Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
File: YI5qalQBfdO5sszjX9Wpp_KkVJg.mft (raw, json)
Hash identifier: A3NHN/1kRM5T9xNhsSbiOoRWW92h4DF/a4gLcdN7soo=
Subject key identifier: 06:E9:52:AC:04:6F:46:59:CD:6E:A6:39:A3:AB:6A:DE:A9:97:7F:27
Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Certificate serial: 019D9962F460A4D8227D6E287CE453904A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:32 +0000
Manifest this update: Fri 17 Apr 2026 03:01:32 +0000
Manifest next update: Sat 18 Apr 2026 03:01:32 +0000
Files and hashes: 1: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (hash: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44=)
2: YI5qalQBfdO5sszjX9Wpp_KkVJg.crl (hash: mlAuWq9UR/BFvFKuHMpZVZcO8SZGla4aRRAoxmQ7EJM=)
3: _tJiHAhGvLVPtYOMlLKCBsGuaeI.roa (hash: 0t/lW4HNsvLF4G+Bu7vWjQlegvcFtdB8mR4eqRFVFzU=)
4: d-N2YiUYpoOLPomAp2JVyicVc40.roa (hash: zETEJQC7tB8lRhNeIGpvA+FfF5ncGBNLatmPmvMsTNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:f4:60:a4:d8:22:7d:6e:28:7c:e4:53:90:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498
Validity
Not Before: Apr 17 03:01:32 2026 GMT
Not After : Apr 18 03:01:32 2026 GMT
Subject: CN=06e952ac046f4659cd6ea639a3ab6adea9977f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:31:f1:53:6b:f4:ef:2f:3c:e1:bc:53:fc:
3b:56:ff:9e:cd:2f:48:35:37:a4:1f:94:20:ac:30:
b1:71:1a:5f:35:7d:c6:c4:fd:23:9e:39:80:ac:90:
0d:4b:fc:a2:a3:20:72:00:04:5f:34:bc:05:78:ab:
53:90:3f:80:c4:48:9e:da:e0:49:e0:a7:e3:54:d7:
ce:8f:dc:fc:cc:c3:26:77:50:3c:5b:fc:2f:2c:58:
d6:e5:e3:6c:20:c8:d1:26:e8:34:10:a6:6c:7d:9a:
d2:28:be:69:0d:b3:3e:ad:f8:bf:82:bd:5b:2f:29:
c7:0e:8b:6e:82:78:28:d7:8f:72:10:b1:36:a2:eb:
5c:0f:63:db:d1:68:a3:55:c9:ff:f8:20:1c:5b:6d:
a7:d3:cd:40:0a:82:50:65:59:df:48:11:5e:fe:0d:
d2:8c:d0:1f:52:0d:9f:50:86:fb:79:aa:09:fb:fd:
1e:cb:f2:1d:e3:06:50:52:34:89:af:50:78:6c:3e:
ec:70:fc:f6:35:09:1f:51:bf:e4:eb:2b:d4:7b:1f:
e5:d0:1a:6f:71:7c:55:7c:96:78:ff:1d:55:2b:d5:
51:eb:e0:05:5e:3e:6c:ec:44:a1:82:15:f4:3d:f0:
d1:52:a6:8f:57:df:1a:26:e1:c7:7e:07:29:cd:57:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E9:52:AC:04:6F:46:59:CD:6E:A6:39:A3:AB:6A:DE:A9:97:7F:27
X509v3 Authority Key Identifier:
keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1e:0c:0a:14:17:54:09:d4:2a:cf:81:7e:69:f5:5a:7f:ff:
a3:49:b6:af:6b:d4:30:0b:82:78:ae:0f:a9:ae:e8:0e:07:12:
d6:24:8c:10:5d:cb:a8:27:a7:bb:ab:7f:84:dd:61:19:27:64:
a0:a5:59:d0:de:9e:0d:f8:d1:bd:c6:fa:47:9b:74:4a:b1:36:
45:0f:ac:39:8e:b3:95:e8:9c:36:86:10:d9:6d:ae:cf:06:33:
3b:d5:f6:3e:6a:c3:1d:b3:ca:b0:35:92:19:36:f6:3f:20:76:
62:fe:01:c6:ec:e5:ab:5a:36:1c:2c:24:d2:61:40:87:bf:03:
26:44:42:bb:ba:24:1c:00:bf:64:63:96:67:f2:2e:8c:52:b2:
bf:0d:79:32:3b:b5:b8:3a:fb:42:c9:91:f3:dc:6e:20:af:f8:
c2:c4:91:89:5b:d7:f6:88:4f:44:5a:cc:09:64:d2:19:ec:05:
2d:a4:8b:75:cb:fa:a7:18:a2:e6:9c:b9:3a:9d:41:1c:82:33:
6f:7b:14:e6:bb:ac:18:36:1d:b4:90:e5:92:cb:99:30:6d:19:
52:52:18:c2:36:2e:1e:30:cb:1e:73:b8:e8:d4:7e:3c:14:34:
91:d0:7e:3e:3d:39:8e:e5:14:06:2c:50:85:ba:9d:d3:67:98:
d7:42:7c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:44 2026 by rpki-client