Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
File: YvSxR6sO_r8-RubeqYXXUYd8u04.mft (raw, json)
Hash identifier: pLPRECB2L6ZHLD/DHUPyr36hPB/+lD3nTgBv8tB8+94=
Subject key identifier: 06:BF:F7:5C:F2:95:B5:95:4E:A2:28:7F:F9:04:59:E6:C6:13:A5:91
Authority key identifier: 62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
Certificate issuer: /CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Certificate serial: 019D9A3E7340BEE761F556F09390EC1BE185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 07:01:17 +0000
Manifest this update: Fri 17 Apr 2026 07:01:17 +0000
Manifest next update: Sat 18 Apr 2026 07:01:17 +0000
Files and hashes: 1: H7jMshEc_QzisAZTqQ39Lo0a0Sw.roa (hash: VHSm4xQSXUeYvPyMKI8xHq/rhiI+mt+3OeZLgSQDqX4=)
2: YvSxR6sO_r8-RubeqYXXUYd8u04.crl (hash: WyMlf9LGU+dbpIJIFFfHpsDzRj5IvMhW9wqyW8TPRTw=)
3: tK2blI7Nfw6lv-wfNLEAveyAmAY.roa (hash: prj90rUe5ES6wRKLWnPtxwq7jXFJ/Ddfe1ZKDbZTkQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:73:40:be:e7:61:f5:56:f0:93:90:ec:1b:e1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f4b147ab0efebf3e46e6dea985d751877cbb4e
Validity
Not Before: Apr 17 07:01:17 2026 GMT
Not After : Apr 18 07:01:17 2026 GMT
Subject: CN=06bff75cf295b5954ea2287ff90459e6c613a591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:98:62:54:cc:07:de:87:0c:2e:bb:89:1d:
8c:22:a5:32:14:2f:11:6f:8a:02:f1:0c:e8:dd:47:
6d:ac:2e:24:1a:fc:f4:23:48:42:ab:98:51:37:ea:
f6:e7:45:fa:ed:51:85:38:b9:47:b9:b9:a1:bb:14:
57:47:74:92:c5:ae:2e:83:80:53:8b:40:2b:f7:09:
a3:30:af:b1:69:08:58:0e:df:d6:db:33:03:bc:99:
e8:b3:dd:9b:64:77:c3:bb:fa:c2:e0:19:bd:ea:a1:
f9:22:86:28:57:cb:b4:ee:03:c7:b4:73:fe:74:56:
1b:7f:6c:18:64:15:d8:7e:77:72:df:db:98:2b:9c:
44:2a:c7:cc:61:e0:0c:b7:57:91:75:73:09:c5:fe:
45:d4:8d:b9:1c:1e:22:87:05:b6:d0:98:42:ce:aa:
a5:f8:75:bb:03:6c:41:b6:d1:73:b5:b2:e4:18:20:
e4:3e:fe:eb:6e:14:f1:27:86:ad:10:5a:ef:90:e7:
27:b4:fd:7c:72:11:10:72:21:ef:9c:d7:5d:27:b4:
e0:c6:0e:8e:37:f0:5c:fc:c5:b8:61:af:5d:1f:f8:
a8:11:51:91:ef:d7:46:ff:1a:0e:5f:88:c5:87:03:
76:9d:f2:83:51:94:3e:aa:db:5c:1e:6c:58:2b:e3:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:F7:5C:F2:95:B5:95:4E:A2:28:7F:F9:04:59:E6:C6:13:A5:91
X509v3 Authority Key Identifier:
keyid:62:F4:B1:47:AB:0E:FE:BF:3E:46:E6:DE:A9:85:D7:51:87:7C:BB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvSxR6sO_r8-RubeqYXXUYd8u04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8e6e5a-aec0-40ad-a628-dab3a9f030dc/1/YvSxR6sO_r8-RubeqYXXUYd8u04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:78:a1:bd:53:74:68:43:cc:13:da:e0:5a:ae:cc:0c:7d:90:
48:82:ee:19:11:8b:b2:52:bb:02:ef:35:8e:6d:e2:a3:13:5d:
44:02:77:4d:22:e2:e9:0c:41:04:4e:68:96:dc:20:2c:0f:45:
a6:94:b2:23:70:9c:d3:06:36:6d:b0:5b:57:dc:26:2c:bf:71:
d5:bf:bc:43:7c:c6:21:dc:79:40:a5:5d:70:21:d5:7e:f6:c1:
e4:07:47:6f:08:e8:8f:b7:ad:86:a0:08:c9:3e:08:b2:c6:25:
11:d0:c1:87:7c:ae:37:1b:4e:c1:0a:65:91:c6:68:83:52:a4:
ae:54:6b:a3:c0:35:b2:a0:db:3c:ac:f2:2d:74:09:45:55:7c:
5b:65:17:41:0f:23:f6:a7:e1:25:58:61:1d:41:25:1e:ab:4b:
3c:ef:dc:3c:71:a7:62:6e:0d:f9:f6:d7:b8:9c:1e:90:b0:dd:
9e:ee:ed:6b:ff:68:4b:43:9a:d3:ba:f3:0c:6f:a6:f2:62:57:
b3:e7:06:36:cf:99:ce:ba:42:cd:fa:54:16:fb:b4:e8:58:83:
66:38:ed:ea:b7:33:bd:cb:18:35:8b:bc:6e:eb:93:c4:a3:ea:
d1:da:7f:7f:d7:f8:c8:a0:f3:6e:d0:8e:be:31:dc:8f:4f:77:
06:66:75:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:34:42 2026 by rpki-client