Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
File: YKhR1ZNWypXUrnj6aTa6G4orHHo.mft (raw, json)
Hash identifier: E/+jH00uPIqlomUotpxgu2mMguopskhApuzPH2WZiXY=
Subject key identifier: 8B:9B:04:2C:0E:45:8F:12:50:15:B3:E7:C1:72:56:69:C5:6E:52:BA
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019DA3AEC9D22EDBE12F843AC03105A262D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 03:00:34 +0000
Manifest this update: Sun 19 Apr 2026 03:00:34 +0000
Manifest next update: Mon 20 Apr 2026 03:00:34 +0000
Files and hashes: 1: J3trJnMvDZJ0BcVGu5fGaJyrupg.roa (hash: e8osDQcIENsCGM6JtSYddOPk22ajtK1guuuZINYdCT0=)
2: WiHVRTKANQPSLlslZgPEwLo61sU.roa (hash: NTrkcyBW/Rrku+dfbekK8M7MWrvABIKgt6ihPMKiaiM=)
3: YKhR1ZNWypXUrnj6aTa6G4orHHo.crl (hash: i7/EVfF36EDIdxVa4cj9QdOmbm7uT4zf1PPqNI5Mq7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:c9:d2:2e:db:e1:2f:84:3a:c0:31:05:a2:62:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Apr 19 03:00:34 2026 GMT
Not After : Apr 20 03:00:34 2026 GMT
Subject: CN=8b9b042c0e458f125015b3e7c1725669c56e52ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:6d:47:c5:61:1b:04:73:cf:5b:1b:38:bb:
f0:d2:26:7f:bb:a1:de:ee:75:4d:2c:bf:27:e9:c2:
5c:63:ff:70:27:1c:3f:cf:28:17:38:8f:7b:27:01:
08:4e:c0:d0:35:f3:70:c5:5c:fa:c0:a2:7c:43:d6:
fe:0a:58:d4:4c:79:15:f6:f6:2c:ed:a2:84:69:68:
54:d8:8a:f6:46:dd:e9:87:34:7e:40:20:3c:67:43:
96:0e:06:91:53:1a:8d:76:c9:e1:53:fc:7c:55:fa:
de:96:75:fe:73:eb:9c:cb:08:ea:15:47:bd:9d:25:
43:49:bb:9d:24:af:4e:00:91:6d:c6:ae:80:03:ad:
be:8f:30:9b:36:9b:65:be:cb:7e:c9:2f:19:80:1e:
26:6a:25:20:8b:83:79:d3:6e:5f:12:86:8f:36:b6:
84:a9:56:06:bc:70:a1:1a:77:19:5f:de:59:ad:69:
a3:69:93:b2:c7:d2:ad:78:99:e2:3e:7e:be:72:f8:
7f:23:3d:2e:e1:6b:43:87:0b:4f:77:aa:2d:20:30:
46:75:09:0b:23:24:51:d6:ed:d4:0d:2e:48:b7:09:
a7:f7:ab:d6:71:a8:5b:3a:46:7d:84:bb:00:6e:c3:
f0:ed:ac:20:2f:f4:49:da:41:14:4f:a1:6f:49:27:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:04:2C:0E:45:8F:12:50:15:B3:E7:C1:72:56:69:C5:6E:52:BA
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:49:e8:49:4a:59:51:ff:a3:55:b0:29:25:00:7c:0d:b7:22:
16:cc:c5:e6:26:3d:f1:73:72:fd:d8:1f:31:80:49:86:dd:44:
4f:14:6f:91:34:af:a8:4a:3d:c2:40:7a:03:09:6a:03:76:96:
a3:c3:3d:14:96:3c:be:4c:21:76:27:2d:90:1f:88:ec:0a:e8:
c6:dc:2d:f1:67:57:4d:50:06:70:86:0e:cd:fd:39:ba:4d:db:
76:e4:2d:de:5d:45:71:6f:8a:f0:27:f4:2d:77:61:cc:fa:09:
53:aa:b4:06:2b:11:91:e3:d1:ba:32:69:52:7d:07:43:59:fd:
26:e0:42:c7:5b:58:3b:53:8e:dc:03:fd:df:79:3a:9b:a5:eb:
5f:c2:e8:92:fb:f5:33:32:92:fd:14:aa:78:cf:db:ed:74:7f:
55:cf:32:2a:2c:97:01:0c:04:8a:02:4c:bf:b6:9e:20:9a:65:
e4:b1:e8:5c:b8:cd:a5:ba:a1:f2:1b:2b:35:f7:eb:74:68:47:
fe:95:9c:a2:46:de:60:b6:aa:d6:61:01:bc:e4:78:91:fc:14:
81:1b:3c:47:da:f8:01:a4:0d:d3:5d:99:33:71:06:95:df:8d:
85:08:18:67:e5:64:df:6b:d6:66:e2:54:6d:9e:b1:f6:56:34:
93:1d:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:01 2026 by rpki-client