Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
File: ypQrJwZ2HCunUyiXg-35heM48Xc.mft (raw, json)
Hash identifier: 26RMJcCvr20ESm+EH4swoqjE+9xccFTMT8wknZR8SFo=
Subject key identifier: 63:F9:1E:BD:96:FD:3D:4D:AC:AF:85:68:67:5C:2D:F9:2B:DF:FB:44
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 019D99D006F665A0DABD4DFDFFC6B720031D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
Manifest number: 0E4F
Signing time: Fri 17 Apr 2026 05:00:40 +0000
Manifest this update: Fri 17 Apr 2026 05:00:40 +0000
Manifest next update: Sat 18 Apr 2026 05:00:40 +0000
Files and hashes: 1: nEZjRqy_IwSXLZe3qFcr_H8crVs.roa (hash: HnhhwXUkjtked8MCegHmBPoKwaPIPxEWmVxgxvO0rNE=)
2: ypQrJwZ2HCunUyiXg-35heM48Xc.crl (hash: N3gE79B3wkDAomIm2fs+dvPmdO46SemI/1MVqk6mM18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:06:f6:65:a0:da:bd:4d:fd:ff:c6:b7:20:03:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Apr 17 05:00:40 2026 GMT
Not After : Apr 18 05:00:40 2026 GMT
Subject: CN=63f91ebd96fd3d4dacaf8568675c2df92bdffb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:c5:d9:b8:01:2a:d0:55:45:6f:b2:c9:81:
bd:2b:9e:73:4b:25:81:31:14:e0:2c:a1:1d:29:46:
68:2a:03:c8:56:28:ff:71:ea:3e:19:cd:1f:cf:72:
f7:dc:61:bd:c3:5d:04:c3:4d:31:39:cd:37:2c:44:
06:a0:bb:da:9a:18:2c:39:0f:5d:91:31:29:c0:8d:
a3:e9:c3:be:dd:3c:b4:da:a0:ba:a9:3d:ca:72:1c:
37:9d:46:f0:b5:08:36:52:56:fe:2e:40:78:54:b9:
98:fa:4f:a8:1e:87:2c:54:29:40:9f:5b:ba:3e:6c:
d4:4f:79:f4:50:1f:af:a3:a0:b0:3b:98:31:1d:b7:
a8:94:f1:8c:c0:81:7a:68:8d:4a:d0:2b:59:09:97:
9a:0e:a3:f5:bd:f1:c8:37:68:d2:65:72:da:52:ad:
88:a8:f3:66:57:0a:07:f5:0a:92:eb:4a:c6:09:dd:
28:fa:57:1b:f3:d2:c4:4f:83:74:1f:49:36:69:3b:
43:38:2a:ca:5d:ea:16:92:75:1d:42:d1:7a:8a:00:
e6:1c:0b:78:e9:7c:41:3b:3b:81:ce:0f:1d:78:0c:
c2:6b:b4:82:4f:db:67:26:00:3c:0b:65:63:80:7a:
4a:17:60:b7:4a:f8:9b:99:40:34:92:35:0a:c6:3d:
d8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F9:1E:BD:96:FD:3D:4D:AC:AF:85:68:67:5C:2D:F9:2B:DF:FB:44
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3a:25:ec:4d:62:3c:06:c4:22:39:01:d3:e3:d7:62:92:04:
a9:9a:7f:bf:09:98:7f:cd:59:ee:f3:6a:c0:da:3f:02:36:6f:
56:1c:52:c3:80:fd:ae:ff:2a:7f:35:71:72:7b:09:7c:74:4d:
a3:45:c3:fa:eb:f4:fa:ac:89:81:0d:bc:de:98:df:5c:ad:4d:
ef:0c:47:0c:d3:24:3b:43:95:bd:ff:0e:d1:41:ea:28:b7:e5:
68:1f:ac:ff:e9:d5:a7:a6:fd:0b:0d:21:a6:35:5b:5d:36:bf:
31:e0:a2:ff:53:42:16:a2:1d:60:7d:63:70:ea:61:d3:89:b1:
13:82:0e:55:5e:a5:e9:ff:56:e0:ae:ab:47:2d:c5:ac:90:9b:
19:0c:59:fe:c7:31:fe:7f:2b:2f:c2:d4:55:d3:98:50:c8:d2:
9d:a5:3c:b6:a8:38:b0:ff:24:0f:25:0a:93:e4:df:07:cb:ce:
d7:b2:e9:f4:e0:71:ab:90:88:4d:53:45:b2:43:a1:c2:39:e4:
5b:74:19:93:76:4d:17:b9:7d:7a:56:45:86:8d:7c:49:b5:a7:
b8:db:c2:0e:f9:89:4d:32:15:36:4d:af:95:ae:65:71:e8:ec:
2d:a4:47:07:2a:d4:6a:1b:97:dd:d3:0a:1a:0a:48:11:cf:7f:
6c:ca:0f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:48 2026 by rpki-client