Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
File: yjvKh2SUaTK6Lai9t9E82GiVr2k.mft (raw, json)
Hash identifier: RV+aocFwxgbR+wTGKCaXGBt+nejradNju+PfmaOlStw=
Subject key identifier: 49:40:D3:21:E7:FB:8E:74:98:60:85:A7:8B:1F:C1:78:A2:AF:D9:FB
Authority key identifier: CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
Certificate issuer: /CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Certificate serial: 019D9962C9673A7E7806697C42890B3F870E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 03:01:21 +0000
Manifest this update: Fri 17 Apr 2026 03:01:21 +0000
Manifest next update: Sat 18 Apr 2026 03:01:21 +0000
Files and hashes: 1: D4tyxDwHbBDY6loeNMrI_qWSNIE.roa (hash: VUYKqJjCtizhOmCO0vEKUF1mkjsOrBaXggAOIPV76PI=)
2: yjvKh2SUaTK6Lai9t9E82GiVr2k.crl (hash: MdcZTifuG6SfaizVhFg8Z9ZlleHCaEEJJoxL62HEu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c9:67:3a:7e:78:06:69:7c:42:89:0b:3f:87:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca3bca8764946932ba2da8bdb7d13cd86895af69
Validity
Not Before: Apr 17 03:01:21 2026 GMT
Not After : Apr 18 03:01:21 2026 GMT
Subject: CN=4940d321e7fb8e74986085a78b1fc178a2afd9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:d7:6e:75:37:ff:41:99:d9:6f:cb:de:ac:
1e:1e:ae:8a:b6:8a:22:15:91:43:1e:92:2b:1f:e4:
07:b1:ff:4f:34:e5:aa:af:79:4d:b6:51:9b:83:5e:
38:69:82:01:7c:e4:95:bd:ee:d7:53:49:e8:3e:3a:
97:e7:5c:a0:fb:a0:d1:3c:1b:9e:83:3f:d7:78:bb:
f9:dc:68:19:b4:29:43:94:03:37:24:6b:34:78:54:
7e:74:fa:4c:b4:fc:08:5e:3c:96:e6:f3:ad:c5:f2:
05:d9:09:28:36:25:0c:b8:ef:dd:73:e6:f9:2d:2d:
4c:e0:06:9a:bc:77:5f:44:a3:6a:3f:22:81:c2:58:
af:9b:2b:fa:1b:66:ff:b9:2b:29:7e:3c:ee:d9:58:
aa:45:22:ca:91:25:ff:a7:77:90:00:80:c0:a1:29:
ab:84:5c:b8:12:ed:a4:7e:a9:e2:46:1c:1d:a1:ed:
38:af:fe:1f:60:50:62:94:b5:4d:b0:12:87:65:36:
5c:d8:9b:62:9c:45:75:58:d3:45:05:04:ed:44:3b:
64:fa:24:57:ad:51:e8:d1:16:55:a8:38:aa:6a:eb:
f6:7d:bc:bb:8a:60:e0:66:fb:e2:f0:dd:65:ef:65:
6e:d9:54:75:78:34:19:db:bd:62:66:5b:41:b4:ff:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:40:D3:21:E7:FB:8E:74:98:60:85:A7:8B:1F:C1:78:A2:AF:D9:FB
X509v3 Authority Key Identifier:
keyid:CA:3B:CA:87:64:94:69:32:BA:2D:A8:BD:B7:D1:3C:D8:68:95:AF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjvKh2SUaTK6Lai9t9E82GiVr2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4e0f2f-40b7-44d9-9fa0-012ddeadf75e/1/yjvKh2SUaTK6Lai9t9E82GiVr2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cd:b0:10:ec:de:72:38:b8:65:74:c8:63:53:1c:90:9a:be:
52:1b:e8:b1:46:1b:91:49:85:1e:f2:e5:c4:6f:e4:65:fb:9c:
37:de:26:d6:e4:dd:fc:a7:7a:04:b8:ba:c6:6a:e6:c4:5a:02:
8a:22:52:b5:32:87:f7:dd:90:2c:2f:e4:8b:3f:ee:de:07:56:
14:c7:aa:87:5f:96:45:12:73:fd:e1:05:8b:d9:9a:f5:1a:38:
95:b3:4b:87:d5:ec:a6:9e:98:dd:76:b7:45:e5:55:6e:32:5d:
76:20:10:3f:40:55:e5:5b:3a:55:b5:c5:20:38:02:14:3b:5c:
57:4e:dc:f4:fa:76:1b:b6:08:c6:3c:dd:8b:e1:dd:0f:8d:00:
cc:f7:9f:15:ce:33:6d:d6:99:10:2a:8f:b5:35:fd:af:4b:db:
ea:88:74:70:40:4f:38:ee:e6:26:41:c1:79:ca:a9:26:08:78:
9b:22:6b:55:80:61:84:21:83:91:b3:cf:11:68:c8:26:22:b3:
eb:30:12:4c:d7:46:27:28:b2:b4:ec:d5:47:91:e4:14:eb:0a:
9e:42:49:03:a7:42:44:41:be:62:83:8f:67:39:8a:7d:93:a7:
3a:bb:50:7a:58:a1:bc:35:57:76:97:7a:0e:07:f9:13:71:dd:
bd:c8:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:09 2026 by rpki-client