Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
File: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft (raw, json)
Hash identifier: hY+eQbS/YV0e8Jxj1/205GT21ZbHcmaAOOwfJgM1uoc=
Subject key identifier: 6E:D0:79:7E:66:A5:D1:91:4D:04:48:BD:6A:6A:49:05:5F:02:BE:A8
Authority key identifier: 63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
Certificate issuer: /CN=63b147f67e8795d959ed3530396d1256055b126e
Certificate serial: 019D98BD45BB6F0AC9346C186756E8D317B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
Manifest number: 065C
Signing time: Fri 17 Apr 2026 00:00:34 +0000
Manifest this update: Fri 17 Apr 2026 00:00:34 +0000
Manifest next update: Sat 18 Apr 2026 00:00:34 +0000
Files and hashes: 1: Jg9UXomR67ddbwvE12iwfmdXVUY.roa (hash: erQTlvEuRH+/RugmpxhUl/Z+VWvMHHjTv7sIc+sSjyw=)
2: Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl (hash: UpGan0AjOy08/MZME/Ju681TmslYNasb9rAGUIi6kd4=)
3: uzGW5yZkWFK7XwuN3EgcKBBBYVY.roa (hash: iqNkpecefxjLtGeufMCzfpSJbAjOStGnY7fR2gXa7Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:45:bb:6f:0a:c9:34:6c:18:67:56:e8:d3:17:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b147f67e8795d959ed3530396d1256055b126e
Validity
Not Before: Apr 17 00:00:34 2026 GMT
Not After : Apr 18 00:00:34 2026 GMT
Subject: CN=6ed0797e66a5d1914d0448bd6a6a49055f02bea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:df:03:df:34:d7:b7:66:a5:72:33:e3:16:
63:a7:02:07:6f:38:c6:2d:f4:45:a6:87:be:c3:db:
ec:85:3e:a8:b9:b7:20:86:50:f7:b8:16:a5:c6:1f:
15:f1:fc:29:9b:1c:b5:41:ce:7f:3d:3d:47:ba:13:
4d:f7:70:4e:d3:40:85:09:13:dd:9d:33:ea:99:d1:
c2:a0:0c:21:7f:31:a4:ac:e2:44:b4:8c:af:64:b7:
4e:6a:5b:4e:c4:4f:97:46:e2:f5:2e:45:ab:e1:98:
48:27:86:21:f7:00:c5:a5:21:1a:ec:dd:bd:40:0d:
62:ed:36:72:2b:0a:3e:78:a4:e3:7d:c5:22:c5:6c:
5f:9d:4a:ab:61:53:72:d4:25:27:33:9d:e2:45:f6:
bd:5c:73:6b:91:1a:62:2e:1b:a0:34:a8:c2:26:03:
87:7d:2d:6e:b9:4e:71:1c:66:8a:50:84:df:c6:8c:
07:70:36:cc:5a:e3:fc:f3:29:f8:08:ef:ee:ea:d8:
56:ce:03:ec:39:f6:94:46:e3:79:27:19:59:f7:d0:
b0:b9:d4:21:09:22:20:56:25:6e:3e:6c:05:a8:9e:
ec:c1:b4:4e:42:d8:6b:c9:b2:f1:0d:78:06:62:30:
f6:42:4d:be:0b:fb:ef:10:9b:e1:16:1b:d9:60:fe:
7e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D0:79:7E:66:A5:D1:91:4D:04:48:BD:6A:6A:49:05:5F:02:BE:A8
X509v3 Authority Key Identifier:
keyid:63:B1:47:F6:7E:87:95:D9:59:ED:35:30:39:6D:12:56:05:5B:12:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0f87e2-b805-4bf9-a366-0f2c334e5e05/1/Y7FH9n6HldlZ7TUwOW0SVgVbEm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5b:5c:2e:78:a5:05:33:83:b8:a3:1e:da:2b:bf:de:f6:f8:
34:94:96:f2:98:50:21:2a:8a:ea:5b:54:fb:fc:75:94:7e:dc:
50:ea:ff:e4:63:41:f1:7c:c2:eb:a5:54:7e:ba:d8:38:07:da:
02:f4:76:c9:3b:25:51:5c:88:a1:af:94:e8:71:2b:e3:50:28:
f2:d9:0c:a2:6f:21:a5:f0:8f:4d:8f:18:61:67:51:04:f4:e7:
fc:b9:54:ff:1b:f0:b2:0b:24:ee:e3:4d:c0:56:fa:71:c1:54:
2a:ee:3e:35:05:fe:e4:ca:e9:d0:2a:38:57:10:99:2b:cd:1a:
2a:f2:dc:87:68:35:d3:7a:33:4e:83:f5:1d:3d:1f:b0:b3:e3:
0d:89:b3:94:b6:68:e0:83:00:8d:9a:82:b0:28:1b:68:f8:f6:
6e:44:04:3b:67:f9:f6:ec:32:f2:c1:af:f7:a8:81:a1:b3:4e:
f8:ce:13:1e:cd:cb:82:26:29:e5:ea:24:d9:4d:6c:3d:bb:8a:
9f:ab:85:1a:98:ed:4c:9c:15:a8:34:d5:56:2f:0d:38:62:a8:
41:d7:b4:62:37:90:95:b5:ca:c9:65:e1:48:86:a6:3d:1f:c8:
7d:30:17:ca:07:1e:9d:a0:aa:94:94:87:ea:c0:55:14:76:b1:
01:41:5e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:06 2026 by rpki-client