Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File: YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier: NU4P0hu9NdM3OwRlddEiPWLzMyOG4t1tzCJj/s4F+k0=
Subject key identifier: FF:0A:46:1F:28:09:73:F6:C5:D1:52:95:30:05:8A:90:A3:E8:4E:11
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer: /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial: 019D9AAB9AA68A7CE07990BEF362D8757B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number: EC
Signing time: Fri 17 Apr 2026 09:00:30 +0000
Manifest this update: Fri 17 Apr 2026 09:00:30 +0000
Manifest next update: Sat 18 Apr 2026 09:00:30 +0000
Files and hashes: 1: AVMt1IkFQkpQTFPhcJiPQebWyaw.roa (hash: qqeo1sr3KufApWxnZYHLgx99+UAI5SwVQeJY/6Jm77o=)
2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
3: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: jJtvNTMgmZMmHIrsGWpcXnspslCNbZQCe83EYDw0D78=)
4: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
5: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9a:a6:8a:7c:e0:79:90:be:f3:62:d8:75:7b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Validity
Not Before: Apr 17 09:00:30 2026 GMT
Not After : Apr 18 09:00:30 2026 GMT
Subject: CN=ff0a461f280973f6c5d1529530058a90a3e84e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:4b:7b:5b:83:9c:96:1e:5b:11:bf:32:9d:
d5:15:9a:e2:d9:db:78:f0:cd:90:85:29:bf:e7:d8:
d4:cb:35:99:1b:bb:e4:68:7a:c1:0c:ea:8f:e8:b3:
00:d3:cd:0d:37:a9:ba:78:71:1b:0f:00:71:3d:2e:
d3:45:89:ba:1e:b1:ab:20:ce:ba:3b:64:88:ba:cf:
e2:76:e2:a9:36:cf:fd:70:b7:f1:6b:f8:af:93:9b:
b9:f5:64:ba:8a:7a:52:60:11:4d:e5:a3:39:82:53:
0b:25:4e:df:e6:42:82:c4:1b:79:d8:a7:39:a3:87:
0c:d7:f1:c2:6f:3d:d1:b3:c8:ba:3d:e8:04:3b:95:
cc:df:9a:66:fc:b0:bb:b3:71:55:e2:ac:02:68:65:
7f:53:a2:02:99:ec:a1:82:09:ce:ad:fb:01:94:e9:
84:89:09:09:56:d5:6e:2a:66:28:4e:46:3a:fd:dc:
8a:dd:e5:3d:40:0b:28:23:7b:82:a1:2c:ab:1a:01:
b4:fd:7e:cf:f4:ac:d5:b9:d7:a9:04:c6:8f:f1:25:
14:2f:7f:52:5c:68:97:c3:db:9b:48:b8:35:a0:60:
b8:05:03:3f:59:09:29:31:f0:ba:10:6c:82:37:c2:
a2:ec:f2:92:1f:05:b4:b4:0c:eb:44:fd:77:ed:41:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0A:46:1F:28:09:73:F6:C5:D1:52:95:30:05:8A:90:A3:E8:4E:11
X509v3 Authority Key Identifier:
keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d1:f9:8b:e2:bb:e6:d3:58:fc:e3:72:6c:4e:35:07:04:8f:
c4:97:31:35:18:5c:ce:cf:d5:38:b5:0e:6a:d9:f9:f1:9a:83:
22:54:3d:47:a9:57:5b:8c:7a:a5:75:dd:85:ca:48:04:51:15:
16:01:7e:4c:65:06:7d:25:73:ab:fa:c4:d1:3e:7d:a4:86:26:
fb:62:ad:05:2b:a7:15:41:8d:ef:af:6c:c0:27:a2:6c:90:44:
5a:78:8c:59:4e:68:18:7c:b8:ec:0b:8b:40:a6:c4:21:41:f7:
bf:fe:a7:51:e9:a5:55:e1:bc:2d:88:0b:d5:df:90:0e:2c:ec:
78:89:c4:80:74:40:76:d4:29:11:e1:e0:5a:0a:08:08:84:3a:
9d:a6:9f:a7:b2:e3:0e:02:54:2f:81:8b:67:d0:8f:ae:d3:6e:
66:b2:e4:d9:d7:71:e4:0e:4e:35:d3:0e:bc:f7:b0:89:e4:c0:
1f:66:81:ed:c5:b5:c3:40:99:28:1e:f0:8e:e8:6a:d3:d2:84:
9e:9a:83:2b:50:bd:26:6b:e4:ba:8f:fb:8c:65:45:24:8a:b9:
71:ba:7e:5c:83:bb:8e:ae:93:aa:1b:77:a0:b3:3e:ab:c3:ba:
2a:5e:c4:d3:20:3c:f0:28:fa:6b:38:29:6a:36:ca:cd:96:87:
f3:ed:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:55:37 2026 by rpki-client