Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
File: yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft (raw, json)
Hash identifier: aHkhsI674/ENH+Cg+bcs4MSzs3I2Dym9bvjVvqxFtSQ=
Subject key identifier: 4F:35:69:F3:5F:2C:78:9A:68:A3:60:9C:71:7D:B1:9F:0C:78:A3:A4
Authority key identifier: C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
Certificate issuer: /CN=c91d7e449cfec3120a9851163c779a6026986172
Certificate serial: 019D98BD94A915F8678E75BA43BC2AD76CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
Manifest number: 05F8
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: f0ZfMdVeao4owuizr0ASA2Z5qek.roa (hash: Vu0vptFiDdpzGvBS9Sa9FzNYtks3M2qfeAe2doEPj6k=)
2: yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl (hash: mRrTGDtPERU/mFlDz6F7odIxqWaEZlzkbWrWqt4j2a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:94:a9:15:f8:67:8e:75:ba:43:bc:2a:d7:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91d7e449cfec3120a9851163c779a6026986172
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=4f3569f35f2c789a68a3609c717db19f0c78a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:13:ca:13:01:15:8a:d7:d7:b6:c4:e7:c3:44:
a8:23:21:be:04:9c:2d:f4:e4:ee:45:2b:76:14:1d:
83:67:3b:a1:a4:66:d2:21:e4:fd:20:1c:2e:36:0b:
6d:0e:13:af:37:1d:e8:be:b3:9d:b0:27:1b:d1:33:
1c:e0:33:c2:74:55:b2:a3:c1:8a:83:26:71:ed:4f:
f0:3c:e8:52:56:30:17:e4:94:4d:1e:c6:aa:57:3b:
52:71:93:ee:4d:88:24:b8:74:44:b9:8e:4c:7b:65:
4f:40:85:42:7c:65:40:97:ab:dc:ee:47:1a:a8:86:
79:0f:f5:88:fe:0f:a7:31:bb:38:01:32:ef:c0:86:
15:61:76:7d:94:c7:92:bb:cd:d5:d7:eb:cf:46:f8:
3c:58:05:69:56:91:4f:9f:e6:f9:7e:61:2c:a0:14:
24:8c:16:34:6a:48:6c:a4:ec:49:de:87:29:25:04:
27:ae:53:6a:e0:bc:88:e9:2a:74:1f:32:2a:a5:fb:
56:1f:a3:cc:43:44:b5:56:a7:16:04:2f:87:ac:66:
51:fe:d0:ef:5e:f3:b7:0f:19:3f:c1:99:3c:0b:0b:
36:25:89:78:73:8f:4f:e2:a0:1f:b0:3f:34:b3:3b:
97:31:bb:44:bc:21:29:50:07:3b:bb:51:ba:93:d5:
10:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:35:69:F3:5F:2C:78:9A:68:A3:60:9C:71:7D:B1:9F:0C:78:A3:A4
X509v3 Authority Key Identifier:
keyid:C9:1D:7E:44:9C:FE:C3:12:0A:98:51:16:3C:77:9A:60:26:98:61:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yR1-RJz-wxIKmFEWPHeaYCaYYXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1de954-97e8-4c13-834b-cda6bb406974/1/yR1-RJz-wxIKmFEWPHeaYCaYYXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:94:c0:1a:03:4a:8f:ee:10:48:20:73:e2:c1:b8:76:76:ab:
22:08:c5:59:2a:4d:8d:f4:a3:0a:f7:19:fb:19:88:de:63:24:
99:82:0d:df:22:d8:c1:23:98:16:db:66:00:66:76:06:ab:f2:
bb:7c:8a:ee:89:3f:78:0e:c9:93:14:09:f2:51:ff:48:11:4f:
18:82:b5:3f:d4:a8:ed:4f:ac:80:87:b3:cb:5d:23:be:a6:62:
bb:06:26:d8:a0:01:34:dc:3f:97:e9:9e:f4:b0:d8:34:5d:16:
2a:9c:44:6f:44:4c:3f:44:6c:83:c7:82:1f:67:7c:a4:7a:d8:
d6:e8:b7:88:9c:e9:09:6f:00:51:bc:96:a8:2a:bd:3d:1c:ca:
3d:9a:bf:e2:92:e0:fb:3a:bb:ba:d1:f6:e7:dd:d2:d3:42:85:
48:22:17:a4:99:7c:43:1f:a8:ab:61:5c:4b:55:98:7a:f8:a8:
1f:c1:c6:2c:a2:fd:74:ac:2d:2c:55:af:51:ab:39:3b:02:10:
64:b9:cc:5a:9b:45:e4:0b:ef:00:94:62:4a:26:4e:c4:6e:c4:
d0:97:b9:81:66:19:27:79:cf:1b:a7:84:d1:df:49:d8:ca:1e:
49:fc:a8:79:c5:79:09:2b:b3:87:17:96:3c:1e:8e:79:d8:c3:
85:e7:16:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:09 2026 by rpki-client