Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
File: YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft (raw, json)
Hash identifier: 3Eh5a1Kem64u+R2snsxpxQjsGt6EVcyR6N12JmLH+BY=
Subject key identifier: 81:02:67:73:0C:0E:8F:8A:5E:DF:0B:1C:23:36:69:AE:58:2E:51:C3
Authority key identifier: 61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
Certificate issuer: /CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Certificate serial: 019DA4542A15F6FDB14131969205E856EFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
Manifest number: 021A
Signing time: Sun 19 Apr 2026 06:01:12 +0000
Manifest this update: Sun 19 Apr 2026 06:01:12 +0000
Manifest next update: Mon 20 Apr 2026 06:01:12 +0000
Files and hashes: 1: 1-_NirjIbixf3IjujxY08hJ4sR0w.asa (hash: hVFgDzF+0WyJCjBVO7SZls0NW5esHMScirMPVBWG/Wk=)
2: SthetgpXxzE5DDJOcie_LsqpRQs.roa (hash: 1G5wA/BqRdbf365y+2p8DrgYId5s873fPHSYZ3snZ28=)
3: YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl (hash: 6Lwm9R8x+wmR6knLacGKewTQA56jLM96qFASKhN0GyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:2a:15:f6:fd:b1:41:31:96:92:05:e8:56:ef:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617f6f6e150a6043cb2093b08ddd3a2a4ab97a37
Validity
Not Before: Apr 19 06:01:12 2026 GMT
Not After : Apr 20 06:01:12 2026 GMT
Subject: CN=810267730c0e8f8a5edf0b1c233669ae582e51c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1f:01:53:dd:92:8c:a8:4f:19:53:fa:3b:cc:
7f:c9:3f:a8:8b:f0:85:5a:c9:48:e8:66:1c:cf:88:
a9:b0:63:af:7e:f0:2e:c9:00:c5:2a:08:f4:96:7c:
d2:6a:c7:f3:a4:74:9a:1c:4c:ee:c3:b7:c3:da:21:
88:7f:91:de:3b:75:6e:35:ed:c7:b1:99:40:ac:02:
5d:c9:a8:ea:ff:de:0d:99:f7:f5:9a:dd:69:21:37:
e7:fc:09:84:07:b3:f3:0f:75:21:f8:0e:17:2f:4c:
36:04:53:f8:93:49:44:2b:53:8c:b8:1b:40:0a:3b:
41:b2:2d:aa:22:12:a4:2f:09:21:20:8e:b9:04:f4:
f7:70:c5:c4:bd:35:ad:0d:24:e0:19:55:c4:e3:cc:
78:7b:1a:55:2c:23:d2:87:26:fe:0f:a7:6a:58:fb:
67:0d:b2:52:67:dc:0d:33:68:01:2f:96:57:76:fd:
c5:cc:00:de:ee:2a:8f:dd:d9:8f:12:b7:73:0f:e0:
86:1b:05:11:7a:1f:2a:6c:32:b8:84:66:30:20:6e:
e9:fe:46:ce:fd:37:f9:f9:95:a0:83:08:8a:d1:42:
6a:f2:c9:8d:1e:28:e0:78:a1:1b:32:4e:75:6f:77:
51:2b:ac:1a:a4:4f:47:6d:a6:f2:cd:9e:9d:f4:cf:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:02:67:73:0C:0E:8F:8A:5E:DF:0B:1C:23:36:69:AE:58:2E:51:C3
X509v3 Authority Key Identifier:
keyid:61:7F:6F:6E:15:0A:60:43:CB:20:93:B0:8D:DD:3A:2A:4A:B9:7A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YX9vbhUKYEPLIJOwjd06Kkq5ejc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6c9902-cd45-4404-8513-71c3d6aa2899/1/YX9vbhUKYEPLIJOwjd06Kkq5ejc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:03:5e:02:b7:e4:1a:cd:4d:d8:f7:57:1a:9f:c8:6f:3d:f1:
19:49:74:d4:b7:f2:6f:cd:5f:3c:09:63:01:ff:41:94:6c:ea:
f0:5d:bf:12:aa:b5:e9:66:3f:07:55:43:71:ab:4d:c1:b6:ab:
a7:69:e5:9c:36:28:14:e2:aa:7b:48:7b:43:2d:5a:cd:7b:79:
f7:94:e1:67:6f:18:6b:2e:82:cb:a2:97:7e:64:a3:87:bc:6b:
77:b0:42:b2:be:05:69:89:cb:fd:f6:09:4c:ec:80:d4:52:78:
9d:e6:7a:b9:87:68:6c:e3:5f:fb:98:17:79:b8:d7:4f:49:fb:
71:1d:aa:ae:ea:c1:0e:94:39:c9:37:ca:d1:e6:2c:17:14:ef:
fa:00:5a:8d:52:af:3f:0e:3d:e8:3c:d3:c1:ba:e0:12:74:f4:
ab:91:43:84:de:33:b7:b4:7e:21:1b:e3:22:59:5e:96:87:a4:
f4:ab:da:ef:48:14:c3:38:2b:94:c4:b7:43:b8:04:1f:00:37:
93:67:47:51:71:07:21:5e:6c:cd:af:8d:41:8a:b3:df:0e:f1:
f8:86:3a:cb:67:6a:7b:e4:85:3f:66:b5:1c:dd:a2:aa:42:4c:
9b:53:94:16:70:bb:a1:e6:db:bb:bd:d6:29:57:06:19:ea:84:
97:83:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:13:38 2026 by rpki-client