Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
File: yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft (raw, json)
Hash identifier: aZaa64TwUCJ25SGUAYkjHY3IYZjWJlQJ99VapF57rRI=
Subject key identifier: 6A:09:DA:D4:A1:17:B1:30:C5:8D:8E:22:64:D7:69:CC:36:DF:A6:90
Authority key identifier: C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
Certificate issuer: /CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Certificate serial: 019D9AE2B578278273A9556C434FA28F68D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:00:41 +0000
Manifest this update: Fri 17 Apr 2026 10:00:41 +0000
Manifest next update: Sat 18 Apr 2026 10:00:41 +0000
Files and hashes: 1: yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl (hash: KCGmmTc+uZxKePx0fZsoK50ffDvHxIYsg00HSzguk4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b5:78:27:82:73:a9:55:6c:43:4f:a2:8f:68:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ed443f85d0eec66364cd7536f18888ac1f99e3
Validity
Not Before: Apr 17 10:00:41 2026 GMT
Not After : Apr 18 10:00:41 2026 GMT
Subject: CN=6a09dad4a117b130c58d8e2264d769cc36dfa690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:bb:42:d7:5e:41:78:a8:67:ec:c1:35:83:
ec:17:13:88:e7:48:99:5f:f0:e3:51:51:86:44:32:
2e:3b:42:2d:06:2e:e6:86:61:61:87:da:1b:e5:e1:
4c:ed:96:ce:31:33:03:2f:5f:90:4b:ef:cd:49:5c:
c9:26:02:c1:b4:d9:8c:76:89:b5:5a:20:d7:60:79:
62:ad:91:d7:d6:38:67:5e:fc:f2:de:29:43:22:42:
ea:7c:6b:66:30:11:57:1e:bc:29:57:47:21:15:37:
d2:d8:71:c9:c9:31:21:e3:91:44:39:84:ac:0e:ac:
a9:44:e1:9e:84:a4:d7:6d:bf:c8:4d:2d:3c:84:dc:
3a:14:ac:d4:9f:42:01:9e:97:28:2c:f9:b6:ad:81:
b3:75:c0:2d:c2:cb:7c:e1:9c:b1:2a:d4:b1:d5:a0:
de:c2:9a:de:4e:b5:df:06:97:69:8d:8a:3e:05:b5:
a1:13:d5:b3:62:9b:6f:78:f5:0e:42:c6:9b:0a:0a:
41:71:56:5b:42:a2:f7:5f:87:44:5b:b3:45:29:e9:
eb:48:12:57:d1:17:29:88:58:ca:5a:60:04:a8:d4:
e5:30:3f:e9:22:9f:fe:bb:dd:5f:02:25:0d:74:a4:
37:a2:4e:5c:39:14:4c:fe:f7:ca:02:c0:1e:13:41:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:09:DA:D4:A1:17:B1:30:C5:8D:8E:22:64:D7:69:CC:36:DF:A6:90
X509v3 Authority Key Identifier:
keyid:C8:ED:44:3F:85:D0:EE:C6:63:64:CD:75:36:F1:88:88:AC:1F:99:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yO1EP4XQ7sZjZM11NvGIiKwfmeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ac49eb-c47a-4c5d-81bf-6d04310e342b/1/yO1EP4XQ7sZjZM11NvGIiKwfmeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ea:16:47:2b:26:18:c6:4e:51:f3:d6:85:3b:a5:0f:1a:5e:
e3:9b:ff:8f:7c:78:d5:15:54:b1:2e:61:99:27:6d:6b:7c:2c:
c3:23:0c:87:61:0a:b0:f2:f1:26:0b:3c:2b:fd:86:9d:f7:f8:
19:02:10:07:4a:89:34:5b:84:89:97:88:93:3a:f7:03:cf:e4:
af:20:93:3c:50:f7:10:25:9f:1f:60:71:b2:53:d1:7d:d5:a9:
64:60:73:9b:fb:66:32:c0:61:b2:cd:f0:0c:92:5b:1d:d6:67:
8f:a4:86:fd:01:01:89:94:55:dd:0b:b1:01:6e:5d:ea:39:36:
1d:26:87:dc:eb:6a:71:9a:c0:c6:a1:6e:e1:9f:cf:a6:90:1b:
26:78:8d:ed:f7:e0:2c:af:80:04:40:59:9d:df:4e:3e:5b:64:
95:4d:d7:2d:35:35:89:57:87:f1:86:d4:32:98:64:cf:33:d0:
67:af:f2:40:4b:86:34:55:1c:ee:ce:a9:39:da:4b:f7:5e:14:
73:f4:f3:1a:a4:5f:ac:30:bc:04:de:d1:1e:b4:da:ce:c9:70:
10:ae:89:78:f2:39:c2:c0:08:31:d4:3a:84:06:e7:bf:a6:95:
ff:03:8c:9a:3c:4b:e6:c7:c4:7e:28:0e:7d:a3:42:8b:1d:6f:
b9:c2:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:03 2026 by rpki-client