Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
File: yd1CJDGXhku0gWRh1NBlOrC6Mro.mft (raw, json)
Hash identifier: +b50W+OZfcElI5pbVOzR4cPD95lA4ATctmH4KSwsnnM=
Subject key identifier: 48:B8:45:E7:21:C0:8D:E0:4C:64:44:FA:07:F1:CF:2B:C6:B5:CE:26
Authority key identifier: C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
Certificate issuer: /CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Certificate serial: 019D98BDE72F53C342110FF53060531118AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:15 +0000
Manifest this update: Fri 17 Apr 2026 00:01:15 +0000
Manifest next update: Sat 18 Apr 2026 00:01:15 +0000
Files and hashes: 1: 45j6eHYF_02muc8QdARO0K6hDmo.roa (hash: RBkJqhmrXlwPWTL2teXXxMSS7p2416ywX2dYxmAUw9s=)
2: yd1CJDGXhku0gWRh1NBlOrC6Mro.crl (hash: S+yy/ABZRNBRC1Oers/1YKTDkTVkQozfzskMJlNjXLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:e7:2f:53:c3:42:11:0f:f5:30:60:53:11:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dd42243197864bb4816461d4d0653ab0ba32ba
Validity
Not Before: Apr 17 00:01:15 2026 GMT
Not After : Apr 18 00:01:15 2026 GMT
Subject: CN=48b845e721c08de04c6444fa07f1cf2bc6b5ce26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:2f:d3:af:af:e2:bb:08:a4:e8:0b:a0:0f:
c2:a1:69:7a:f6:cf:fe:6d:75:53:25:6c:bc:e0:e9:
b8:a7:cb:0c:a7:28:e7:8c:d1:b3:db:8f:a9:75:eb:
aa:8e:a9:9f:cb:6e:85:ed:8c:97:d4:8a:5e:8e:6c:
a2:45:c6:57:27:67:37:e4:cc:97:09:48:5f:02:40:
9a:bd:1d:97:10:5f:c7:26:4e:ff:0f:36:8e:60:48:
7e:6c:ea:15:40:be:d8:1b:29:03:af:70:4a:c6:d6:
34:ca:98:f5:2f:24:cc:e9:41:f7:df:21:14:fd:8c:
98:e5:45:c3:6b:23:50:5d:50:49:cb:81:6f:47:08:
98:04:ea:9f:28:7f:71:ce:01:1d:7e:39:a2:d6:4d:
0a:ed:8c:90:9a:4a:e4:1c:f1:88:42:b3:c8:00:e1:
f0:ee:d2:26:de:48:bc:5f:74:cd:f9:6b:e7:1f:f3:
e6:77:5c:32:c2:d6:92:ac:f2:62:04:75:b7:0d:08:
b6:ef:ae:c7:3b:18:06:bd:92:19:a9:15:05:86:57:
9f:3c:30:c3:06:10:1a:a9:73:f8:3b:c1:56:56:01:
11:ef:dc:c1:30:11:fe:5f:72:f8:db:64:27:b5:13:
0c:9b:f7:c3:ce:d7:20:70:5b:5d:ea:11:4c:ed:d9:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:45:E7:21:C0:8D:E0:4C:64:44:FA:07:F1:CF:2B:C6:B5:CE:26
X509v3 Authority Key Identifier:
keyid:C9:DD:42:24:31:97:86:4B:B4:81:64:61:D4:D0:65:3A:B0:BA:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yd1CJDGXhku0gWRh1NBlOrC6Mro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5da15a-97a0-4a77-9bca-64a715a5f69b/1/yd1CJDGXhku0gWRh1NBlOrC6Mro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:55:b9:0c:63:8f:93:71:11:df:15:c9:c7:d7:37:85:56:04:
fc:96:c7:ef:61:b9:f0:94:14:36:b4:08:cc:6b:50:89:4c:22:
48:87:d5:1c:01:a6:1f:f2:6d:0b:18:65:4e:c6:cc:08:f4:69:
e9:54:fd:85:8c:a7:cc:37:80:e4:d4:51:71:a7:91:4d:46:d8:
aa:55:f7:45:fe:3a:1d:da:1b:37:37:94:05:ac:93:bb:91:91:
fe:6c:8a:d4:74:0e:b1:10:5b:17:cf:dc:f9:a5:b3:11:d8:25:
fe:96:3e:09:93:94:61:ee:51:ba:b7:c4:dc:a1:49:92:c9:8d:
a9:dd:35:b2:a9:dc:b8:ad:99:52:26:a1:84:50:3f:d3:ab:8d:
32:e2:27:56:5b:72:ac:d0:fa:53:0e:0e:88:c4:11:f7:36:f4:
7f:24:37:98:a3:2a:41:10:b5:6b:6f:1c:ed:b2:19:b6:2b:41:
54:80:6e:5d:82:12:f9:fa:32:ac:0d:e4:7d:d9:b7:a4:47:b1:
d9:12:72:30:fb:f7:e9:13:f2:4d:c7:22:0d:c5:21:13:2c:a4:
b7:a3:ca:71:41:96:8f:d0:4a:73:5f:28:14:8c:b6:a6:35:9c:
ee:ad:03:33:7e:2c:68:62:ae:5d:50:25:f4:14:2a:30:21:12:
6a:4f:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:19 2026 by rpki-client