Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
File: YB3AD5pIG0FQhrFDp91M2h_7JHA.mft (raw, json)
Hash identifier: d9x1DQQAKlLLJv505raj2JyGZRypmCT292uGZpDn8DM=
Subject key identifier: 4F:96:E5:EA:35:96:0F:8D:72:46:24:F6:8C:95:09:EA:67:E0:1C:AB
Authority key identifier: 60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
Certificate issuer: /CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Certificate serial: 019D98BD399F04CFA0F49BD514A8CB1766EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 00:00:31 +0000
Manifest this update: Fri 17 Apr 2026 00:00:31 +0000
Manifest next update: Sat 18 Apr 2026 00:00:31 +0000
Files and hashes: 1: YB3AD5pIG0FQhrFDp91M2h_7JHA.crl (hash: neL1pSa8jmbThFYfCfi9DIlxWp+exMD2El1ZCXF/vzQ=)
2: lGw_YgGDQ_SDhIlzZs4EtJHH-ik.roa (hash: Chowr6YW7ZD6NeZH4t2rIlYB6mz3gu7Q1zTWhZm5/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:39:9f:04:cf:a0:f4:9b:d5:14:a8:cb:17:66:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601dc00f9a481b415086b143a7dd4cda1ffb2470
Validity
Not Before: Apr 17 00:00:31 2026 GMT
Not After : Apr 18 00:00:31 2026 GMT
Subject: CN=4f96e5ea35960f8d724624f68c9509ea67e01cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:03:1c:3d:9a:1f:a6:eb:3b:57:0e:a2:51:
d2:5c:f4:11:d6:08:fc:fb:9f:fd:5d:b3:b8:73:91:
0b:f8:8d:cd:53:4d:19:42:49:cb:b2:82:82:c9:01:
c2:85:9a:55:08:0f:13:c2:1f:4a:41:c3:dc:4c:f1:
97:6e:73:58:64:40:d4:19:ef:13:7a:12:f6:8a:be:
88:2b:00:f7:b5:b0:5b:92:ca:b6:de:8f:e6:23:9a:
65:91:3a:22:5e:99:22:98:40:0a:51:ce:82:92:1d:
18:42:fb:9a:06:67:d8:0f:d2:0b:49:0e:a8:cc:76:
20:20:9b:d1:da:43:35:71:72:83:2d:7f:15:73:c5:
00:b6:8f:88:73:4e:43:21:5b:d4:3f:1b:0c:68:d2:
f6:b2:23:bb:dd:8a:f5:b5:c5:04:72:b2:80:1b:5e:
ba:61:be:d9:51:24:fe:6e:0e:ba:5f:1d:22:2a:83:
91:33:1d:91:f3:54:83:7f:5c:64:a4:8d:e8:07:7b:
47:6a:00:45:d6:ca:49:e5:d9:39:be:52:f1:00:8a:
ec:11:cc:b9:07:6a:d3:c8:12:85:b3:15:66:f0:3b:
11:23:37:4d:12:bd:a0:67:da:08:81:d0:d4:54:e6:
03:d7:45:4b:53:a4:24:f1:a4:e9:b0:98:3b:bd:fa:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:E5:EA:35:96:0F:8D:72:46:24:F6:8C:95:09:EA:67:E0:1C:AB
X509v3 Authority Key Identifier:
keyid:60:1D:C0:0F:9A:48:1B:41:50:86:B1:43:A7:DD:4C:DA:1F:FB:24:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3AD5pIG0FQhrFDp91M2h_7JHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ab2b25-2a13-41f0-b9c5-fba49b0cdded/1/YB3AD5pIG0FQhrFDp91M2h_7JHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:b4:ae:38:44:26:19:ce:b7:82:9f:2e:10:1f:d7:65:8d:
94:7a:b4:61:c9:c8:1e:1a:3a:64:1b:c0:a4:31:cb:40:17:23:
1a:3c:15:e1:26:21:fb:c1:71:24:02:dc:cd:c5:65:6b:ac:47:
09:d7:6f:f3:03:19:bb:5c:d1:92:16:de:67:c0:45:89:52:c5:
85:64:78:be:eb:a8:99:5f:f9:5b:b6:fb:21:a3:b0:89:99:cc:
18:43:62:13:23:6d:32:15:bd:37:1c:8f:a3:f5:e5:94:16:6c:
3e:77:4e:bc:48:dc:70:88:ed:dd:08:1a:3f:ea:e5:81:ae:4f:
7c:60:5f:68:9b:4c:fb:3d:81:f7:71:c3:0c:a3:e9:5d:e6:df:
88:f3:c6:9b:c3:3a:5b:70:4d:13:b8:14:91:ab:aa:62:c4:89:
e2:f0:e2:03:57:1a:71:c8:ed:b1:88:ad:a3:59:b1:a8:46:c2:
45:f4:83:ec:5d:73:be:97:10:c9:a9:5e:7f:e4:05:4f:b3:fc:
3b:31:72:6d:9a:8f:33:ec:86:22:10:8f:7e:92:4a:41:fc:87:
41:d9:2d:c1:e5:de:e4:29:c9:26:21:38:4c:ac:f9:38:14:4b:
22:f0:e3:55:14:ab:1b:9f:37:da:31:61:b2:d2:58:ae:0d:b9:
55:bf:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:11 2026 by rpki-client