Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
File: Yf4ur6ZKzq8fz8-8phUKei01vko.mft (raw, json)
Hash identifier: 3Sy7RZnonpW2akmjbNRDOGWoPkvgdoW0K/e5y/bBgdI=
Subject key identifier: 5C:91:DF:A8:8F:D6:F1:D2:6C:8F:9E:A9:3D:AB:AE:42:71:EB:B2:CA
Authority key identifier: 61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
Certificate issuer: /CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Certificate serial: 019DA309E8B3C2C9839B5696A1AFF7979B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 00:00:28 +0000
Manifest this update: Sun 19 Apr 2026 00:00:28 +0000
Manifest next update: Mon 20 Apr 2026 00:00:28 +0000
Files and hashes: 1: UJudbdHaQF50Sph8SS93Ii0CNBg.roa (hash: BhW8Ppudpr7Ja11wBjitKBz/FAThXnQThhUCrlT7gwQ=)
2: Yf4ur6ZKzq8fz8-8phUKei01vko.crl (hash: d/CHFDHg5W2ptReaX1aYEtDOHwuWIiRQO/0wfv/+P3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:e8:b3:c2:c9:83:9b:56:96:a1:af:f7:97:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61fe2eafa64aceaf1fcfcfbca6150a7a2d35be4a
Validity
Not Before: Apr 19 00:00:28 2026 GMT
Not After : Apr 20 00:00:28 2026 GMT
Subject: CN=5c91dfa88fd6f1d26c8f9ea93dabae4271ebb2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:d1:8b:d0:e2:a8:81:e8:e0:11:21:4c:13:
f4:48:f8:ea:cb:b3:e0:1e:27:9f:b7:ea:f9:cb:7f:
a9:8a:6a:b3:6d:d0:cd:f7:3b:e0:ce:98:3f:94:cd:
ea:a5:dd:b7:eb:49:c3:ca:4f:ca:77:0d:d0:5b:ed:
45:e6:03:3b:d5:1a:d3:17:92:89:94:04:53:3d:13:
96:44:de:86:2b:b0:2d:64:47:87:35:d2:6a:5c:8f:
f1:9e:7c:f8:24:ca:bd:ee:7f:bb:08:4d:c8:76:24:
36:1d:40:a3:86:3d:a8:31:07:8a:16:5b:86:9e:58:
bb:f0:a4:3f:79:73:4c:b2:6a:fb:6e:c8:56:45:31:
c4:fa:ec:bf:96:47:10:b9:4e:d5:ba:eb:f8:00:f0:
b2:43:87:6a:b2:1f:e5:af:67:90:b1:c6:a4:95:db:
ac:78:03:dd:2f:e8:ea:62:3b:ab:f0:8a:7e:93:f5:
1e:48:4a:38:47:1f:51:4f:16:ab:b9:c7:68:2a:79:
56:09:1e:b7:de:1c:b4:4b:32:eb:94:dc:ea:9f:23:
b9:88:56:b5:f8:68:ba:09:12:c4:51:06:24:f0:66:
8f:f2:51:d5:74:55:90:a5:5c:51:51:0a:12:88:9f:
d1:09:00:1d:7c:63:1d:b6:8e:d9:18:91:e1:ee:e4:
c0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:91:DF:A8:8F:D6:F1:D2:6C:8F:9E:A9:3D:AB:AE:42:71:EB:B2:CA
X509v3 Authority Key Identifier:
keyid:61:FE:2E:AF:A6:4A:CE:AF:1F:CF:CF:BC:A6:15:0A:7A:2D:35:BE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yf4ur6ZKzq8fz8-8phUKei01vko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/Yf4ur6ZKzq8fz8-8phUKei01vko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:63:94:26:5b:53:da:fa:c0:30:3a:d7:d1:6b:4f:31:f3:ca:
06:92:a9:a0:33:b8:77:f0:35:3d:8d:90:45:f8:63:75:8b:81:
1c:57:e7:7c:79:ca:9f:c2:43:60:74:82:78:56:34:6b:05:36:
c6:81:bf:f0:78:9e:3a:67:d4:2d:ee:61:a4:e5:d6:de:9c:bf:
a0:97:57:39:21:f0:d3:f8:b4:ca:7b:55:fd:93:a9:eb:ff:38:
7f:9c:6c:3c:c7:1c:46:98:3e:d7:bb:bd:b7:67:70:c8:cc:cd:
47:05:61:97:c9:46:61:8c:1e:10:39:0a:f7:38:f0:8b:e7:86:
f7:a4:b4:06:6c:6c:39:c4:1d:37:14:db:6b:b8:9a:97:00:57:
69:c2:0c:a2:2c:a7:5d:34:29:50:2b:bf:8f:90:b0:62:f8:fb:
ab:c1:ac:81:12:da:a2:99:c5:9f:7e:4b:f2:c2:be:ed:eb:8d:
ba:6d:ba:0f:20:a2:8e:de:e7:c9:7f:5f:be:54:3d:bf:e4:85:
2c:ed:b5:4e:8d:b6:3a:42:8b:cb:f0:7e:94:44:a5:75:1f:86:
7b:1b:f7:5e:8b:a3:b1:b0:f9:a1:53:7a:41:71:91:e2:24:2a:
31:be:e0:31:98:5a:37:ea:a2:97:07:5c:05:ef:e8:1b:2b:a6:
31:67:b9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:01 2026 by rpki-client