Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
File: YfTZxfoK42S02B7bxNGCAPAPvH8.mft (raw, json)
Hash identifier: kU2+gFPvXexg722ODCRo9z+nXBE5E3ZbeJkbtRjSB1c=
Subject key identifier: 28:ED:BD:5D:54:FB:49:D9:8E:9F:EF:C6:58:04:62:FA:E0:C8:C3:5A
Authority key identifier: 61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
Certificate issuer: /CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Certificate serial: 019DA59D150ACCA8ADDAF4AE79B63303953B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
Manifest number: 027D
Signing time: Sun 19 Apr 2026 12:00:28 +0000
Manifest this update: Sun 19 Apr 2026 12:00:28 +0000
Manifest next update: Mon 20 Apr 2026 12:00:28 +0000
Files and hashes: 1: YfTZxfoK42S02B7bxNGCAPAPvH8.crl (hash: rKJ1fKB5sRNZRnTup12zBx+/mnh+6fjFUZI9va15Lpk=)
2: i757eDGPyWXy1WJ59_NsKxP9nBk.roa (hash: aclUO+YpHA3b3E++8LC8TZOgc8p99LqEe7lxYmVbjYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:15:0a:cc:a8:ad:da:f4:ae:79:b6:33:03:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61f4d9c5fa0ae364b4d81edbc4d18200f00fbc7f
Validity
Not Before: Apr 19 12:00:28 2026 GMT
Not After : Apr 20 12:00:28 2026 GMT
Subject: CN=28edbd5d54fb49d98e9fefc6580462fae0c8c35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:50:22:20:a6:49:98:7e:7b:8d:82:4e:1d:2c:
0d:33:af:f0:e7:51:1e:40:75:14:90:84:16:ef:da:
e0:76:50:55:7c:4c:fe:a1:fd:8d:48:4f:a5:21:71:
88:a4:cf:85:bb:cc:08:44:31:01:2c:89:00:8f:70:
a5:53:d6:2a:e3:15:d5:09:c8:e4:52:e8:2e:35:e2:
1e:e7:f5:82:4b:84:dc:23:80:dc:0a:b2:8b:12:2c:
e5:90:42:1c:79:3d:b4:2c:78:ba:cd:3a:2c:e0:b5:
9e:7f:f1:0d:39:34:52:5c:63:cd:8d:d5:69:8b:d2:
74:0f:42:e9:e5:a7:ee:26:b9:d7:96:68:00:ae:b8:
c9:cc:63:9a:88:9d:58:ce:9a:e0:a3:59:31:61:5a:
42:67:79:6f:21:58:32:5f:a3:57:cf:b7:01:8f:db:
91:fa:ea:bc:f1:d2:8e:a2:01:d8:14:26:21:74:64:
49:60:77:60:da:41:64:b2:74:b8:7d:51:1b:bf:09:
99:f7:6d:e4:d1:71:06:ec:e6:94:9a:74:d8:7c:ac:
a8:dd:e7:38:07:07:c0:24:c8:d9:2b:a2:10:24:0c:
e4:ed:cd:fd:14:8e:eb:3e:3e:a3:38:ca:ba:46:dc:
87:5a:20:73:ce:ad:40:c2:6e:1d:85:24:46:ac:88:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:BD:5D:54:FB:49:D9:8E:9F:EF:C6:58:04:62:FA:E0:C8:C3:5A
X509v3 Authority Key Identifier:
keyid:61:F4:D9:C5:FA:0A:E3:64:B4:D8:1E:DB:C4:D1:82:00:F0:0F:BC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YfTZxfoK42S02B7bxNGCAPAPvH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65182a-a62f-4042-8a9b-7ee5311a2a3c/1/YfTZxfoK42S02B7bxNGCAPAPvH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:84:bc:0f:4f:0f:79:19:80:1a:d8:76:17:62:25:c0:5c:2a:
b4:f4:4a:d2:8a:00:06:58:08:fe:b0:c6:a7:c2:cb:36:73:81:
cb:c4:f4:79:f4:cd:f0:d1:c7:ba:d3:59:58:3d:d1:f7:0f:04:
fd:00:bb:94:55:3a:ba:95:66:35:22:2f:d2:76:c2:8f:83:51:
31:57:05:f2:a2:41:8c:6d:45:cd:1f:76:2c:38:37:86:b3:3f:
2c:a4:12:16:ec:58:05:13:49:a2:ca:25:53:71:d8:82:5a:71:
eb:c7:b2:5a:63:40:98:2e:60:61:e9:ed:a6:ae:83:26:f8:70:
08:49:5c:c7:89:72:d1:f9:85:34:f8:42:7a:56:1d:a6:69:a6:
ef:be:a4:82:89:11:51:8a:e1:b2:74:a9:6a:3c:ab:b9:9d:c1:
a8:b3:18:91:a1:40:54:9e:72:f3:b8:c3:88:78:d2:59:2d:2d:
99:0f:70:a6:5f:e7:f8:48:e8:9b:b6:98:5b:85:c2:86:8f:90:
e1:2f:36:c5:72:50:e5:06:1c:ab:65:b4:1a:62:7f:a6:40:5b:
a2:6e:a4:2c:24:37:d1:5e:7d:b7:cd:82:f1:d8:22:93:56:2f:
c6:5b:08:ed:7b:94:58:02:b1:0f:a4:8d:9f:b8:b6:90:9b:b9:
da:ac:b4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:38 2026 by rpki-client