Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
File: YbGV0TBQ_zxGihSXeHELU1giUdk.mft (raw, json)
Hash identifier: XtTGZA3R9IywnpBL195Z/4DXSvrqvBgxS+yEbUG9VkY=
Subject key identifier: 3F:48:ED:3F:A5:96:C2:A3:7C:BF:4E:07:35:CA:84:45:A3:D6:02:2B
Authority key identifier: 61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
Certificate issuer: /CN=61b195d13050ff3c468a149778710b53582251d9
Certificate serial: 019D99D02DE6F73B0D5DF64F7EFB31D29CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: TK8zghqg8mRUl2FKqWZ3fkqCPjo.roa (hash: gdusYks5Qp51cXZtG8mOxw07u8NyV/fdE9i7uOexEq8=)
2: YbGV0TBQ_zxGihSXeHELU1giUdk.crl (hash: pmA9iY+Njm3CGGbpvF5VOX2nRlo1qOYV1tMm4ewgqr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2d:e6:f7:3b:0d:5d:f6:4f:7e:fb:31:d2:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b195d13050ff3c468a149778710b53582251d9
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=3f48ed3fa596c2a37cbf4e0735ca8445a3d6022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:cb:79:30:16:ab:00:41:32:c8:09:8a:18:
18:20:04:a6:8d:68:a1:b3:4f:36:ed:98:f4:de:09:
89:40:e2:3b:d0:be:26:bb:34:4c:3c:38:f9:a7:94:
b3:e0:91:8d:54:87:8f:91:28:fa:65:e8:54:80:7d:
3a:6d:f3:7d:7c:41:49:fc:11:9d:97:ef:8c:ae:f7:
a0:20:99:ad:b5:c4:b1:d0:b1:47:c1:b7:dc:e9:68:
5e:63:fe:d4:ad:5d:61:eb:74:6d:c4:8d:a6:97:43:
bc:19:29:58:db:0a:51:e2:76:02:65:41:2e:26:6b:
0e:57:0d:cd:85:dd:b2:82:99:93:7c:01:58:3e:e3:
09:f0:16:97:77:1f:38:b3:38:7d:a4:d3:5d:b1:26:
8d:1c:03:31:6e:2b:6f:d2:03:d9:b7:07:83:28:c9:
98:76:56:ff:68:47:4c:f4:8c:53:d5:0c:b6:13:a9:
c9:3f:5a:99:d0:6a:7b:ca:72:f8:cd:2f:2e:8c:b1:
83:87:53:20:25:fd:b3:a1:f5:48:ca:d5:c4:e5:19:
28:24:3e:50:f3:4d:88:b6:a9:ea:9d:11:9f:06:90:
c0:94:d4:d6:82:80:19:02:17:25:17:84:b8:cb:6f:
04:eb:a4:0e:a2:f7:0c:0b:bf:a4:18:f8:eb:3a:4a:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:ED:3F:A5:96:C2:A3:7C:BF:4E:07:35:CA:84:45:A3:D6:02:2B
X509v3 Authority Key Identifier:
keyid:61:B1:95:D1:30:50:FF:3C:46:8A:14:97:78:71:0B:53:58:22:51:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbGV0TBQ_zxGihSXeHELU1giUdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2f3c19-56d5-4924-8bcb-bac472ab7b6a/1/YbGV0TBQ_zxGihSXeHELU1giUdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ae:5a:33:d5:ff:e3:d8:a7:db:f7:1b:2d:7a:03:de:c1:21:
84:6b:7b:8e:bf:1b:14:dd:37:12:95:1d:fa:6c:b4:5f:f7:65:
d7:66:5b:95:2c:4f:29:17:0b:e0:23:cc:61:67:3a:65:64:68:
ce:17:fd:71:65:a5:21:bf:20:4b:43:3c:a2:23:a5:f1:db:88:
9e:86:35:ba:cd:58:20:74:3f:4d:eb:58:7b:61:9c:aa:57:89:
be:ee:18:84:e3:d9:9b:a5:00:9e:bb:5a:f0:c3:e6:f6:70:c9:
aa:39:d1:b5:09:6c:2d:95:57:af:29:3d:5d:91:fa:fb:7c:1a:
49:00:2e:68:c4:87:8b:f0:03:97:e1:db:f9:a3:fe:f0:b7:dc:
f5:6b:2b:54:c3:57:06:8e:71:9c:f1:c1:d0:d3:fa:83:8d:43:
ce:18:a4:0e:fc:67:00:55:c9:65:f1:22:31:00:97:87:d7:53:
3f:53:14:52:54:64:83:01:17:48:20:b4:c7:a7:d5:df:8f:d3:
fa:2f:e5:bc:85:9b:f9:f6:25:f0:fe:b8:65:90:1c:55:3d:2d:
b5:21:16:88:ff:c1:14:60:dd:a2:2a:0f:c1:6c:5d:2b:07:ba:
2f:1f:c0:69:82:60:bb:d0:42:7a:3a:98:a6:dc:26:d8:6c:f0:
94:12:fc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:41 2026 by rpki-client