Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
File: YbHjHAn-gm_k15Ln-ohV4K05NCo.mft (raw, json)
Hash identifier: TAY/mKVzv+LNnZ6fF/abQ9VJ9oCSFHwdtdjvu8UHZww=
Subject key identifier: 84:A9:AB:23:AF:81:C6:A7:46:27:72:D2:17:4C:6A:FC:74:B0:83:E3
Authority key identifier: 61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
Certificate issuer: /CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Certificate serial: 019DA30A0AC8865AD576076DA5815C0F424B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 00:00:37 +0000
Manifest this update: Sun 19 Apr 2026 00:00:37 +0000
Manifest next update: Mon 20 Apr 2026 00:00:37 +0000
Files and hashes: 1: YbHjHAn-gm_k15Ln-ohV4K05NCo.crl (hash: EoOx2tv2kc73j559S+r6flyjjx4sUZfXqXwW7tzp634=)
2: gI7wdVdEujvd9VLF4Y0d2YxxXVQ.roa (hash: /3JebFmLKobYKFETqDIlb43OxSa7E2ofJHi6zZ1wGnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:0a:c8:86:5a:d5:76:07:6d:a5:81:5c:0f:42:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1e31c09fe826fe4d792e7fa8855e0ad39342a
Validity
Not Before: Apr 19 00:00:37 2026 GMT
Not After : Apr 20 00:00:37 2026 GMT
Subject: CN=84a9ab23af81c6a7462772d2174c6afc74b083e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:2d:27:27:a7:7b:9e:4f:cb:ae:cc:a5:a6:
65:b1:dd:37:d4:a3:05:04:a6:07:cd:71:22:2d:0c:
76:7e:41:d7:ab:bf:59:d2:a0:68:65:14:4f:01:df:
16:5d:ca:76:1f:6a:fa:b3:4c:b0:dc:a3:ad:ab:ac:
8a:7d:8f:74:8a:ce:4c:9b:5c:42:b2:81:69:8e:57:
ba:aa:25:76:a3:ea:d1:86:39:29:01:35:e2:72:5d:
6f:e9:9a:bc:55:d4:81:4e:4c:9b:7a:a7:f1:2d:be:
2a:4e:fe:cd:56:f1:aa:f2:31:4b:7c:01:14:01:88:
0b:b0:b5:83:98:80:77:32:e4:09:70:28:61:bf:21:
c0:f6:0d:f2:27:3c:9d:31:c7:39:29:b7:27:3b:0e:
4b:3d:e0:cd:c4:53:b0:e6:e7:0c:16:4b:eb:f3:b4:
ad:85:cb:62:2d:34:3e:da:a7:5f:3c:14:f1:01:ab:
3d:5a:f0:12:4b:c8:cb:c5:6d:4b:e7:23:11:5f:dc:
09:06:27:10:d6:b9:2d:37:95:d4:83:fe:8f:9d:9c:
1b:03:79:52:fc:f6:7d:c4:9c:c8:07:0d:3c:a4:3a:
48:c8:3b:1a:d5:ab:d7:d8:fe:94:83:6a:10:df:77:
63:86:5d:f2:90:e9:6c:21:a9:7e:45:d4:b1:db:41:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A9:AB:23:AF:81:C6:A7:46:27:72:D2:17:4C:6A:FC:74:B0:83:E3
X509v3 Authority Key Identifier:
keyid:61:B1:E3:1C:09:FE:82:6F:E4:D7:92:E7:FA:88:55:E0:AD:39:34:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbHjHAn-gm_k15Ln-ohV4K05NCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fb2a45-8d94-4a8d-bcb0-6191b9d0cda3/1/YbHjHAn-gm_k15Ln-ohV4K05NCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:73:8e:b1:44:7d:44:2a:d6:04:7f:8b:31:da:a8:2e:f3:d0:
76:6e:28:f1:64:94:cf:c8:66:07:2e:95:1e:0d:22:50:dc:7e:
d2:65:34:ce:b3:4f:4a:cd:28:0f:f1:c2:64:df:a2:78:45:9e:
e1:43:d1:14:66:5b:a9:85:34:16:3a:90:44:6a:17:c8:f2:ed:
45:af:61:2b:32:67:db:9c:58:41:69:d6:22:63:3b:ca:88:0b:
22:15:47:75:a1:f4:f0:64:cd:20:7e:eb:f2:92:5b:91:d2:b7:
40:7d:7f:ab:a8:dd:20:fe:f8:b6:f8:c6:db:bd:79:c9:99:82:
fa:e9:2f:26:d0:3f:8c:f2:6c:91:fe:57:ec:04:3b:44:03:48:
95:ae:30:32:ee:d1:cb:65:39:b7:a3:3f:a9:f6:0c:2c:02:ca:
20:c4:b5:e4:0d:62:b2:37:30:0d:11:21:0a:0a:87:96:b1:30:
eb:72:e8:aa:2d:ca:5a:4a:da:09:a2:f3:e1:0b:cd:f8:ed:f4:
82:f6:90:10:29:11:20:c2:68:7a:c4:3f:26:4c:bc:82:ec:18:
dd:f5:05:e4:68:24:01:ba:15:3a:8b:30:34:39:af:82:5f:3b:
dd:4a:24:a2:ab:5c:36:fb:e1:04:4d:b4:d1:13:b5:63:92:92:
69:97:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:58 2026 by rpki-client