Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
File: YXfFgJJlmeg6tzW6LgT8EId4xEE.mft (raw, json)
Hash identifier: K56D4DwNmJBJ5o+JsT86vnQnpyB1ddB6tZ0MAA+v220=
Subject key identifier: 3A:2E:40:46:BA:11:92:12:A6:CA:E1:BF:18:36:5B:3D:C8:36:FF:F0
Authority key identifier: 61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
Certificate issuer: /CN=6177c580926599e83ab735ba2e04fc108778c441
Certificate serial: 019D98BD2D73C2367D789B08E16E546A5373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
Manifest number: 1018
Signing time: Fri 17 Apr 2026 00:00:27 +0000
Manifest this update: Fri 17 Apr 2026 00:00:27 +0000
Manifest next update: Sat 18 Apr 2026 00:00:27 +0000
Files and hashes: 1: SJ8xHe56ZjfCxTRlPLXv7qFZ7S8.roa (hash: hiWvSx1LIs95nwS/yqlT6EgpucPxVBdXThwk+Qru9lI=)
2: YXfFgJJlmeg6tzW6LgT8EId4xEE.crl (hash: mVUp8ZkbMwBsayPIvYDHPnlsVGSKJcWh3eD1+xALnBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:2d:73:c2:36:7d:78:9b:08:e1:6e:54:6a:53:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6177c580926599e83ab735ba2e04fc108778c441
Validity
Not Before: Apr 17 00:00:27 2026 GMT
Not After : Apr 18 00:00:27 2026 GMT
Subject: CN=3a2e4046ba119212a6cae1bf18365b3dc836fff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:60:34:fb:6e:e5:e7:db:e2:93:88:89:ba:
c9:f6:c7:0a:77:e9:e7:60:81:04:2b:9c:d9:45:c8:
c1:62:7e:d1:f2:f1:45:84:f2:cc:c0:6d:3b:2a:16:
d0:c5:60:5a:ce:7b:03:63:68:50:44:c1:48:e1:ad:
5b:03:d1:2e:df:b6:79:31:d2:b0:38:39:39:ee:cd:
ee:29:f7:dc:c8:e3:4e:58:f6:58:8c:e0:e7:c3:87:
c1:04:f9:13:f7:23:d3:57:85:94:2f:e1:ce:b3:bc:
f8:8d:e7:b2:9b:e5:46:77:c1:59:2b:e4:28:86:00:
99:c9:35:38:c4:66:88:68:36:bd:57:8a:0c:32:7f:
77:04:43:2f:f1:b0:ef:ae:38:87:72:b3:90:ec:51:
19:14:13:69:77:4b:9e:cf:50:40:cb:27:47:8b:71:
9a:c5:6a:2c:1b:e5:53:1d:b5:f2:ef:f2:4f:a2:85:
14:c3:f3:e5:cc:13:f1:d6:da:81:4b:9d:36:27:b2:
49:0f:53:95:66:77:b2:0b:17:e4:95:ca:d6:c0:58:
05:c4:04:0f:78:31:aa:83:06:53:cd:f4:16:2e:6a:
3e:54:0a:3e:fc:ee:d1:44:5a:bc:86:bc:9d:18:45:
15:47:98:f3:86:01:07:98:a2:d8:30:2c:8f:da:ca:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:40:46:BA:11:92:12:A6:CA:E1:BF:18:36:5B:3D:C8:36:FF:F0
X509v3 Authority Key Identifier:
keyid:61:77:C5:80:92:65:99:E8:3A:B7:35:BA:2E:04:FC:10:87:78:C4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXfFgJJlmeg6tzW6LgT8EId4xEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29bf7b-4745-4423-a8fa-a32e2ed0cfd3/1/YXfFgJJlmeg6tzW6LgT8EId4xEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:8a:0e:14:55:b1:10:be:84:53:8f:a2:ca:42:55:77:bf:
48:bd:48:2a:3c:bf:c5:23:5f:aa:98:48:a9:e5:5e:71:78:e8:
de:9d:92:84:4e:49:ba:ad:f5:72:b7:29:6a:a9:4d:0f:91:13:
38:93:06:58:e1:0a:db:c5:97:a4:3e:d2:7a:89:5f:de:35:14:
a5:48:33:b5:8c:63:6d:a1:c6:f5:a2:21:59:4a:53:8e:80:e3:
a9:69:57:cb:4b:fd:64:80:1b:cc:62:73:5b:f5:d2:a4:4e:0e:
e9:85:91:71:42:a6:ac:45:c1:fa:42:46:8f:f4:b9:71:0d:c1:
7f:89:8c:64:af:ac:67:c2:db:ce:0c:2d:b4:bc:3b:38:c2:cd:
87:ea:a2:21:46:ea:0e:a9:5b:95:ee:37:ee:99:e9:f6:67:44:
4e:6b:62:3d:41:54:77:22:27:ef:7b:a0:55:60:a2:79:d2:cd:
13:42:e5:ab:64:78:a3:2c:18:79:de:7b:d1:ab:19:97:59:d7:
75:47:ea:3c:47:6e:3b:19:d9:9f:a1:32:50:04:12:f9:f7:e8:
85:92:4f:be:b2:8f:82:43:b5:06:0a:e5:7b:43:d4:61:70:f5:
d3:10:cb:46:4e:24:71:64:0b:fd:71:aa:b8:4b:c4:b0:91:d2:
85:12:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:05 2026 by rpki-client