Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
File: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft (raw, json)
Hash identifier: 8zMWNuXX/3DlukilWKRP9jPbqkUWZxHsPI7lTKbqNEE=
Subject key identifier: 7B:DB:AC:05:04:D3:AC:24:2A:EC:60:34:98:B2:13:55:39:A9:69:D7
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 019D98F4E04D30838DCCFD4C4A98A9FEF8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:01:18 +0000
Manifest this update: Fri 17 Apr 2026 01:01:18 +0000
Manifest next update: Sat 18 Apr 2026 01:01:18 +0000
Files and hashes: 1: YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl (hash: eTyQRViAGyzlJ73LhnEEPeie4oka+xTt20bDW9mo2rk=)
2: tO9v7iTX50tlfuqxxssYC-eagA8.roa (hash: 3ktQe8bKd+z2Ww8PO33mte778OAShNwmN0Svd4eJMUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e0:4d:30:83:8d:cc:fd:4c:4a:98:a9:fe:f8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Apr 17 01:01:18 2026 GMT
Not After : Apr 18 01:01:18 2026 GMT
Subject: CN=7bdbac0504d3ac242aec603498b2135539a969d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:1a:30:60:90:53:9f:a3:dc:44:df:23:d4:
44:94:3b:aa:ac:e6:21:b7:bc:1e:22:9b:1a:4d:49:
d3:63:5b:e9:db:57:ca:00:fb:6f:ca:a1:32:a7:2a:
73:b3:fe:ca:69:1c:56:a6:72:da:eb:07:f3:bc:f9:
73:d3:fd:29:4c:7c:30:63:1f:96:73:ab:ed:ac:ab:
25:3c:84:52:ee:8d:cf:6a:14:7c:fb:d5:11:6a:85:
59:03:d0:04:18:be:13:f5:03:13:34:6f:d0:a5:80:
d8:8c:6b:31:55:c7:6f:6e:fc:67:22:2f:a6:23:5d:
2d:e9:19:ee:b4:8e:d9:e3:f2:d3:7a:ff:10:02:cb:
9b:f5:07:f0:96:08:ba:ae:43:e4:0e:d4:dd:d7:1c:
83:58:2d:9d:0c:f5:1c:89:ac:81:b8:ea:04:98:d6:
85:b0:74:00:9a:39:10:df:ac:51:2d:3b:ab:0a:90:
9d:65:58:44:70:83:d7:62:81:53:82:0b:7f:1a:6b:
c8:91:fd:3e:a0:e3:67:7c:3d:0c:a3:b9:ab:19:72:
fc:67:30:8e:ba:9a:aa:ba:82:21:71:ec:aa:4a:ee:
25:14:11:ca:85:25:9e:16:16:8f:93:f5:7d:2f:62:
35:40:88:34:e8:05:70:d9:f0:4a:2e:8c:fb:2f:46:
43:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:AC:05:04:D3:AC:24:2A:EC:60:34:98:B2:13:55:39:A9:69:D7
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7b:7c:0e:a4:cc:70:d9:89:98:ed:d7:ca:c1:54:69:b8:f1:
2a:9c:c2:2f:dd:88:ef:d7:80:55:c6:e1:00:59:83:72:04:f1:
98:19:b4:45:63:70:fc:57:e3:b4:b4:a5:c8:d8:d5:71:6b:8e:
51:24:2d:a1:5d:f9:9f:76:59:93:7e:21:9c:a4:d8:7b:62:f0:
ca:cf:8e:24:8b:d6:e5:40:0a:d2:6b:3d:cb:68:4d:d0:77:c4:
93:8a:91:b0:2a:39:7d:93:ae:d5:cc:75:bc:50:13:ae:c8:bc:
a8:4e:4b:f1:fb:bc:5b:bc:ca:c8:1b:ef:a8:bc:2a:fe:2f:71:
f8:e8:69:70:6e:a9:b7:8a:9d:f9:34:24:c0:21:57:08:0f:09:
f3:c5:c7:0e:00:c3:45:73:ca:c0:4d:7c:cf:3d:99:24:15:f6:
ce:c2:b7:c3:b7:bf:c0:8a:ba:43:e4:17:d1:f7:4a:bb:b3:2a:
07:0c:10:0e:90:44:e3:06:84:70:6d:f3:cf:91:73:48:83:7d:
fe:e0:1f:e6:5a:be:f2:a2:8d:c7:16:7d:1f:97:e5:f0:3b:20:
93:d1:1c:6d:25:2a:29:cc:77:e8:d7:c9:1e:62:b9:d1:1f:5a:
12:28:13:90:cc:34:ee:a6:32:16:88:74:37:47:58:1a:ca:9a:
0c:9c:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:15 2026 by rpki-client