Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
File: YPWqx2_mvykTNdGaZY5kiRBbhp8.mft (raw, json)
Hash identifier: 0h/mWPaMwPBd0RrpavQpDENQAPb5yuDwJKZxM8G2jWs=
Subject key identifier: 5B:05:6E:8A:6D:09:8B:AF:8F:99:C8:14:74:0C:53:92:5F:A8:01:57
Authority key identifier: 60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
Certificate issuer: /CN=60f5aac76fe6bf291335d19a658e6489105b869f
Certificate serial: 019D9DE40976FFB793EC784306303491FEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
Manifest number: 0496
Signing time: Sat 18 Apr 2026 00:01:00 +0000
Manifest this update: Sat 18 Apr 2026 00:01:00 +0000
Manifest next update: Sun 19 Apr 2026 00:01:00 +0000
Files and hashes: 1: YPWqx2_mvykTNdGaZY5kiRBbhp8.crl (hash: r9v4WDDwfC9easF9FJGF4yUYKN9zbz4GVrqnqpq7Hzc=)
2: nsMVjB3dBsEs4QDP-UqrSgiiMZk.roa (hash: 4KH9ak7vbK8YvGmfh6MjtuXURmPLUowjhWOo+NHtQgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:e4:09:76:ff:b7:93:ec:78:43:06:30:34:91:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f5aac76fe6bf291335d19a658e6489105b869f
Validity
Not Before: Apr 18 00:01:00 2026 GMT
Not After : Apr 19 00:01:00 2026 GMT
Subject: CN=5b056e8a6d098baf8f99c814740c53925fa80157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:5b:bf:23:65:82:a2:f2:c5:aa:36:c0:79:
0d:0f:b3:a0:bb:f7:73:02:2f:e6:f7:fd:90:2a:a7:
66:83:51:a4:f8:c5:e9:89:25:74:a6:90:62:ee:d4:
7e:cf:98:fe:99:a9:35:7d:0f:5d:d2:48:87:09:7c:
ac:3b:34:ae:aa:36:cd:44:82:2d:a8:5d:50:d9:7f:
2e:4a:10:49:20:12:ca:35:89:79:2b:25:ac:22:32:
63:b6:55:fe:00:0a:39:b2:04:87:48:c4:be:01:82:
b0:8a:37:18:dd:48:03:e9:1d:82:1f:f2:0b:a4:9e:
e9:59:03:63:cf:0a:4b:25:06:61:c1:06:7f:2b:01:
69:35:ea:d0:14:49:b7:18:ab:0c:34:b6:71:ba:9a:
67:cd:fd:88:f7:c1:c6:46:cc:05:b8:3f:68:07:59:
09:dc:d6:5f:e5:f6:b2:a7:0c:26:cf:63:7f:38:ec:
2e:59:dd:3e:40:fa:20:03:86:a8:b6:2e:b4:9c:84:
08:c8:5e:d6:8c:f9:1b:19:bd:1e:1f:97:36:9c:e8:
29:c5:28:e7:0d:ba:4f:47:ea:42:43:73:dc:a7:9e:
58:75:ec:83:3d:2e:40:42:1c:2f:8c:2a:fa:27:a9:
69:4b:94:c7:80:be:dd:62:70:18:a6:65:14:b1:9d:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:05:6E:8A:6D:09:8B:AF:8F:99:C8:14:74:0C:53:92:5F:A8:01:57
X509v3 Authority Key Identifier:
keyid:60:F5:AA:C7:6F:E6:BF:29:13:35:D1:9A:65:8E:64:89:10:5B:86:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPWqx2_mvykTNdGaZY5kiRBbhp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c12b00-af82-4735-aac1-2bfb6addcf45/1/YPWqx2_mvykTNdGaZY5kiRBbhp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2e:63:11:23:fd:77:49:29:b1:f3:14:fb:69:d8:ae:14:d7:
b7:53:1d:1e:bd:76:e4:96:91:3f:c3:3f:18:b7:64:db:a2:29:
9d:ce:1a:b0:6b:65:1b:31:0e:f1:08:e7:cc:64:ae:ee:c0:7f:
3d:74:d7:ad:3b:9e:c0:c5:83:ec:1f:85:46:5c:1b:b8:3d:b0:
70:5b:1d:87:70:69:e7:b2:af:fd:45:59:bd:96:42:32:e4:57:
c2:9b:59:54:51:16:c3:6b:f0:6f:11:b8:b8:59:1d:12:f5:c1:
fb:80:79:6f:e1:08:55:22:91:39:05:7f:d4:c2:82:22:6e:d3:
84:af:bc:4e:1a:48:09:31:cc:0b:63:2c:c1:8b:01:bb:e2:d3:
7f:3e:28:2f:26:1f:34:8d:31:40:fc:2a:96:44:11:dd:eb:fd:
df:bd:b3:15:84:41:c1:9d:56:99:3b:6f:5e:5f:7a:47:be:f6:
0d:b5:c7:77:6f:8c:b4:80:2b:a4:56:81:30:df:1a:36:a7:ef:
77:a5:30:13:f0:93:15:c7:17:b6:50:5a:f3:e5:14:ba:a0:ff:
00:3e:22:1f:26:b8:fc:cb:3d:c2:d2:cc:af:02:72:7c:f1:59:
90:34:fc:2f:2c:eb:ff:84:63:48:b8:4e:f1:de:3b:9b:91:0d:
65:0e:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:31 2026 by rpki-client