Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
File: YO9KF7jv9Fugs51HSWVX44j__lI.mft (raw, json)
Hash identifier: FflshdBR4yWa/ZKDgo6EZJqhS+2mZM/iohGroHMS4nc=
Subject key identifier: FB:3D:D9:33:E8:71:01:6F:21:B3:9E:43:71:F6:51:D0:92:B9:3F:21
Authority key identifier: 60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
Certificate issuer: /CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Certificate serial: 019DA5D4A14624E0CFCBD73E80BA4D23AA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
Manifest number: 03AD
Signing time: Sun 19 Apr 2026 13:01:08 +0000
Manifest this update: Sun 19 Apr 2026 13:01:08 +0000
Manifest next update: Mon 20 Apr 2026 13:01:08 +0000
Files and hashes: 1: YO9KF7jv9Fugs51HSWVX44j__lI.crl (hash: f+7cl0uKVUFPxMkpx8NgENGFCesH6zGKqI9cfbzJGic=)
2: bqQFNJsrG869RK3Nfbwr65mLsd0.roa (hash: lGIgTiJR2g5VC3z+XfnzZ2hEM7gGKI2STx8vdvlyfrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:a1:46:24:e0:cf:cb:d7:3e:80:ba:4d:23:aa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ef4a17b8eff45ba0b39d47496557e388fffe52
Validity
Not Before: Apr 19 13:01:08 2026 GMT
Not After : Apr 20 13:01:08 2026 GMT
Subject: CN=fb3dd933e871016f21b39e4371f651d092b93f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:bf:c8:ab:18:48:15:05:3e:e7:56:33:da:
36:fd:5e:aa:8e:ea:97:bb:f2:dd:33:ed:2f:1e:55:
72:78:ee:77:cf:f1:8e:95:2a:2b:ee:a1:b2:c3:c3:
cd:5c:e0:72:63:02:67:40:0d:f4:d0:4b:7d:8b:9d:
dc:7b:7c:21:86:8c:49:7d:92:e4:41:31:41:ff:7d:
82:b5:37:ca:eb:47:6e:5d:05:53:ff:93:33:84:c8:
73:b8:4a:16:5d:e5:e0:bd:91:8c:55:85:ed:a9:e0:
b3:be:94:b6:61:20:88:1e:bd:72:3c:03:de:62:b5:
fa:67:c2:ca:96:f5:74:16:67:6b:51:65:4e:b8:24:
fd:fd:2b:c2:1a:13:4e:f3:08:43:2f:90:78:9c:3a:
db:08:9f:89:20:7b:0a:da:0d:07:ff:f7:7c:b7:45:
f5:e9:b3:5d:b2:da:02:02:90:6c:ea:bd:22:d7:19:
c5:98:fc:7c:a7:39:5a:98:13:76:dc:54:a0:b7:50:
22:46:cb:b5:77:ec:1b:01:46:1d:6b:6c:bc:d2:b9:
b7:ed:f1:08:e0:bc:02:63:be:44:a9:99:b6:e3:51:
95:b5:06:32:eb:f8:e8:44:9b:79:8d:4d:bf:62:1a:
bc:52:2c:d0:b5:00:b3:9f:34:1f:c7:37:8d:2f:2e:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:D9:33:E8:71:01:6F:21:B3:9E:43:71:F6:51:D0:92:B9:3F:21
X509v3 Authority Key Identifier:
keyid:60:EF:4A:17:B8:EF:F4:5B:A0:B3:9D:47:49:65:57:E3:88:FF:FE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YO9KF7jv9Fugs51HSWVX44j__lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/57faee-68b2-4693-8130-ce434a402617/1/YO9KF7jv9Fugs51HSWVX44j__lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e6:30:28:a2:0b:20:f0:fb:c9:40:51:14:95:1e:86:4e:44:
1b:c6:10:c2:b1:c3:af:72:05:5e:5e:cc:c3:d6:5c:b0:06:21:
9b:15:49:c3:5e:9d:66:7b:3f:3d:7b:b4:86:c4:49:e7:0f:ad:
7a:f7:7f:60:7f:d9:75:1b:87:fc:51:20:5a:ad:be:ab:ba:03:
ff:c9:2c:4c:7b:1c:3c:db:b2:99:2a:37:b4:e6:53:5e:69:c8:
91:8a:23:d1:ea:bb:40:c2:a8:b0:e7:6b:4d:2f:5e:8d:87:bf:
66:d3:fa:f9:ae:ab:c9:6f:bb:64:97:75:1b:c3:57:23:28:dc:
91:5c:3c:4d:91:41:87:13:2e:41:3b:eb:24:3b:d8:01:56:f0:
fd:be:f9:bd:c4:46:9f:60:56:cd:85:03:a6:48:13:f8:ab:6f:
7f:a8:a9:72:36:e2:78:91:d5:92:2d:98:97:c1:b6:37:dd:74:
a5:32:3c:d8:bc:fa:32:74:e6:1a:c7:05:2e:5c:1a:b8:03:65:
62:25:9c:81:e5:0d:8c:93:3f:3f:cf:c2:32:e3:67:b5:aa:d1:
3d:17:7b:b8:01:2c:db:da:7e:74:ce:8b:cb:0b:42:f6:3d:da:
d7:05:0f:48:d2:56:1c:86:89:63:ac:d5:d1:d8:10:86:85:78:
8e:a3:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:12:08 2026 by rpki-client