Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
File: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft (raw, json)
Hash identifier: 4ph2WPPODc6BQL8lKjRemBxqv/YueE4HWa1AoADw924=
Subject key identifier: 2F:8A:B9:97:C9:51:6C:4F:13:CE:D5:82:89:06:4B:6D:38:B3:8C:92
Authority key identifier: 61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
Certificate issuer: /CN=61041121ccc6e65d933961fd572d59e261f21a31
Certificate serial: 019D984FB296AD73B31EB1EE40AC1FEA892C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:53 +0000
Manifest this update: Thu 16 Apr 2026 22:00:53 +0000
Manifest next update: Fri 17 Apr 2026 22:00:53 +0000
Files and hashes: 1: 8x9EixpS_cTo1YUsFO5RBhE9yQg.roa (hash: H+557dvreWM3Tp/NNdorNLcHs2h/JJEHvmmY5yieUec=)
2: YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl (hash: v1YrAuoPlg/qnBa90NuPlWOsrwT9hz6E2vSkCvDO2uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b2:96:ad:73:b3:1e:b1:ee:40:ac:1f:ea:89:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61041121ccc6e65d933961fd572d59e261f21a31
Validity
Not Before: Apr 16 22:00:53 2026 GMT
Not After : Apr 17 22:00:53 2026 GMT
Subject: CN=2f8ab997c9516c4f13ced58289064b6d38b38c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:78:4f:07:44:8c:7e:ba:17:49:51:4e:1c:
c5:ba:d6:b9:88:a5:ed:b9:67:3a:0d:a4:3c:51:b6:
6f:df:94:10:52:fd:40:3e:77:ca:ad:a5:22:3a:5d:
3c:ca:74:c9:b0:b8:ba:37:c4:71:fa:e2:d4:76:f6:
6b:cb:7a:06:b5:71:36:86:c9:66:43:fe:39:26:a8:
f0:f6:d5:90:c8:ec:01:7b:f9:94:90:16:57:2b:6b:
97:6e:6f:ca:f8:a6:2a:c1:52:38:3a:7f:29:f6:2b:
59:19:9c:8d:7d:44:37:de:f7:8f:55:f5:7d:65:ab:
f4:75:2e:0d:3b:3a:55:52:d0:18:f1:26:8c:05:4a:
fc:2c:80:aa:2c:3b:1c:32:34:6c:08:bf:60:97:15:
e2:69:65:0c:cc:6c:b1:ea:41:64:cb:34:4e:f4:bd:
20:dc:e8:77:b0:2a:de:68:43:b4:07:38:d6:24:fa:
ed:25:23:66:5c:09:c8:06:d5:cf:87:98:1e:dd:08:
91:aa:81:d5:2c:fe:2d:52:54:89:62:83:f4:f0:f1:
46:5c:fc:78:a4:33:b3:d2:2b:72:2e:d8:94:d2:79:
79:06:96:21:e2:c2:dc:b9:c9:d0:bf:e9:c7:9e:61:
8c:8d:df:5d:9c:65:70:7b:42:33:a5:16:c9:ba:31:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8A:B9:97:C9:51:6C:4F:13:CE:D5:82:89:06:4B:6D:38:B3:8C:92
X509v3 Authority Key Identifier:
keyid:61:04:11:21:CC:C6:E6:5D:93:39:61:FD:57:2D:59:E2:61:F2:1A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/383be6-7c31-4dca-b3c1-dba6d7594c19/1/YQQRIczG5l2TOWH9Vy1Z4mHyGjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:79:1f:ca:ce:25:db:0c:18:2c:09:25:05:f0:34:9d:26:41:
cf:d8:88:b8:1d:58:de:c6:66:53:d2:fe:85:a1:87:10:61:31:
c4:6d:fc:5e:f3:5d:af:b6:8a:a4:f3:36:41:9e:7d:de:4c:29:
41:13:f9:01:5e:86:65:dd:48:c2:d3:3d:89:04:4e:2a:f0:86:
70:73:3d:e4:aa:b7:f4:fb:aa:4b:c2:f4:b9:bc:ff:d7:ec:eb:
2d:71:f4:18:59:c3:6a:4a:60:85:d1:b7:85:74:41:63:b4:a3:
bd:43:1c:8f:3f:d1:d8:90:b0:34:4e:17:bd:8b:b0:fd:97:98:
9d:95:da:1b:d5:20:0f:ae:0c:6e:bf:d9:19:c6:cb:aa:a1:61:
8c:64:29:6f:bc:88:6e:46:14:e8:e5:47:2e:4e:e7:20:dd:3f:
d8:a2:1c:18:c5:8c:b8:60:17:8d:a8:45:7d:38:a0:a2:f2:78:
4a:8b:6e:fe:c1:e3:e5:7e:35:65:24:af:f4:bf:7c:e0:c8:8e:
1a:2b:7a:ac:fe:b7:4d:bf:03:ec:1e:98:ae:ed:7a:a1:44:9a:
0c:08:46:e9:f4:d6:62:7f:ae:85:f2:d0:c4:a8:09:b8:0b:97:
88:7f:50:75:78:f1:08:f7:4d:bb:b1:bf:5e:55:1c:7d:1e:10:
c0:c7:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:58 2026 by rpki-client