Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
File: ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft (raw, json)
Hash identifier: Hv8Qe8gsshETeeitXOwsbzsQoppsit1TQt5ZWEdoTDQ=
Subject key identifier: 85:82:7E:7B:B4:76:9F:F9:18:5D:B2:0C:8C:B3:16:FE:A5:58:95:15
Authority key identifier: C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
Certificate issuer: /CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Certificate serial: 019D9A74A19E6F91DC41F44F1E307D985508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 08:00:27 +0000
Manifest this update: Fri 17 Apr 2026 08:00:27 +0000
Manifest next update: Sat 18 Apr 2026 08:00:27 +0000
Files and hashes: 1: pEMOAtuePyeesz_PpC1UjRHNACE.roa (hash: 6RgHrtS23ZSyoQWavExnsqZLXuo4UZSBu3C0i/+czxA=)
2: ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl (hash: VQJDazYmF+CuEP87gGBV/ek42PuLQkK6KDv6qYS2uQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a1:9e:6f:91:dc:41:f4:4f:1e:30:7d:98:55:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b70d97edf28c76076c0f069b52bcd8e26ae0bd
Validity
Not Before: Apr 17 08:00:27 2026 GMT
Not After : Apr 18 08:00:27 2026 GMT
Subject: CN=85827e7bb4769ff9185db20c8cb316fea5589515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:89:8e:0b:42:be:15:ad:7e:34:8d:02:0f:
26:0c:e8:ab:65:a7:b4:53:e8:8d:11:75:67:97:68:
7a:e6:19:1d:5a:ea:e4:63:30:41:2a:cb:06:9f:d5:
5e:8b:5d:cd:47:29:ed:18:9e:50:36:cd:a7:f8:f7:
42:33:d7:6d:f3:c1:a2:4a:64:94:2b:02:9e:1f:a3:
df:34:ac:f0:a4:83:3c:a2:57:fe:0c:77:00:26:3e:
4a:40:2f:cf:a2:31:73:61:ec:9c:aa:e3:f7:34:01:
36:19:ff:43:8f:d1:bb:b7:45:20:6c:7d:27:c5:22:
e2:23:de:39:0a:40:5c:8f:53:9b:eb:41:5a:b4:c9:
41:11:5d:3d:a1:05:44:27:85:ba:e2:4e:3a:78:57:
41:b0:81:2f:33:a4:e0:ae:07:84:47:6e:a2:26:b3:
c9:06:7d:2b:7b:37:b2:f5:bb:27:f1:17:99:51:da:
8d:c6:b6:3b:7d:ec:c4:87:86:08:86:64:a6:60:57:
6d:76:94:1d:9c:db:0e:70:29:91:55:70:da:51:3f:
25:38:88:d7:d7:fe:0a:25:1a:1a:4b:14:02:ff:90:
5e:b2:30:51:69:3c:b9:6f:38:bf:b8:45:73:c1:70:
62:44:c3:d4:91:5f:70:d9:db:4f:2b:8c:a5:66:6b:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:82:7E:7B:B4:76:9F:F9:18:5D:B2:0C:8C:B3:16:FE:A5:58:95:15
X509v3 Authority Key Identifier:
keyid:C9:B7:0D:97:ED:F2:8C:76:07:6C:0F:06:9B:52:BC:D8:E2:6A:E0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybcNl-3yjHYHbA8Gm1K82OJq4L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5e29b5-f217-4b6b-8d2f-8973b2d7062c/1/ybcNl-3yjHYHbA8Gm1K82OJq4L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:25:02:ac:a0:a1:60:14:17:3d:7a:71:1c:c2:e5:86:87:9b:
78:35:e2:43:de:6b:9b:96:1a:49:e2:70:36:74:c9:e7:b5:a5:
2b:26:cf:1a:37:dd:60:73:5f:fb:b2:c9:58:76:4b:c0:2b:7b:
6d:c7:5c:4a:e9:13:cb:48:a2:15:0b:e0:c8:c7:45:93:42:a0:
d9:ad:da:89:62:4d:89:f3:60:e1:1c:68:6e:10:44:e3:eb:ba:
59:3d:c2:67:f7:fb:20:5d:2f:be:93:f0:08:2a:61:d6:f4:ae:
4c:3d:4c:15:ad:7d:91:2a:a1:f9:bc:3a:1f:6f:3c:ab:5c:10:
fb:e7:33:44:6a:db:56:7d:8e:79:ee:2f:32:4d:57:bb:b0:58:
b9:03:cd:bf:35:b9:6a:79:a7:d9:9e:3c:85:0f:9a:23:12:d8:
b7:ed:2f:2a:80:8a:49:1e:d5:47:78:95:4a:19:f5:a0:b2:22:
68:5b:48:61:e4:36:f8:4a:83:eb:af:19:95:fa:f5:35:55:76:
1a:51:57:99:82:52:d7:d2:bc:a8:7b:0b:58:de:f4:4d:0c:36:
18:00:60:e8:06:04:a5:02:3b:87:38:ce:02:2e:f6:9a:95:89:
ab:f7:0a:1a:79:3e:af:f2:23:8d:c2:9c:5a:c7:05:a4:fd:cb:
bf:4b:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:38:58 2026 by rpki-client