Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
File: YFvAEwOQWABiCsJsFGixQfgHRRQ.mft (raw, json)
Hash identifier: LYNCxvDSAHvAfurISXlKKPilLxOVTY6l955/VZH812M=
Subject key identifier: DC:D7:03:6F:38:FE:C5:26:F0:8F:5D:68:D9:E3:23:E2:ED:F1:A6:55
Authority key identifier: 60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
Certificate issuer: /CN=605bc01303905800620ac26c1468b141f8074514
Certificate serial: 019D984FF7C0A086EF07E1E23E88184087EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
Manifest number: 0F97
Signing time: Thu 16 Apr 2026 22:01:10 +0000
Manifest this update: Thu 16 Apr 2026 22:01:10 +0000
Manifest next update: Fri 17 Apr 2026 22:01:10 +0000
Files and hashes: 1: BM8B377Px_56t2SpOSeIwiYb21E.roa (hash: PQvnmkxXnZbO0KU8ZDpIj5WU+BEQoUZHX+TaiKJolDY=)
2: YFvAEwOQWABiCsJsFGixQfgHRRQ.crl (hash: PN+7jUozdRFnuwx7FSAF7NDnxA9qUtLcqdwK2HcfutM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f7:c0:a0:86:ef:07:e1:e2:3e:88:18:40:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=605bc01303905800620ac26c1468b141f8074514
Validity
Not Before: Apr 16 22:01:10 2026 GMT
Not After : Apr 17 22:01:10 2026 GMT
Subject: CN=dcd7036f38fec526f08f5d68d9e323e2edf1a655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:0e:83:37:92:6f:3e:7b:c1:16:d5:3e:68:
2c:fc:69:16:f7:89:32:13:85:c4:37:a8:39:1e:13:
d3:c1:c2:79:1e:5b:0c:40:00:8e:b8:73:43:12:c9:
3e:39:d1:d5:bf:ca:3c:84:c6:7e:72:38:d8:e8:e1:
8d:03:cd:02:43:91:b4:43:a8:b9:ed:18:40:bc:1b:
28:d9:c5:87:ac:69:3f:9f:fe:ff:68:85:92:b8:de:
82:8e:c7:f3:a0:44:32:78:fa:f6:b0:9b:87:57:52:
7d:1d:72:d3:75:98:8c:2c:6b:5b:2d:55:55:4d:f0:
89:a9:1f:cd:ce:a2:0c:f5:d6:55:0b:c1:f1:29:e8:
1c:63:f1:18:11:06:fa:a6:54:a8:43:27:c6:b9:5a:
9e:d5:a6:77:d5:a2:77:a0:78:08:b1:03:f9:f0:32:
a8:7e:1a:f0:59:e0:72:dd:ce:bb:8f:7d:cd:43:14:
0e:51:1f:ef:6e:40:ea:9b:fb:8b:6d:67:2b:6a:5b:
45:95:94:9f:74:1e:9b:b6:d0:59:00:1a:ed:21:a7:
92:e1:a0:8a:82:48:b7:fb:c5:15:b1:aa:4c:09:3b:
ae:f2:4b:d6:fd:df:c8:a0:bb:eb:5f:7d:b8:22:bf:
72:c3:7f:53:1d:f9:88:6c:3a:32:f7:0c:7f:75:04:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:03:6F:38:FE:C5:26:F0:8F:5D:68:D9:E3:23:E2:ED:F1:A6:55
X509v3 Authority Key Identifier:
keyid:60:5B:C0:13:03:90:58:00:62:0A:C2:6C:14:68:B1:41:F8:07:45:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFvAEwOQWABiCsJsFGixQfgHRRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3a7a7b-dd9d-4d7c-86c4-13c428ad5fdb/1/YFvAEwOQWABiCsJsFGixQfgHRRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d8:d8:26:4e:59:22:52:95:53:fb:0d:50:00:b0:04:1d:5a:
50:e0:f0:c0:7a:aa:22:59:d5:35:83:29:98:3c:7f:cd:c6:6c:
56:48:cd:72:6f:71:68:36:61:b4:de:74:7e:7f:60:ab:f8:14:
62:a1:3d:45:72:67:24:51:02:90:47:d0:5f:99:05:4e:ec:c9:
8f:59:66:ca:42:13:4f:90:0f:b1:a3:d1:e8:54:36:cd:1c:62:
4f:22:90:f6:87:66:02:46:c5:34:c3:0e:91:90:ec:58:7d:b1:
96:47:f5:e5:69:ec:e7:8c:eb:5d:d9:ed:dc:7d:2d:ea:38:74:
db:85:f8:8f:67:84:3a:fa:e5:99:d7:37:30:78:f5:0a:4f:c4:
e9:a6:d4:25:b9:0c:c6:3c:a3:15:75:b1:47:9d:2d:cf:40:3d:
ca:e4:7c:77:c8:31:91:1a:41:f9:d6:a3:19:ca:3e:66:ec:c3:
bb:58:bd:b1:f5:97:f1:d9:a9:a5:de:75:ee:53:3e:7f:ff:2e:
1c:dd:f8:43:d3:98:c1:d6:e1:3b:3a:e3:c4:69:5e:c0:9b:f0:
91:b6:ed:2d:17:62:e9:88:3b:65:6a:d4:c6:16:1b:7a:98:ce:
65:43:c4:f7:c0:e8:b7:53:99:52:a1:e6:4d:2f:0b:09:8a:f7:
60:97:aa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:20 2026 by rpki-client