Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
File: yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft (raw, json)
Hash identifier: 8/x0Mzn1G5Pp3g9w5h4xgJ1H18hnTaTDN7xJe+/V7ls=
Subject key identifier: 87:2E:4F:B3:C3:B2:91:6A:20:CB:07:60:FC:F1:1F:53:05:E4:9B:60
Authority key identifier: C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
Certificate issuer: /CN=c8d335041718b18830b1f58c15d3518510fe6118
Certificate serial: 019D9A06D7AB0D51B7B5A4DA827FEB836E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
Manifest number: 112F
Signing time: Fri 17 Apr 2026 06:00:32 +0000
Manifest this update: Fri 17 Apr 2026 06:00:32 +0000
Manifest next update: Sat 18 Apr 2026 06:00:32 +0000
Files and hashes: 1: BtrLSX90RAzPB8q1LlQ_3fEu81g.roa (hash: IqKkz+SIVV58QahCkxGAqKBl0a+skMTLBVSIzhk1MFc=)
2: v8NZKNxgnU-zImgNKMmRR_QjCn8.roa (hash: L8Sl8NS6P/fBhdPviN+pCnl2uaYlMuG1Zvcne9YV8g4=)
3: yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl (hash: leTn7GLSFDFZCi4pU+RKPSzFZuGJDOqddTvlghEQlo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d7:ab:0d:51:b7:b5:a4:da:82:7f:eb:83:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d335041718b18830b1f58c15d3518510fe6118
Validity
Not Before: Apr 17 06:00:32 2026 GMT
Not After : Apr 18 06:00:32 2026 GMT
Subject: CN=872e4fb3c3b2916a20cb0760fcf11f5305e49b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:2c:2d:a7:f7:d9:69:ac:50:16:36:e4:20:
22:46:dd:b9:27:eb:39:ab:c5:fa:b8:75:00:c5:08:
db:db:c2:f6:51:11:fc:53:f0:e3:fe:36:36:90:d7:
15:2a:20:dc:50:8a:6b:88:c5:c4:9b:46:2f:b7:22:
b2:fb:93:da:9e:4a:5f:ff:68:bd:ad:51:c5:3d:00:
30:55:87:3a:93:05:af:62:db:5f:60:b4:de:23:02:
f1:e0:bd:47:0f:d7:0b:ba:bd:1d:31:08:39:10:4a:
2a:43:1c:57:8a:57:9d:d4:2d:43:75:34:18:1f:e4:
b7:9e:4c:f2:9d:85:8a:e2:a7:2b:08:7b:fb:89:00:
d1:ba:82:21:fb:7d:e9:ad:25:42:37:3b:de:b2:f0:
21:38:c7:52:18:fa:89:10:fe:16:30:d3:af:bd:6a:
47:9a:85:45:e2:2f:a8:84:19:dd:ed:9e:98:fd:20:
a8:3b:01:af:d6:d0:f1:bc:ea:86:0e:d2:1e:5c:58:
3b:77:ec:c2:a8:c8:95:e6:47:c9:9d:81:c1:6c:45:
0e:6d:60:8e:3b:f1:a1:6a:0a:4a:21:fa:40:ba:65:
20:6d:2c:4e:27:e9:35:30:59:24:08:b0:5d:7c:44:
7a:71:ed:a8:dc:18:14:b0:ae:df:8b:51:4c:bd:68:
8d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2E:4F:B3:C3:B2:91:6A:20:CB:07:60:FC:F1:1F:53:05:E4:9B:60
X509v3 Authority Key Identifier:
keyid:C8:D3:35:04:17:18:B1:88:30:B1:F5:8C:15:D3:51:85:10:FE:61:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNM1BBcYsYgwsfWMFdNRhRD-YRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8a344e-0ed8-42b2-a744-a9e8468710a3/1/yNM1BBcYsYgwsfWMFdNRhRD-YRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2f:ab:e4:37:ce:de:dd:fe:c7:e3:6e:cf:75:b1:d6:d5:1e:
77:4c:0e:a0:55:8f:6b:4b:8d:98:eb:15:1d:17:aa:b2:ab:60:
80:6a:55:3f:78:6e:37:eb:0e:d3:44:3f:5f:aa:97:73:2a:b0:
23:70:c5:c1:25:44:76:d7:3a:38:3e:00:bb:fb:2f:2b:c8:a3:
f8:80:66:7c:73:03:8d:fc:d4:fa:be:f8:d2:5f:f9:85:c5:9a:
9c:b2:dd:20:0f:e3:19:9f:ef:b5:c4:1a:55:f2:9b:ad:96:7f:
e4:f3:54:ad:1e:35:b7:9e:b1:51:cf:83:1f:40:b6:4a:2f:1a:
ff:f0:24:17:41:2f:40:1c:b1:5c:6f:da:3a:9f:f1:ed:e3:7b:
2c:70:76:a5:a3:56:7b:86:86:17:65:45:fd:e3:73:9e:e3:2c:
94:a3:15:23:8c:34:e2:03:10:5c:af:db:da:99:93:ee:82:2b:
12:59:28:51:92:62:6c:0e:99:e9:78:8b:a4:9d:16:e2:b9:59:
11:0a:bc:69:4b:25:0c:5f:ab:11:f8:26:10:48:58:4a:e0:3a:
16:3c:71:49:2f:62:47:fd:7e:31:d4:fa:0c:68:4c:0d:cf:2c:
cb:17:a5:11:2b:18:d6:e1:16:d8:4f:92:ab:33:61:9e:ba:f2:
c0:ce:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:19 2026 by rpki-client