Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
File: yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft (raw, json)
Hash identifier: asw/TGeIb+kc3qbz3diXBKfFeDVw2MdXrX3rE38TEI4=
Subject key identifier: DD:F5:23:79:0A:EA:FF:B4:44:E9:78:65:FB:97:BC:CD:C5:6C:F4:5D
Authority key identifier: CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
Certificate issuer: /CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Certificate serial: 019D9AE26D88FC3D6DB46FEA7046AD5E5BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
Manifest number: 130A
Signing time: Fri 17 Apr 2026 10:00:23 +0000
Manifest this update: Fri 17 Apr 2026 10:00:23 +0000
Manifest next update: Sat 18 Apr 2026 10:00:23 +0000
Files and hashes: 1: 6SyYBw_h6FtZj49a8Gsl0fZClAc.roa (hash: yUA4V2vWgaIeFq+az6maBFcRTyB0lNwRfV6wBfzazGA=)
2: OQMOmyJrTs_6IRpsGLg9HTyoV7k.roa (hash: A7mJeUCg10L9AXlKSZcymy8lwjHDqKuB18cMHj/bo4g=)
3: yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl (hash: J6PhpenitvX1sK8u84l5nkV1s7QnCnk89boTocIr1Wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:6d:88:fc:3d:6d:b4:6f:ea:70:46:ad:5e:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca329ced8efb41f3b4a2078d94bbb0a3aab4fb02
Validity
Not Before: Apr 17 10:00:23 2026 GMT
Not After : Apr 18 10:00:23 2026 GMT
Subject: CN=ddf523790aeaffb444e97865fb97bccdc56cf45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:e7:a5:a2:14:7d:be:02:94:9a:03:58:05:
1b:02:ee:10:d7:a2:f7:19:ed:c0:4b:ef:29:30:48:
d9:16:76:f4:0e:57:5f:67:9d:1b:52:ed:2a:23:b0:
61:61:e9:6e:97:39:93:c3:5b:fc:ae:4f:50:37:5d:
b0:53:2e:e8:a2:d0:17:19:56:fc:62:d2:48:b4:c6:
c9:1e:7e:1c:21:60:fb:3e:fe:f0:47:bb:4e:84:92:
9b:20:b2:6a:ed:b6:6e:27:8c:c9:5f:0d:db:9c:b3:
97:2e:c4:69:ca:22:c5:ff:bb:25:24:e6:45:68:8a:
06:e4:11:ca:b2:80:63:c0:7b:8c:5c:71:99:ae:c8:
1f:76:64:01:e0:e4:5b:c3:d8:16:23:64:b5:72:51:
ed:6d:5d:db:f3:39:df:9b:13:16:76:f0:85:e3:f5:
01:bf:49:e9:b6:ad:6d:53:ab:44:8d:60:c0:1b:84:
b6:1a:25:9d:96:32:e3:41:49:d8:07:fc:6c:95:fb:
5e:e7:f1:dc:77:62:1e:9d:9b:e6:90:66:4e:d4:d3:
60:8f:63:8c:b3:6d:94:e9:79:27:e7:6b:e9:21:f9:
e5:3b:3f:92:8d:ea:fe:fa:2c:38:19:c0:70:9d:36:
92:60:b6:01:5c:68:21:2e:d8:ba:09:66:f6:20:02:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F5:23:79:0A:EA:FF:B4:44:E9:78:65:FB:97:BC:CD:C5:6C:F4:5D
X509v3 Authority Key Identifier:
keyid:CA:32:9C:ED:8E:FB:41:F3:B4:A2:07:8D:94:BB:B0:A3:AA:B4:FB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjKc7Y77QfO0ogeNlLuwo6q0-wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/50e780-eca7-458e-b6aa-9dbc35672329/1/yjKc7Y77QfO0ogeNlLuwo6q0-wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:91:e6:63:d4:d3:81:72:0d:4d:78:70:b6:04:8f:33:62:6f:
fd:82:1b:73:c9:94:99:00:15:a6:fd:a8:ae:5c:cf:71:32:55:
38:21:22:64:72:ba:49:75:de:3e:47:b3:6f:df:8f:3a:3f:7e:
23:4d:9a:2e:b8:77:02:83:76:1a:93:50:3b:33:9b:19:8b:7c:
d2:ee:dd:b3:5e:4e:53:31:a9:aa:26:d2:2d:3b:2b:e7:cb:0f:
6e:ec:60:9b:df:46:ac:c5:6d:db:02:3a:b5:9c:16:a1:d2:44:
4c:64:53:59:03:d5:f9:6d:46:88:50:f4:7e:50:05:44:1d:52:
41:4c:57:9b:0e:86:e9:b7:2f:6e:12:95:8b:69:b4:8c:07:eb:
8a:f5:3c:5c:89:de:40:2c:6a:5a:fd:d0:eb:c5:54:bf:e6:58:
81:c9:1a:74:c1:58:eb:54:37:c4:f9:e8:09:d6:b3:9d:ee:db:
5c:59:3c:4c:1b:4c:69:c0:58:23:1c:4e:72:b2:5d:a5:41:22:
84:ea:ba:2e:ff:e5:8a:e6:bc:b2:b1:63:54:29:97:a1:13:b2:
59:7e:3f:50:5d:71:a3:05:7f:c1:e7:4d:96:97:2f:50:88:29:
42:4e:b8:56:07:5d:e0:36:61:ef:82:c2:68:0d:d6:f4:df:49:
82:70:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:49:15 2026 by rpki-client