Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
File: YtGLMS41Pnj6juX4DTb3Qc3N46o.mft (raw, json)
Hash identifier: DTfD38/01hVf3821xKkD6OdxTVsNv81+S0ssU8/sp5o=
Subject key identifier: CF:CF:F6:51:AF:5A:36:A3:EB:46:19:18:C0:21:AD:F8:6B:25:A7:40
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 019D9A7543963BA69894E5289A5A2BBF764D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
Manifest number: 1367
Signing time: Fri 17 Apr 2026 08:01:09 +0000
Manifest this update: Fri 17 Apr 2026 08:01:09 +0000
Manifest next update: Sat 18 Apr 2026 08:01:09 +0000
Files and hashes: 1: YtGLMS41Pnj6juX4DTb3Qc3N46o.crl (hash: rQX9st1Wutk6vMHpdJkrWnOJBCe95MDkxfe+zbt9vKA=)
2: sRtXhXnTV3BV5O7Uk5pPU6e6DHY.roa (hash: kK2zj8c+pEZD+bWtboW9Noev8kavvORxA7HxKk4tpBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:43:96:3b:a6:98:94:e5:28:9a:5a:2b:bf:76:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Apr 17 08:01:09 2026 GMT
Not After : Apr 18 08:01:09 2026 GMT
Subject: CN=cfcff651af5a36a3eb461918c021adf86b25a740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:f8:9f:b6:2d:90:e7:c2:d9:16:93:7e:d1:
af:f2:a5:0f:24:6b:23:0e:8a:f6:2b:83:0d:b0:c9:
af:f8:69:11:2a:02:e4:78:49:7e:fd:78:a7:a5:13:
91:1a:7f:f1:85:9e:ca:bb:dd:6b:29:e0:aa:c8:cb:
7b:b2:b0:a9:f3:ea:41:c6:ed:20:69:08:9b:13:27:
1a:89:c9:bf:64:03:6a:4e:61:70:d2:f9:c7:d7:ed:
1c:f3:50:fa:a5:2c:8e:64:c7:5e:c2:85:d2:66:85:
60:3b:85:e2:b9:99:c4:ea:ec:38:4a:72:d0:63:79:
9a:39:5c:18:fe:7a:7a:38:ab:71:f2:a4:94:bb:7e:
29:21:15:64:2e:0e:3d:60:da:18:93:11:b4:15:7d:
21:a4:34:cb:46:44:b8:ea:bf:a7:17:c9:67:ed:1b:
b8:22:74:a0:59:2d:78:02:03:7b:cd:8d:5f:60:68:
b5:a7:9b:39:1c:5b:5a:96:55:93:0c:63:7e:e3:d9:
74:83:ca:b4:3e:3e:ca:0a:82:9e:91:5f:98:d3:ba:
ef:68:b7:e4:0b:cc:3a:eb:ea:12:21:50:39:4f:ab:
2e:96:0a:3a:55:32:ff:62:cc:cf:8e:8d:74:be:4f:
02:1b:84:9b:9d:c3:9b:85:a6:38:a7:22:50:87:83:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CF:F6:51:AF:5A:36:A3:EB:46:19:18:C0:21:AD:F8:6B:25:A7:40
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1d:15:49:55:0c:95:f3:9c:4c:9e:ea:58:1b:79:9f:77:48:
30:d6:dd:16:9e:93:57:9d:8b:80:c5:b3:16:8a:73:00:a7:cd:
28:6d:2f:84:d8:8e:9f:61:3f:13:53:af:1f:39:74:b1:09:e3:
8b:30:6e:82:8c:3f:86:4e:93:f0:21:5a:a9:cf:13:57:9b:d7:
25:42:6e:7a:d1:e4:2d:6f:67:46:9e:79:34:43:99:f3:43:1e:
e2:db:f6:9d:bf:2d:fb:ad:bc:06:7d:36:52:da:55:b9:4a:2c:
7e:d3:9b:f5:55:f6:1b:60:06:22:0f:e0:2e:9b:ed:96:a7:f1:
97:54:72:16:db:4b:5a:ab:11:1d:f5:cb:0c:7c:91:af:80:3c:
87:43:ed:05:16:38:fe:df:3e:eb:b1:6f:74:a3:4a:4c:fb:d1:
84:21:8c:e7:46:5c:b4:6c:05:f9:db:17:b0:c6:f7:45:74:ae:
a2:91:f1:23:fc:e8:e7:e1:be:2f:be:23:21:2d:51:83:1a:2d:
d9:d2:7b:60:c6:a6:39:8a:68:dc:c0:c5:8b:86:26:1e:7d:fb:
06:cd:27:96:2c:8d:ea:58:12:f4:6b:16:68:8e:de:ff:b7:41:
6a:63:8c:a8:b6:39:da:ec:06:13:5e:87:86:7e:b5:52:4f:32:
8e:0a:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:57 2026 by rpki-client