Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
File: yvF4APGUOvHFFChMw754Dpwh3Xg.mft (raw, json)
Hash identifier: tIbb7/iTCHfrGk1/WT2WnjbIqDepezY0y6w/+7Rg+7o=
Subject key identifier: DF:4B:6D:D4:BF:82:23:57:7F:03:0E:6D:7E:80:86:82:E9:A9:E4:17
Authority key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Certificate issuer: /CN=caf17800f1943af1c514284cc3be780e9c21dd78
Certificate serial: 019D9BBE21C67065F2EFE5173DBF08832D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
Manifest number: 0D11
Signing time: Fri 17 Apr 2026 14:00:22 +0000
Manifest this update: Fri 17 Apr 2026 14:00:22 +0000
Manifest next update: Sat 18 Apr 2026 14:00:22 +0000
Files and hashes: 1: wUbhJ1Q-nlV3uEvjLuk77UUB7Gc.roa (hash: R+RnalKmquQEDqC7KdcNQz1uImcCiR+mgzNPx6OERvI=)
2: yvF4APGUOvHFFChMw754Dpwh3Xg.crl (hash: nC6HFNjKnAisiZYZNGGhGZrGHr5ztzR4pNSDnsaZXCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:21:c6:70:65:f2:ef:e5:17:3d:bf:08:83:2d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Validity
Not Before: Apr 17 14:00:22 2026 GMT
Not After : Apr 18 14:00:22 2026 GMT
Subject: CN=df4b6dd4bf8223577f030e6d7e808682e9a9e417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:eb:07:3a:9c:d5:66:9a:0f:22:0f:e6:85:99:
82:8e:17:e9:22:f2:24:70:09:fe:95:63:5e:e4:4e:
d4:8e:ee:f3:9a:08:a3:c0:b0:71:44:c3:c8:be:62:
3d:42:21:13:21:9e:79:7f:6c:44:f4:c4:2b:2f:cb:
92:e1:e3:ec:82:4c:23:33:3e:77:07:b1:7a:58:34:
7b:bd:85:91:6b:85:88:2b:fa:49:67:e0:9f:0d:b8:
8a:78:68:b6:a8:e7:29:15:3d:46:49:d8:9f:c2:90:
07:15:39:d3:ec:53:6a:96:d2:70:71:e7:6c:8e:fd:
40:45:50:b9:89:46:cb:00:6d:ed:7d:45:54:56:8d:
b8:5c:76:6c:e9:86:0a:e8:ee:ab:91:5a:f0:9d:f8:
cc:a7:29:6c:f2:fe:d8:ae:f7:7c:23:c3:3a:35:4e:
5a:f0:71:3a:18:81:14:f7:a8:d5:a6:91:a2:62:46:
6e:0f:15:a7:4c:12:7c:85:17:4a:22:f2:8f:0b:cf:
4a:d8:8a:f4:f9:69:d1:95:9e:a6:83:46:a2:00:8f:
3d:57:30:6e:4f:ee:a0:3d:98:94:d0:0f:1e:88:38:
df:03:04:8f:93:64:97:e6:af:24:07:53:39:11:4b:
09:d0:1d:24:88:71:a3:ab:c7:7f:35:8a:80:7c:56:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:6D:D4:BF:82:23:57:7F:03:0E:6D:7E:80:86:82:E9:A9:E4:17
X509v3 Authority Key Identifier:
keyid:CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:45:83:5c:fc:a7:ff:bd:73:f9:1d:15:1f:84:ff:cb:f2:
b1:79:86:d1:af:42:d9:97:78:6f:4f:07:93:73:9b:bd:15:d9:
94:f1:92:08:bf:bb:67:91:c0:89:cc:0d:38:dc:4b:dd:98:77:
2d:6d:6b:30:da:e9:56:b0:8b:f6:72:70:a6:99:51:da:1f:37:
ac:5c:4c:b6:86:c6:76:e7:91:f9:36:36:7d:6e:ab:41:c7:6e:
8e:91:9b:11:bc:9f:22:96:6a:8a:5a:a4:f8:15:df:a1:ef:60:
9b:18:8a:db:f3:c5:a1:3e:ec:3f:9c:0f:ff:b4:27:2c:97:04:
91:01:98:0c:38:2e:d9:11:ea:e9:ed:3f:6b:5f:4c:7d:ec:08:
f4:43:26:ef:a4:49:a7:b6:c9:b0:02:ae:9b:dd:8b:29:de:ff:
a3:ae:8f:34:cc:6a:1f:98:09:9e:f9:cd:03:36:75:bc:79:96:
e4:07:87:f6:e0:eb:1c:0d:ba:6c:8d:9f:89:3f:77:77:8f:4d:
0e:e7:e6:52:e9:27:f1:7e:00:f9:13:88:e7:31:8c:cf:af:01:
3d:9f:fd:5f:96:9f:4b:3a:72:b5:14:06:5b:18:31:04:77:40:
96:f0:f9:68:7e:e1:44:01:0c:08:a4:20:f6:e7:e8:2a:2a:f3:
6e:24:57:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:41:48 2026 by rpki-client