Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
File: YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft (raw, json)
Hash identifier: xlFwsNCGSdvtP/CVxb1EC8g0HPOhFgBninDXNw30TN0=
Subject key identifier: 21:06:8A:B0:A8:DC:E9:79:B2:19:52:17:E1:76:21:7B:88:ED:B7:7D
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019DA29C471E35EDB99633BA8277DBFFA733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
Manifest number: 18C9
Signing time: Sat 18 Apr 2026 22:00:43 +0000
Manifest this update: Sat 18 Apr 2026 22:00:43 +0000
Manifest next update: Sun 19 Apr 2026 22:00:43 +0000
Files and hashes: 1: YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl (hash: cw4SMHngNCE1BY5SLogJeVic1OCvpeliwF526Lbf+nA=)
2: qdhzDXuwEXMKIhcBtC--OVRDYRs.roa (hash: iT11iYdlbhQ14x4ERQHAeOODlysNDcwshKAALWJPnaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:47:1e:35:ed:b9:96:33:ba:82:77:db:ff:a7:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Apr 18 22:00:43 2026 GMT
Not After : Apr 19 22:00:43 2026 GMT
Subject: CN=21068ab0a8dce979b2195217e176217b88edb77d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:af:9d:01:27:d1:c5:aa:3c:8b:0d:19:8c:
78:7a:c6:6f:47:d2:05:41:70:01:f7:2d:b7:8b:ad:
3b:88:16:b4:ca:90:4a:8a:d5:ce:55:11:7e:55:ac:
07:47:92:2c:7d:1f:5f:ad:bd:12:97:d9:37:47:4b:
f3:dd:d5:73:c0:1d:bb:c8:40:f4:22:13:69:d0:bd:
f3:82:81:19:b8:5c:0f:87:39:b3:a8:20:2f:df:8f:
00:11:f6:92:a2:1d:f3:ce:4f:28:86:7a:b1:94:d5:
aa:73:9c:29:5a:9c:ce:9b:f8:41:c7:5a:74:ae:eb:
e8:61:ca:d9:5a:f6:d3:51:70:82:fc:a6:d3:d5:b3:
45:73:e2:78:e6:f4:e3:ff:50:a5:e3:e5:3c:1b:7f:
1b:64:24:f7:19:82:4f:d2:7f:1e:d3:53:fd:fd:81:
ad:01:73:aa:e1:44:98:39:6c:da:dc:d8:f2:15:3a:
e1:b9:7c:96:c0:4b:c8:95:50:e7:aa:f3:be:39:09:
6c:ad:a2:09:49:4d:a3:37:15:ee:2c:c0:ff:4a:bd:
b6:37:c8:6c:82:0e:4d:86:b4:72:49:0e:91:76:54:
25:72:de:a0:d0:94:07:70:e2:72:a5:21:c1:5a:1a:
d1:f4:8e:ba:f8:27:c6:aa:a4:a8:85:56:6d:b9:6c:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:06:8A:B0:A8:DC:E9:79:B2:19:52:17:E1:76:21:7B:88:ED:B7:7D
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:88:77:b7:e3:78:bc:9a:83:b5:f1:77:8a:d1:01:e1:ea:d3:
55:af:0b:f3:40:de:ee:7d:80:46:75:f9:e8:53:31:ed:1c:97:
80:43:ce:62:e0:59:48:57:94:91:a8:06:3e:4e:c3:ac:c3:21:
06:f7:dd:e3:5c:ca:f0:fd:14:d1:23:e8:61:48:d4:c7:f4:48:
50:b9:4b:0b:33:7f:47:55:25:0a:f7:9c:5a:67:66:86:e5:23:
44:7b:77:fb:27:04:76:3f:2f:b1:f4:fb:ae:60:13:ab:f9:92:
af:31:9f:fe:2d:16:07:c9:00:3f:e1:b1:35:a1:aa:1e:6c:e9:
eb:e2:6a:21:9f:6a:7c:fc:83:62:b5:01:1d:39:c3:1d:68:e0:
a9:33:2b:82:de:d9:6a:3c:c3:ce:41:c4:39:38:4a:ba:21:a8:
fb:40:c4:f0:3a:7c:cb:b0:fa:ee:ac:8f:df:be:0b:8b:6a:41:
6b:76:85:cd:b3:ba:2a:ff:34:af:95:99:6f:e4:8b:bc:75:0d:
fc:65:4a:d2:99:0c:65:24:89:09:6a:60:87:30:6f:4e:55:cf:
89:85:d0:82:7e:6e:a2:c4:7b:85:ca:4b:e9:20:bb:bb:be:6e:
73:80:91:ff:fc:1a:1c:a4:36:81:e0:5e:38:c1:6a:d8:8c:a2:
33:4b:74:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:43 2026 by rpki-client