
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
File: YJ6nq6_FLH_6IKemquSuLSYlIHY.mft (raw, json)
Hash identifier: P1BdG+dv58c714qMIF7bqFzI9Upsi/7OaIQF1gV2Ne4=
Subject key identifier: EF:B8:B0:5C:E0:DB:13:D5:B3:7B:6A:85:C4:6D:7A:41:EE:95:5A:A5
Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Certificate serial: 019DA4F98B8693C36E04994FA4CB901755CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
Manifest number: 0336
Signing time: Sun 19 Apr 2026 09:01:50 +0000
Manifest this update: Sun 19 Apr 2026 09:01:50 +0000
Manifest next update: Mon 20 Apr 2026 09:01:50 +0000
Files and hashes: 1: IPEVX9NburliCOkL_8My8KZEvxc.roa (hash: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw=)
2: YJ6nq6_FLH_6IKemquSuLSYlIHY.crl (hash: RmMQh9zCVls2whTkUQ+caJESB6YVjNoO9m7s01tFmLg=)
3: g3UM-mxo9surPyGX-ua-Jw8Hwy0.roa (hash: rLTMTj/qJ9X8Z52HM7aUZCnlG5iT1wzURKa+BIyHlNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:8b:86:93:c3:6e:04:99:4f:a4:cb:90:17:55:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076
Validity
Not Before: Apr 19 09:01:50 2026 GMT
Not After : Apr 20 09:01:50 2026 GMT
Subject: CN=efb8b05ce0db13d5b37b6a85c46d7a41ee955aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:d5:79:87:64:4b:98:08:65:d5:1f:28:89:
1b:49:54:55:c9:82:53:cb:92:8b:5d:c2:99:3d:51:
3a:a8:13:1c:2e:48:e6:f9:c5:70:70:b8:81:5b:24:
95:bd:af:f7:35:8e:19:89:3b:84:5a:06:3f:ce:fc:
15:ae:76:31:3a:c6:ba:1d:1c:2f:7f:e2:da:3d:31:
4c:0b:09:da:3c:62:a3:e1:12:be:07:be:ec:07:36:
57:c4:82:cc:66:9f:3e:14:f2:5a:c7:8e:5e:7c:d4:
f7:79:f6:d7:03:2e:b4:86:d3:c6:49:00:7c:be:f6:
97:05:fe:dd:fa:27:5c:89:76:8a:c3:41:66:e2:13:
70:ec:94:50:02:f9:48:2b:c5:a2:24:af:64:f0:98:
e0:9c:4c:a6:65:49:46:e6:c0:6a:2e:18:9e:5b:83:
f8:6e:a0:8e:2e:a7:4f:a8:dd:e1:cf:42:e8:5c:e9:
3d:95:fe:fe:a7:d0:a5:0f:0b:bf:41:8d:de:40:62:
9f:1e:fa:e0:d1:a6:41:73:76:cf:a6:4c:b5:f0:82:
f2:fc:a7:fd:23:07:5a:99:8f:35:93:12:09:7e:c2:
6a:9e:7b:43:75:cc:f4:56:5e:69:d7:5a:ff:99:e7:
81:70:58:c9:a5:e8:ae:17:56:d8:55:2d:bc:66:50:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B8:B0:5C:E0:DB:13:D5:B3:7B:6A:85:C4:6D:7A:41:EE:95:5A:A5
X509v3 Authority Key Identifier:
keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a0:06:16:f7:20:4c:66:ee:fc:60:98:0e:c2:18:17:98:7b:
55:09:88:4c:ac:5d:ae:e7:51:c6:85:e3:d9:3d:91:c4:a3:9b:
fc:58:fe:c3:61:6e:21:4e:c7:89:45:d2:bd:9f:c0:9a:d8:f3:
b9:5a:ba:4f:45:5e:0f:cc:35:5a:5d:a1:4a:a2:0f:cf:d3:f9:
f7:e5:d6:f5:ff:7c:74:28:12:d0:db:fe:55:21:84:52:93:d7:
6a:a4:43:cd:d5:43:8e:01:48:df:a5:50:94:d2:bf:64:1a:1a:
f7:d8:6d:02:e3:87:47:25:42:f8:60:e1:eb:a7:7f:df:f3:f5:
ec:8f:6c:88:1a:42:5c:64:66:8b:cc:f2:43:86:63:de:c1:cb:
f8:26:9d:e0:dc:ac:65:e1:f7:ea:48:25:ac:a2:d8:48:37:bb:
01:f8:98:cf:ca:a9:26:e9:8c:42:46:28:f7:b4:d4:53:4b:cc:
2c:ef:39:1a:ea:2f:d1:f7:61:86:47:3e:c9:fb:cb:9c:bf:70:
bd:8b:5f:07:71:08:a7:14:a6:cf:8c:9e:a6:1d:b3:ee:e1:79:
8c:37:b0:26:4a:18:99:28:61:54:9e:d3:4f:fb:27:e8:3d:08:
fe:77:3a:e5:cf:ed:41:57:1f:ba:95:7a:81:68:09:9f:49:b9:
de:9a:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:24 2026 by rpki-client