Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
File: YHzqbhA6IyXEjBZnqZx7F-s857Y.mft (raw, json)
Hash identifier: iy+L1xKxDrbq3WxG3HRlKfdVYcXvYNiGjDLfFawHjyw=
Subject key identifier: 01:D1:58:A0:D8:6A:71:03:06:14:7B:20:2B:73:CB:C9:CC:92:7F:91
Authority key identifier: 60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
Certificate issuer: /CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Certificate serial: 019D9C2D1B5947697ACAD181F57403415733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
Manifest number: 1601
Signing time: Fri 17 Apr 2026 16:01:34 +0000
Manifest this update: Fri 17 Apr 2026 16:01:34 +0000
Manifest next update: Sat 18 Apr 2026 16:01:34 +0000
Files and hashes: 1: H4N6iHzqJPwBL4ZeeQhJkfgslhY.roa (hash: KYorPqkctUfreyDSNu/x2TOdKW4S2t1MdUfVGYYO4/g=)
2: YHzqbhA6IyXEjBZnqZx7F-s857Y.crl (hash: OQvE2q86cddoFlrro7Rdzvqx8d07LiR+JdbGH35ifgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:1b:59:47:69:7a:ca:d1:81:f5:74:03:41:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607cea6e103a2325c48c1667a99c7b17eb3ce7b6
Validity
Not Before: Apr 17 16:01:34 2026 GMT
Not After : Apr 18 16:01:34 2026 GMT
Subject: CN=01d158a0d86a710306147b202b73cbc9cc927f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:91:55:31:0c:01:e4:63:02:d9:30:c6:76:
96:1c:b6:0c:a2:1d:ad:e8:d8:e4:0a:ff:f5:34:e8:
a8:d4:99:c5:90:c3:7b:9c:28:92:a7:e4:54:14:40:
7a:c9:fe:a3:90:a6:7c:22:9b:e1:20:f7:e0:a6:0c:
3c:dd:67:e9:fc:59:3a:1b:8c:bf:d1:89:04:e8:35:
42:3d:05:3d:9c:f8:72:56:5b:46:0f:c9:d7:45:c1:
8c:2c:15:28:ec:90:0b:a3:74:2d:16:bc:d2:c0:1b:
6d:37:41:95:3c:1a:e0:00:4f:c8:d1:5a:bc:68:d0:
76:24:e3:29:6a:74:df:3f:33:97:a8:55:4d:c0:c4:
39:5a:d1:74:0e:e1:6c:aa:e6:0c:d4:25:33:3c:6c:
97:17:1b:25:48:f3:f5:f6:ea:18:29:31:aa:c2:65:
c2:d7:95:ed:11:a6:d1:69:76:68:9f:2b:3f:b9:49:
6d:0a:7f:df:dc:1c:e3:95:b6:34:2d:44:64:c6:6f:
33:66:2c:f6:7d:83:28:73:86:6f:2a:78:c8:46:47:
46:14:20:ed:d1:b9:88:f7:23:98:3f:ce:10:a2:4d:
ac:bc:50:d5:37:d1:f8:d3:df:de:4e:3b:e3:45:39:
30:41:47:3e:c7:f0:f5:ed:d1:02:86:8b:5e:90:44:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:58:A0:D8:6A:71:03:06:14:7B:20:2B:73:CB:C9:CC:92:7F:91
X509v3 Authority Key Identifier:
keyid:60:7C:EA:6E:10:3A:23:25:C4:8C:16:67:A9:9C:7B:17:EB:3C:E7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHzqbhA6IyXEjBZnqZx7F-s857Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e61985-f881-4035-ab5b-c9a9baa43f94/1/YHzqbhA6IyXEjBZnqZx7F-s857Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c9:51:f8:d9:84:ba:7f:5f:fd:fc:17:82:f8:4d:b7:21:1c:
0d:8f:45:f1:32:37:fd:71:7c:ea:d2:d5:98:6b:00:4e:77:d3:
14:ab:2b:ab:65:d3:d3:23:cb:f7:f6:4c:5a:fc:44:bc:10:5a:
af:56:cd:d1:6d:ca:b1:51:72:98:0b:fb:d8:69:b1:9a:c2:49:
f8:2c:25:63:66:0c:2c:9e:09:8e:99:ab:c9:75:fd:d4:76:2a:
72:f0:16:c8:93:b2:de:a9:b6:7e:cf:60:a1:c0:eb:4b:28:34:
a3:ed:dc:98:a6:df:64:37:46:9a:fe:a2:2c:a3:5f:2b:71:58:
96:4a:e3:a0:b1:52:c9:07:5f:0b:39:04:e0:10:c1:e6:27:86:
81:6c:db:b9:3a:ef:32:83:ef:25:4f:bb:a5:2b:27:60:6d:35:
91:4f:a4:07:37:f9:d7:37:74:eb:bf:de:f4:5b:bf:d9:6a:3a:
52:99:ba:4d:ac:05:b2:26:00:bc:df:55:8d:61:99:5d:54:10:
44:e8:c8:f0:70:18:15:8a:8b:01:62:3a:cd:e2:1e:ef:4e:8e:
06:a3:84:7e:50:9a:b3:a9:4b:b8:95:31:4c:29:42:b4:11:d3:
04:96:96:16:11:b3:7b:fe:33:01:ba:67:f2:cf:b0:66:40:b7:
50:33:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:58:44 2026 by rpki-client