Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
File: YNxaADaNiuH7qZVDHwOkExrdipo.mft (raw, json)
Hash identifier: XtRFmSF/U9g091BNxdo8aMvCZDNmwK2RUxT066YzsCM=
Subject key identifier: FF:C1:28:25:42:95:B1:F9:0D:60:EF:FD:FA:CD:00:B6:64:48:53:8A
Authority key identifier: 60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
Certificate issuer: /CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Certificate serial: 019DA3785618292583C804F536FA474D3BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
Manifest number: 0A73
Signing time: Sun 19 Apr 2026 02:01:05 +0000
Manifest this update: Sun 19 Apr 2026 02:01:05 +0000
Manifest next update: Mon 20 Apr 2026 02:01:05 +0000
Files and hashes: 1: FemB6pHy5zROZf_sTYfXBgmDKnw.roa (hash: E4h0nLpq/ffPu/HaB0H3Hf/9wKbbDUcsOyUxjgjXY1s=)
2: YNxaADaNiuH7qZVDHwOkExrdipo.crl (hash: IKbOUd7Xmt38SEdse5Txwxs5f47o7U+1FwGOsVwpk2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:56:18:29:25:83:c8:04:f5:36:fa:47:4d:3b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60dc5a00368d8ae1fba995431f03a4131add8a9a
Validity
Not Before: Apr 19 02:01:05 2026 GMT
Not After : Apr 20 02:01:05 2026 GMT
Subject: CN=ffc128254295b1f90d60effdfacd00b66448538a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:75:d2:bc:33:f4:41:5d:47:ee:99:4a:07:
39:63:30:9e:8b:53:32:39:ec:1e:93:f5:fe:c7:5d:
d1:3a:4e:03:d2:60:07:cc:7b:71:11:83:f4:4b:0b:
12:b9:c5:3b:df:2a:49:c4:ba:ab:d3:a0:88:89:05:
57:f8:cb:b4:d4:d9:0b:8e:12:a1:fb:9a:ac:e9:20:
c7:57:1d:b4:d0:21:2c:69:9e:6f:c2:2a:f9:11:d0:
f2:77:3e:b1:87:d4:d8:58:ad:ec:74:c9:92:bd:df:
8f:72:15:22:82:80:73:ea:22:1b:54:e0:fc:1b:5c:
ad:29:4e:cf:52:17:20:2d:8c:e7:c1:8c:3d:7f:b4:
d4:f5:70:72:8a:b4:b9:aa:12:92:a7:49:3e:8e:3e:
23:72:ed:06:d0:85:a5:c9:ce:2a:ab:bb:3a:36:6f:
14:33:45:1b:cb:1a:01:48:c4:3c:de:e1:20:aa:e1:
58:b6:3e:ad:96:d3:c9:f2:39:51:ab:69:f5:db:84:
c1:45:b0:2c:fb:fb:9d:e6:18:ee:32:be:7f:76:ab:
b1:65:f9:40:26:5f:80:4e:45:6e:3b:35:29:c7:ac:
4e:b5:d5:cf:73:97:cf:89:64:02:30:0c:e1:30:fa:
71:07:a2:7d:0c:43:8e:cd:e8:df:33:40:8d:44:29:
a4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C1:28:25:42:95:B1:F9:0D:60:EF:FD:FA:CD:00:B6:64:48:53:8A
X509v3 Authority Key Identifier:
keyid:60:DC:5A:00:36:8D:8A:E1:FB:A9:95:43:1F:03:A4:13:1A:DD:8A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNxaADaNiuH7qZVDHwOkExrdipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/43d63a-a936-4593-8826-ebb3982c2eb0/1/YNxaADaNiuH7qZVDHwOkExrdipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3c:eb:24:6c:46:46:69:90:d8:8f:10:45:21:b5:9b:b6:6a:
ab:c4:a5:3a:fb:43:bb:40:a0:d0:54:36:1e:65:e6:ea:b1:fe:
41:66:7d:bc:2f:e3:9c:12:8d:ed:51:72:88:34:89:4d:a3:2a:
b6:df:0e:d5:da:59:3f:dd:a5:6b:74:c7:89:2b:d2:b3:9d:dc:
c0:f8:0e:d5:ca:53:ae:01:d8:97:38:6b:c0:cd:4a:17:13:99:
ab:f7:e4:f9:83:96:35:cf:53:80:08:fc:9d:6f:34:61:7d:52:
50:4e:7b:fc:67:d1:be:c3:97:78:e1:7f:bb:e4:cd:cc:5f:b3:
f8:95:47:a0:94:07:ff:2d:57:85:cc:74:93:52:76:39:d8:0d:
2d:64:ec:4e:25:c6:c8:55:e6:4a:dd:b2:b9:c4:e4:93:06:d9:
06:bc:07:7c:31:6a:8b:da:b7:98:15:1c:d4:42:dc:1f:4a:6c:
5d:0b:09:9f:27:29:e6:af:02:38:a2:0f:a4:b2:8f:a6:c5:dc:
d3:27:2a:5c:db:11:fb:7c:74:12:e8:44:ab:97:7b:c3:03:e8:
f9:12:35:e8:07:94:d9:a9:87:bb:61:5b:93:fa:a7:16:6c:a2:
32:f1:0b:e1:29:38:b2:d0:61:38:5d:06:d0:22:b8:f1:aa:1f:
0f:1a:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:14 2026 by rpki-client