Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
File: YcXtDe2GJbMrZTMgcinyxGclmEg.mft (raw, json)
Hash identifier: nk6OxuFuuCqHGOElEs6Mv7AQXoOibDHXQzgU+L7akwM=
Subject key identifier: CE:24:8D:90:CB:20:3D:F9:1B:D3:1A:CB:D9:12:55:9D:B0:D3:FB:E9
Authority key identifier: 61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
Certificate issuer: /CN=61c5ed0ded8625b32b6533207229f2c467259848
Certificate serial: 019D9B87300029094B52F5622BC787422374
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 13:00:21 +0000
Manifest this update: Fri 17 Apr 2026 13:00:21 +0000
Manifest next update: Sat 18 Apr 2026 13:00:21 +0000
Files and hashes: 1: QdSCp7V6SXB6kY3MDm-0dxcIQJY.roa (hash: j90AwqYuVEioYPkOABNDsET8wy4V7UafpGuH2RPQHeg=)
2: YcXtDe2GJbMrZTMgcinyxGclmEg.crl (hash: lFKvMsW9cKebL0HUFM1fx21QSOpbctzjSGtba0pyj90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:30:00:29:09:4b:52:f5:62:2b:c7:87:42:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c5ed0ded8625b32b6533207229f2c467259848
Validity
Not Before: Apr 17 13:00:21 2026 GMT
Not After : Apr 18 13:00:21 2026 GMT
Subject: CN=ce248d90cb203df91bd31acbd912559db0d3fbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:cc:c1:b2:49:5b:35:17:67:0b:e1:23:42:
d5:b9:81:61:d2:09:d1:58:7e:35:d3:5c:ff:b5:55:
49:cd:b5:24:40:67:06:f9:c3:af:b1:fd:b2:14:d3:
50:c9:e5:57:60:80:4a:fa:d7:5a:db:f7:98:d1:98:
cb:24:06:37:d7:4b:5b:1e:ab:d5:15:10:d8:ff:e1:
00:e0:03:d8:64:fe:1c:05:c9:bd:de:69:25:22:b5:
af:29:ea:50:ec:28:17:e3:c3:b6:bf:47:69:0a:44:
ab:5f:1f:c6:d1:31:35:35:de:c0:07:1e:8c:f4:28:
5c:22:f1:0a:5f:90:99:28:44:a4:ae:e7:c4:55:cf:
97:94:81:63:fd:d5:7f:6c:cd:26:b1:b9:bf:54:fc:
27:be:5f:40:58:6e:06:d2:ed:c8:18:5b:bb:b8:38:
bf:3d:c8:36:0a:a6:7c:41:88:57:58:c3:28:7e:d0:
3b:6d:16:53:19:43:f5:b9:8e:dd:1f:a2:5e:43:fe:
eb:cd:fc:d6:25:a3:0c:1b:a6:ea:33:01:f9:be:13:
6c:fc:76:cb:5c:2b:63:f2:30:69:ae:31:6b:31:09:
58:76:04:2f:f8:c1:d8:b0:f6:00:7f:51:06:d6:5d:
e6:9d:34:f8:eb:36:b9:45:81:55:84:e9:ce:32:08:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:24:8D:90:CB:20:3D:F9:1B:D3:1A:CB:D9:12:55:9D:B0:D3:FB:E9
X509v3 Authority Key Identifier:
keyid:61:C5:ED:0D:ED:86:25:B3:2B:65:33:20:72:29:F2:C4:67:25:98:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcXtDe2GJbMrZTMgcinyxGclmEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6062af-53bc-435d-b5fb-a118498325f7/1/YcXtDe2GJbMrZTMgcinyxGclmEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b5:76:3b:90:01:14:60:f7:41:e4:c6:b1:3b:6c:0e:d3:50:
c5:06:08:e5:b7:f0:27:65:c0:bd:f6:46:95:ee:8f:9a:fd:4f:
de:ba:05:b2:75:ce:69:d4:95:c3:84:ed:1f:bc:cf:17:7c:d9:
e9:37:35:60:48:e0:80:df:15:b8:36:a0:ad:34:40:5d:58:6a:
45:0e:ba:87:2a:87:92:ec:72:40:f1:cb:45:d6:9b:da:bd:e0:
4b:2d:0d:4b:0b:00:2f:0e:1b:3d:15:16:a2:9e:a3:0c:1e:1a:
b7:f4:af:93:2c:94:23:43:3c:e1:c3:55:76:d1:25:d2:a3:76:
26:ea:bd:38:1a:8b:5f:69:93:88:2d:37:82:53:9a:36:4b:10:
6f:34:72:66:f4:bc:4c:45:24:bb:94:e7:e3:c2:9a:26:02:c9:
48:f3:4a:04:c3:6e:de:e6:d7:c2:db:41:c1:da:c7:80:8a:b7:
4b:dd:e2:4e:cb:5f:6b:81:ad:fc:d6:ac:27:e8:da:d8:9e:9e:
f4:c6:36:78:0b:94:eb:1f:50:bf:04:85:4e:4b:6e:f5:84:7d:
92:fb:d8:d5:a2:d1:b4:4e:23:67:46:61:6f:33:10:9f:b4:71:
44:3d:c7:02:cb:c7:a1:f5:ae:be:d9:48:f8:28:2a:e4:b7:97:
f8:a1:c1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:30:14 2026 by rpki-client