cf:fa:bf:66:76:c3:e7:b5:34:d6:d0:
ce:7f:85:b2:b1:df:84:87:6a:c0:d6:c2:52:c6:74:
dc:c4:da:e2:05:75:17:c5:10:ad:d0:21:ae:d7:d3:
9a:a0:87:7e:c6:cd:87:a8:65:20:40:c0:99:96:26:
f8:0e:05:b8:a7:57:99:cd:8d:d6:a7:6e:24:6e:18:
78:6d:fd:4d:12:0e:e0:7c:84:5a:94:d7:f9:5f:41:
41:6a:b4:0f:ec:45:db:44:2c:16:df:9a:7c:77:88:
44:29:0f:e1:4d:9e:2e:a5:b2:cc:72:b2:e4:10:38:
c1:b2:99:a5:c0:7a:9d:d7:00:32:b5:4c:de:6d:61:
f3:f3:7b:85:47:26:13:45:f1:5a:be:ce:77:db:08:
69:c7:cc:04:5d:26:5c:c5:da:ef:af:c3:e0:33:ea:
9e:58:c6:04:5b:ed:c9:74:67:d4:89:f5:35:a9:40:
d1:2b:c3:d3:fd:ad:c2:c1:a8:82:d6:ca:6d:98:6b:
86:5b:15:f5:93:06:c8:28:b6:b8:5f:5b:36:0b:ad:
4b:38:ea:17:26:dc:e8:2c:49:2b:e4:17:02:09:21:
16:6b:a1:64:30:7c:1e:73:1a:31:e1:6e:b8:34:df:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:45:BE:29:FD:D6:55:FE:29:61:FE:A4:5B:F1:4D:D9:AE:70:DC:A7
X509v3 Authority Key Identifier:
keyid:62:38:41:03:38:E2:1E:8E:AB:94:11:9D:80:E4:1A:39:58:49:1D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjhBAzjiHo6rlBGdgOQaOVhJHeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5a4526-89fc-4640-901d-13a58eb9d8f5/1/YjhBAzjiHo6rlBGdgOQaOVhJHeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:10:3c:7b:9a:9b:fa:16:b2:e6:f7:b2:71:8a:a9:ba:4d:51:
9c:87:33:6b:f3:92:fe:61:b7:a8:c2:e0:1c:2b:cf:ce:4b:3a:
0e:6f:25:3a:d9:8a:a7:40:db:6f:14:64:e9:d4:49:0d:95:c0:
53:9f:65:bc:80:c2:d0:a9:3b:42:e3:d4:9d:d5:94:43:6c:4c:
2d:2c:26:2c:fb:4b:6f:60:fd:22:a6:d1:df:ba:33:f2:ba:48:
5b:5d:95:7d:74:21:5d:c9:ec:87:f9:4f:2b:04:92:91:5f:33:
9f:f0:fb:f0:14:11:7d:bd:46:a4:01:19:0d:44:ad:69:5b:13:
8e:6c:30:57:d1:b3:7e:57:61:e3:66:4f:d4:47:66:cb:99:7f:
66:c7:13:9c:6e:5e:15:9b:d7:a2:03:2c:ea:c6:c5:1e:3f:f5:
04:fe:5d:f5:c1:92:a0:c6:8d:52:43:a2:96:39:ba:3c:ea:46:
f5:3d:f5:d6:16:cb:b2:87:d9:44:f4:f5:62:28:4c:8a:4f:cf:
c2:80:8d:a5:65:bc:4a:57:d3:aa:eb:f9:12:29:9e:1c:9f:91:
f1:71:f3:36:fa:32:55:63:72:09:f2:b4:c2:5b:40:86:2c:ff:
6c:34:30:fb:9e:ee:15:3b:4d:59:ac:53:c9:2d:b3:ff:5e:bf:
6e:6b:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:01 2026 by rpki-client