Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
File: YsTHQ9XCr88n8QTrbgMWEWyFx94.mft (raw, json)
Hash identifier: qzLfCVXAQythG/XG5Mr0+yiIatMmFW9KTiBUeV13C6U=
Subject key identifier: 35:7A:36:25:FE:A7:63:94:E7:31:CF:BB:95:A9:A7:19:98:90:5F:91
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 019D9BF51B948855E7D7F05470F8EE469BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
Manifest number: 0E90
Signing time: Fri 17 Apr 2026 15:00:24 +0000
Manifest this update: Fri 17 Apr 2026 15:00:24 +0000
Manifest next update: Sat 18 Apr 2026 15:00:24 +0000
Files and hashes: 1: DT8ZHpsnu95pA077Bij5e4AaTEY.roa (hash: QTft8cX4BupKj8g0B2lC6ytondXy0rFBo523NlqKQRE=)
2: YsTHQ9XCr88n8QTrbgMWEWyFx94.crl (hash: 7gqbJ142IgcVYmQabTwlEWH5jUgthbNkw24iAivpu2Q=)
3: qluoOzLyxaccQSwrFa90RFqcqxg.roa (hash: qpMAcoRGSm/EZYI6/sZIFBd3qkp/MdqT0v4KuQ94Pkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:1b:94:88:55:e7:d7:f0:54:70:f8:ee:46:9b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Apr 17 15:00:24 2026 GMT
Not After : Apr 18 15:00:24 2026 GMT
Subject: CN=357a3625fea76394e731cfbb95a9a71998905f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5e:da:b3:e3:66:9b:38:2d:f2:0d:fc:74:15:
90:c0:4a:79:66:38:7b:9e:21:91:90:3a:61:d9:5b:
63:e8:44:a8:fe:22:4f:df:08:33:6f:74:29:26:50:
78:d5:4c:74:70:23:d5:ab:b4:5c:dc:c5:eb:a0:12:
b3:f3:fc:19:95:20:cf:9a:22:b9:31:e1:15:41:93:
4e:66:9b:9c:c3:25:c9:6e:1f:4d:54:d1:ca:1c:56:
54:e0:2a:ab:71:69:4c:65:fb:34:5b:5a:35:0d:3b:
ad:00:7b:a0:3f:b8:fa:8f:5c:42:52:88:cb:61:e0:
5b:58:ea:54:81:50:4c:95:91:5b:21:97:ba:cc:b7:
52:a7:29:c9:4b:7e:74:77:d9:e8:ee:a8:5e:ee:f7:
93:3b:1a:b5:cc:74:fd:d9:18:cb:eb:55:1a:86:60:
88:13:65:a0:62:cc:53:5c:a3:d1:ad:88:fa:f0:d8:
bc:c1:0f:d0:c3:d7:2c:d2:18:a1:95:c3:6d:5e:f6:
b3:80:b5:62:fd:2e:48:54:b7:c3:84:ba:3c:38:2c:
cb:ef:be:e0:8b:66:9f:c5:37:5b:41:ac:95:f0:10:
f6:4d:1a:28:3b:6d:6f:6c:5b:7b:8e:df:3a:da:d1:
a9:86:c3:bd:ec:5b:80:d3:46:c0:68:a5:67:e4:38:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:7A:36:25:FE:A7:63:94:E7:31:CF:BB:95:A9:A7:19:98:90:5F:91
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:61:76:5b:d6:bc:5b:3f:c5:0f:75:fc:0b:54:b4:49:46:75:
27:0a:4a:d4:13:f2:2f:c5:de:62:b9:a4:97:07:ad:78:8d:79:
93:66:0b:ca:0c:41:d1:fd:2d:dd:16:e8:fb:18:2a:c9:86:3c:
96:0f:c0:66:d4:15:7c:5d:8f:60:ac:de:b4:bd:74:31:97:dc:
8c:78:2f:fc:bc:5d:a9:00:99:74:1d:f2:76:70:a4:ac:d5:2c:
fe:f0:a4:c2:3a:50:05:af:dd:59:61:c8:e0:fe:0c:f5:f3:dd:
ed:7f:96:81:0f:b8:8d:47:80:06:f7:40:cd:87:b9:27:03:2d:
6e:bc:ff:90:8a:c1:d1:2d:06:5b:0b:11:d9:6b:05:96:3b:3f:
7c:29:53:2f:34:40:72:51:27:7b:12:18:37:f2:b0:b4:f6:d4:
2e:02:9c:70:86:38:b1:41:c7:af:81:96:ee:08:03:d1:5f:c9:
63:88:10:37:0a:a0:f1:ce:df:0f:88:6e:bf:c9:a0:a5:ba:4c:
41:69:c3:98:d9:81:6b:ae:52:b7:c6:7c:97:be:fe:01:06:0d:
3f:e0:7d:c9:7f:3d:21:de:81:64:2d:9a:f0:9b:87:58:c5:1b:
98:59:ca:73:38:eb:ce:94:8b:ad:70:5a:d6:62:fc:35:60:ac:
3f:b3:c3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:20:07 2026 by rpki-client