Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
File: YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft (raw, json)
Hash identifier: WMMD2mNUUlVfe2rDWP0v0Ab6qxyiPmNeXFtK1a2yr0E=
Subject key identifier: 52:63:09:CB:56:BC:19:2C:6F:1C:35:04:0D:BA:10:55:12:BB:A8:AB
Authority key identifier: 62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
Certificate issuer: /CN=62719c6d8b9950378a7489315fb078111a18ad55
Certificate serial: 019D9E887B655CF39E9674A8F0CA9BA9AAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
Manifest number: 01DD
Signing time: Sat 18 Apr 2026 03:00:37 +0000
Manifest this update: Sat 18 Apr 2026 03:00:37 +0000
Manifest next update: Sun 19 Apr 2026 03:00:37 +0000
Files and hashes: 1: VUDvlZ3nSAHzKEKmaHgmcWJvSvw.roa (hash: iFi7PsloEbqYTaE+ZoaxZ5YffALEaqzMtJKrKwdONy0=)
2: YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl (hash: NOKgYbxRjy/1jPthDwTubTbrNvBoj6DGkqQ1DSjExHI=)
3: sJpbC87SMVa4vt5NI5bryF6Soa0.roa (hash: Kq0qKJZ6NJFyN4KPgrXNyOIY6c6Ykn/I7S4MDDkskPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:7b:65:5c:f3:9e:96:74:a8:f0:ca:9b:a9:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62719c6d8b9950378a7489315fb078111a18ad55
Validity
Not Before: Apr 18 03:00:37 2026 GMT
Not After : Apr 19 03:00:37 2026 GMT
Subject: CN=526309cb56bc192c6f1c35040dba105512bba8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:59:32:c3:56:c5:34:4c:8d:81:d9:d6:d8:
c9:08:9d:d4:8a:2b:f6:9c:b1:bb:1f:95:5f:af:28:
88:80:90:2a:43:7e:e3:33:e2:73:32:a5:ed:18:b2:
fd:25:c1:04:f7:6c:81:82:e0:cd:2f:f1:12:85:06:
7c:94:65:e0:4a:8b:e2:54:74:ed:11:59:07:cd:16:
5b:25:ba:ee:37:2a:66:0f:6c:d1:e7:97:67:e1:8f:
59:b6:f2:f6:7e:06:3b:7c:ee:2c:7d:b8:0c:52:51:
0e:0d:89:48:0d:1b:fa:37:e6:e9:b5:d6:63:77:9f:
95:8b:ec:f3:f8:f7:05:1a:23:0a:3a:18:a5:21:01:
59:10:c3:bc:60:91:b5:c6:56:23:76:38:df:e0:e6:
a1:bd:d2:b8:2b:27:42:7a:d3:26:0d:ba:07:33:93:
9e:0b:30:23:e9:61:90:3b:bb:59:6b:07:de:1e:98:
78:ac:df:08:c4:96:ec:0a:75:0a:38:a8:ba:8c:c1:
33:52:1b:a6:dd:80:a1:33:3d:1d:89:b8:72:f6:c3:
90:2f:0d:5d:ce:ce:39:bb:8d:6b:2b:cc:30:d6:5c:
58:14:1d:38:33:5a:fe:ef:22:1c:72:23:76:4d:8a:
a1:a0:b0:cc:b8:a5:51:5a:6a:9d:6f:3b:7f:94:8b:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:09:CB:56:BC:19:2C:6F:1C:35:04:0D:BA:10:55:12:BB:A8:AB
X509v3 Authority Key Identifier:
keyid:62:71:9C:6D:8B:99:50:37:8A:74:89:31:5F:B0:78:11:1A:18:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnGcbYuZUDeKdIkxX7B4ERoYrVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/072f68-813d-4ba7-b49d-75fa295411f5/1/YnGcbYuZUDeKdIkxX7B4ERoYrVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:29:be:f8:cd:5f:91:d5:78:52:94:3d:e6:7d:9f:91:52:d5:
be:33:07:80:7a:34:0e:23:46:74:fa:b6:e6:25:22:c8:cb:9f:
87:1f:ea:f3:7e:e3:09:11:11:d0:14:70:e0:c4:ac:5e:8f:df:
c2:f9:04:dc:4a:52:9b:5a:c5:79:dc:9e:29:b3:63:ec:0a:5d:
68:64:a0:99:9e:7f:60:39:1e:33:a0:77:2f:7e:c2:c1:ba:ea:
ff:01:7f:ea:40:1c:72:1a:8b:5b:2a:7c:78:74:49:1e:d5:5e:
5a:b3:e1:f7:92:46:99:34:04:b1:5f:47:7a:49:d2:39:5b:fe:
6d:d0:52:11:fd:b2:40:32:e4:90:30:34:a5:5e:5b:ed:0c:97:
14:57:b0:a4:73:62:0b:68:49:c5:6d:52:05:92:4a:ad:43:a5:
2c:49:b2:f3:15:60:e0:f6:db:b6:72:15:3d:82:52:56:7e:6a:
20:f1:64:c8:da:f4:be:19:2f:ec:a5:7c:71:ed:39:50:73:87:
93:f6:7c:17:d6:35:6e:c0:59:6f:07:d7:29:a1:d4:16:e6:9b:
8c:40:2f:13:37:1a:f1:81:4e:f2:d6:4e:1e:05:2a:96:4e:24:
a0:d0:56:5a:22:26:fd:6c:61:00:33:cb:4e:30:55:aa:e3:bc:
89:8b:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:54:26 2026 by rpki-client