Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
File: yxTTDzseETdCPEsjWVfzMDBk2v8.mft (raw, json)
Hash identifier: ovV5Bt1cisNXLvafLKP2C8fvARKMcwFJFXAx+GKbDUI=
Subject key identifier: 3D:F9:73:A2:0F:3C:5C:E4:D5:E8:8A:9C:93:50:16:69:70:8C:D3:10
Authority key identifier: CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
Certificate issuer: /CN=cb14d30f3b1e1137423c4b235957f3303064daff
Certificate serial: 019D99628F3DD66695874CD29E7682D31DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:06 +0000
Manifest this update: Fri 17 Apr 2026 03:01:06 +0000
Manifest next update: Sat 18 Apr 2026 03:01:06 +0000
Files and hashes: 1: B_Yga8dFIroZi4oBY8FBGZQGvOc.roa (hash: Xqwgsd+G6A3vjt3PhRx4O36PvKDRIPU7eS7eBDKIq0I=)
2: yxTTDzseETdCPEsjWVfzMDBk2v8.crl (hash: x8IUMOr0MAAC86gpsgRv22ZyKVpDEXQQPR8AmMpID4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8f:3d:d6:66:95:87:4c:d2:9e:76:82:d3:1d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb14d30f3b1e1137423c4b235957f3303064daff
Validity
Not Before: Apr 17 03:01:06 2026 GMT
Not After : Apr 18 03:01:06 2026 GMT
Subject: CN=3df973a20f3c5ce4d5e88a9c93501669708cd310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f3:ca:e6:d7:6d:cf:9c:ce:5e:cb:c9:0d:18:
ac:ce:fb:52:2a:f7:03:b1:17:2c:2d:94:14:09:37:
66:3f:0c:5e:64:e9:85:d1:22:39:06:d1:08:7b:03:
2c:87:29:fd:d9:87:6e:dc:f2:4b:9a:6d:b6:ca:2e:
91:4f:32:30:11:02:92:01:51:f0:fc:c5:65:1a:a9:
0d:2f:87:67:f0:6f:82:b2:61:0d:c6:91:24:5c:c2:
a9:ea:77:5e:53:8f:e7:25:33:f3:92:65:59:36:08:
98:7e:8f:72:c2:f6:fb:32:7d:e3:a5:df:28:c5:38:
29:29:23:76:be:f9:12:f9:ae:34:f0:78:61:8e:37:
93:5e:06:fa:83:f8:8c:5c:4c:7d:41:1e:b0:05:9d:
a3:46:05:89:10:d9:8c:99:9b:87:99:57:a1:05:32:
08:74:40:74:34:58:11:33:61:82:df:3c:7d:09:e0:
24:f0:c2:29:c6:ff:99:72:25:9a:8d:22:9d:e5:69:
a1:07:00:a2:07:7a:68:f5:ee:5a:97:e5:04:0e:52:
c3:e9:37:c8:e3:da:c9:e7:c0:a5:7f:19:24:40:a0:
8b:f3:3c:58:1b:ed:82:d9:2a:5a:f3:30:e8:89:5a:
a3:84:2a:59:fc:bc:37:b6:96:fb:bd:39:8f:9a:f7:
98:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F9:73:A2:0F:3C:5C:E4:D5:E8:8A:9C:93:50:16:69:70:8C:D3:10
X509v3 Authority Key Identifier:
keyid:CB:14:D3:0F:3B:1E:11:37:42:3C:4B:23:59:57:F3:30:30:64:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxTTDzseETdCPEsjWVfzMDBk2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/267bf5-0220-48b1-b723-a5ae5b19939a/1/yxTTDzseETdCPEsjWVfzMDBk2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:c5:4c:a1:4a:46:dc:57:d8:96:90:4c:f4:9f:cc:18:c8:
0f:dc:a5:76:44:59:d6:a2:c8:73:ab:11:af:a3:08:2c:b3:93:
5b:3d:86:89:ab:79:fe:5e:a0:5c:67:90:81:47:42:56:e6:0f:
27:45:97:c3:ae:ac:3d:24:53:0f:b0:39:59:82:08:de:ef:ec:
e1:bb:38:0d:a8:e8:f6:5e:bf:a3:1c:f5:53:11:5b:01:13:72:
e9:2e:35:f4:e0:45:92:c5:55:d5:ba:c3:0a:e7:f2:9e:27:ac:
c8:26:74:5f:b5:62:55:b6:19:bb:c6:c4:41:9a:1b:fb:cb:c4:
45:23:92:24:63:3b:53:e3:d5:35:e5:82:db:5a:99:59:6e:07:
cd:2f:07:d0:0f:8b:15:cc:50:b6:e3:4c:65:4a:04:31:e6:41:
0d:4f:64:90:9e:40:70:6d:47:74:b1:25:66:d9:99:31:17:e7:
b8:d9:72:80:30:8e:e6:cd:77:04:e8:0a:94:08:60:96:8c:18:
ac:03:f6:49:c1:96:ce:25:94:07:fe:0a:ed:19:91:6e:7f:40:
bd:32:36:64:df:94:af:2f:32:b1:6a:36:48:0e:3f:5c:6a:41:
22:d0:e4:3b:58:31:dd:78:e9:48:64:db:b7:4e:83:28:7c:16:
b9:69:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:04 2026 by rpki-client