Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
File: YXvGPTvl98AszEqZ_C8vVSiKLWc.mft (raw, json)
Hash identifier: Lu1Xr5hxBIvxD7/r04yzK8URd3CkmuQI5KW5BgZoKBg=
Subject key identifier: 07:5E:56:C7:F1:43:19:5F:5B:CA:BA:67:70:42:A2:8E:8D:1F:4F:01
Authority key identifier: 61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
Certificate issuer: /CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Certificate serial: 019D9B515DFAEEB4161BAF43A4AA6743D4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
Manifest number: 9D
Signing time: Fri 17 Apr 2026 12:01:34 +0000
Manifest this update: Fri 17 Apr 2026 12:01:34 +0000
Manifest next update: Sat 18 Apr 2026 12:01:34 +0000
Files and hashes: 1: YXvGPTvl98AszEqZ_C8vVSiKLWc.crl (hash: S1KJiRtFK8jrhlqdoiij+TSX+slScC8wYWi5KrKUqAc=)
2: oC8MNAr3RRJD7iVzFgvjH2c0fSg.roa (hash: zQGn/viKIKxmP8Pxorl9pkhqm4xAapY3F6TTAuu6mlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5d:fa:ee:b4:16:1b:af:43:a4:aa:67:43:d4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617bc63d3be5f7c02ccc4a99fc2f2f55288a2d67
Validity
Not Before: Apr 17 12:01:34 2026 GMT
Not After : Apr 18 12:01:34 2026 GMT
Subject: CN=075e56c7f143195f5bcaba677042a28e8d1f4f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:3c:fb:1b:0c:f6:01:a2:3b:f0:64:89:f9:
09:f9:cf:2f:a1:43:e5:e3:4f:ae:08:af:15:a0:77:
48:39:8d:2e:25:1e:8c:c2:ae:3d:25:5d:ff:00:3e:
f9:29:86:ea:c6:50:1f:f3:91:25:c7:d4:10:a9:d1:
ab:19:7c:70:c0:86:dd:22:0b:68:e8:5e:da:08:65:
cc:37:5a:85:5e:13:0e:41:be:1b:2e:38:ba:b5:9c:
6f:b3:10:87:3a:99:6a:14:e7:1c:53:fb:8c:f2:42:
c1:5b:b0:19:aa:87:cf:b0:8a:3e:5d:14:33:39:1f:
ca:76:b0:8d:4e:91:3f:a3:1b:0f:9a:2c:61:e2:87:
dd:42:a6:b9:d2:db:1f:d6:41:8a:50:e5:00:77:2c:
04:a8:42:04:2f:4c:57:bd:52:87:b3:8c:7c:a5:c8:
ae:09:22:86:db:7f:fe:0b:e6:49:3d:5c:b5:f9:a4:
4d:9c:0e:27:3b:11:d8:34:c4:18:fe:33:9d:23:c5:
89:eb:6f:e7:e7:46:d5:81:4d:7e:65:ce:22:72:36:
94:01:13:62:92:eb:fd:e4:16:94:d7:07:22:27:38:
34:60:81:58:4e:f9:31:2c:37:e4:4c:d5:e1:9d:f5:
33:4f:f9:a2:06:53:91:29:0f:d2:74:9f:1f:2f:5d:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5E:56:C7:F1:43:19:5F:5B:CA:BA:67:70:42:A2:8E:8D:1F:4F:01
X509v3 Authority Key Identifier:
keyid:61:7B:C6:3D:3B:E5:F7:C0:2C:CC:4A:99:FC:2F:2F:55:28:8A:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXvGPTvl98AszEqZ_C8vVSiKLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a976be-9673-4457-937e-52e7f6a75013/1/YXvGPTvl98AszEqZ_C8vVSiKLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4c:47:49:7e:87:26:01:60:88:19:cb:9e:a8:ab:76:f7:44:
23:74:7f:aa:12:65:1d:8e:3d:e7:5f:8f:0d:57:f9:30:bc:f2:
ff:2c:f8:d7:4e:89:68:42:cc:55:35:5a:7f:25:a0:4a:07:3d:
5a:57:52:f5:a5:c3:af:06:d6:aa:71:de:cd:4d:53:d1:e3:d7:
f0:38:ff:7c:77:3f:d2:b0:a5:d6:a2:24:3c:a8:79:e1:44:7a:
85:24:85:97:d9:c5:0d:93:4f:83:f1:52:32:e3:e5:63:60:d6:
9c:c7:88:dc:87:7e:de:36:27:c5:d6:ca:09:d5:b9:17:af:a4:
d9:c1:5b:30:c2:d5:4f:19:a8:86:b2:67:d0:57:58:11:4f:1c:
f3:ea:83:8f:60:ee:46:0d:23:5d:66:d0:09:49:39:b1:3b:62:
2a:78:6c:39:62:f8:4d:3b:5e:bd:1d:9f:d3:90:c8:4a:11:fd:
5a:9e:5d:7b:16:d6:d9:43:c5:84:8e:e4:bd:87:e9:d2:38:d3:
6f:28:5d:cb:65:59:c2:45:67:88:e0:21:fb:6b:3f:23:de:68:
94:45:b8:1a:94:9f:2d:00:2a:bf:29:ca:1a:9f:1d:c6:2d:7a:
a8:0f:9c:3e:66:a3:77:21:14:78:1a:38:41:83:b1:ad:66:6a:
7c:aa:86:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:37:12 2026 by rpki-client