Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
File: YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft (raw, json)
Hash identifier: Mt/sfWmIb7wFA64R+RJmHtO/riDfj3WbYIKkoUSrnwE=
Subject key identifier: E5:24:35:DA:D2:B7:E9:B3:59:60:8B:47:5D:DB:82:27:C8:3E:1C:C1
Authority key identifier: 60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
Certificate issuer: /CN=607548c37abebc58b928ed285433d69e95df9c3b
Certificate serial: 019D98F41083E0CD989A2CCB201ED9876428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
Manifest number: 0C87
Signing time: Fri 17 Apr 2026 01:00:25 +0000
Manifest this update: Fri 17 Apr 2026 01:00:25 +0000
Manifest next update: Sat 18 Apr 2026 01:00:25 +0000
Files and hashes: 1: YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl (hash: AZyKRTFxlZkc2SNWlo5mtzYq4rCRC+g6KO/svGPj+/o=)
2: a51cXgxKSVntETY6pLsFiKPsOJo.roa (hash: o402E4LpPhqmAP+XyqCG1p/8riR3uOjtyT+/vmwZflU=)
3: nADULd3amnYGR0Tr5B09poIsE28.roa (hash: gJvUmAM3aJOUpRMN3qv/5KjDyZgYcOC2qsvGzHbLhP8=)
4: qfbS_MhHwZ5T9Pkm-e5XKyepAeI.roa (hash: O0H1y3N2wNZcfjYWRzPfGG78Vh6yNgbXWFsd+yyCqLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:10:83:e0:cd:98:9a:2c:cb:20:1e:d9:87:64:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607548c37abebc58b928ed285433d69e95df9c3b
Validity
Not Before: Apr 17 01:00:25 2026 GMT
Not After : Apr 18 01:00:25 2026 GMT
Subject: CN=e52435dad2b7e9b359608b475ddb8227c83e1cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:76:65:79:00:34:55:d2:67:2f:9e:77:51:
2b:f8:cd:cc:ce:d2:f8:fd:fd:55:9d:24:5b:30:a7:
07:5e:3b:76:ab:54:e7:7f:05:82:48:0e:ca:77:94:
60:99:bd:8e:98:3d:1d:79:1a:44:f8:3d:40:32:59:
2e:29:77:ef:9f:dd:62:0f:a6:88:d0:7d:bc:45:48:
da:a5:6e:8b:ff:b0:aa:f4:1e:8f:cf:19:c4:2d:6a:
e3:f8:81:77:fa:95:b8:f0:3f:1e:d0:71:bf:82:18:
aa:73:78:a7:94:e3:cb:3c:b5:46:bc:1b:07:18:0a:
24:1e:ea:5c:a7:c4:04:ba:8e:86:78:c8:7a:49:c1:
d3:1e:01:29:91:51:e1:42:0b:7d:33:26:f8:0f:db:
ce:c6:50:2c:01:a1:fc:d5:53:1f:c8:70:09:8d:00:
c2:2d:3e:32:87:c1:c7:62:cd:96:0b:6b:4b:20:8b:
31:85:7b:e1:34:63:f9:e9:6c:5e:36:6a:fb:fd:c9:
9c:dd:7a:d7:f4:40:c1:24:f6:8c:b0:99:e9:cd:03:
34:75:93:bb:77:72:30:8f:06:91:e2:1d:0b:9a:0d:
24:ef:e1:01:67:b9:c2:f0:61:20:b6:cb:5f:dd:c4:
4f:56:51:76:bd:e7:25:05:c8:f3:46:e7:6d:7a:39:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:24:35:DA:D2:B7:E9:B3:59:60:8B:47:5D:DB:82:27:C8:3E:1C:C1
X509v3 Authority Key Identifier:
keyid:60:75:48:C3:7A:BE:BC:58:B9:28:ED:28:54:33:D6:9E:95:DF:9C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHVIw3q-vFi5KO0oVDPWnpXfnDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/52b634-6148-4e2e-b8f3-0c98c570a6e0/1/YHVIw3q-vFi5KO0oVDPWnpXfnDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4d:33:4b:00:5c:65:b6:7e:25:4c:a9:8d:52:46:f2:8c:c1:
15:23:d5:53:ad:28:2b:e6:0a:3f:ce:d6:6b:7a:e8:ec:3c:07:
61:e1:64:3e:09:08:2a:4e:d1:9c:0d:e6:a7:d8:09:b4:55:5e:
02:24:f4:f4:28:c5:5e:e9:54:84:0b:58:22:dc:a4:4b:9c:5c:
8d:a3:d3:44:f0:f2:03:96:51:f5:8f:3c:b3:77:df:27:b8:a8:
7a:8f:54:b3:82:d2:37:f2:f6:e8:04:83:23:11:26:60:c4:9b:
a5:60:99:03:1d:ff:d6:be:83:22:8d:b4:e0:96:c2:84:ec:d2:
5d:48:cd:4d:2e:33:58:05:b4:01:1b:1e:60:fc:e8:f1:79:ed:
0d:31:85:69:c5:a5:7b:58:d9:60:d4:64:37:d3:80:a0:a3:d8:
6e:9f:8e:39:22:a2:c4:a2:22:38:38:29:9e:e6:2c:d1:0c:fa:
99:07:5b:d9:c3:b1:c0:35:6e:47:0d:52:44:51:7d:41:a0:59:
ce:ac:11:c3:e7:b3:b0:d2:68:2a:73:dc:fd:aa:f7:3a:c5:bc:
38:4f:9d:68:21:50:bb:7f:7f:0f:4a:b3:38:e3:0f:55:53:41:
d7:8e:93:9e:e8:e2:fa:ba:84:4a:4e:8e:95:aa:0e:ea:f2:cb:
19:0a:50:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:53 2026 by rpki-client