Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
File: YKzX2WuVbeXbA2c80dHjo3uN2d0.mft (raw, json)
Hash identifier: KnFiCDHSvWIhvG/pbiOvSuY+IblXB6aa72U7yLaK46k=
Subject key identifier: 99:CE:84:CF:4D:37:0F:89:13:8D:A9:51:65:C9:33:CA:62:EB:16:1B
Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Certificate serial: 019DA3417B6634AEA77FD16171FDC6DED8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
Manifest number: 081A
Signing time: Sun 19 Apr 2026 01:01:10 +0000
Manifest this update: Sun 19 Apr 2026 01:01:10 +0000
Manifest next update: Mon 20 Apr 2026 01:01:10 +0000
Files and hashes: 1: Ewfu9z930MhyPX8313muaLXe2oM.roa (hash: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE=)
2: YKzX2WuVbeXbA2c80dHjo3uN2d0.crl (hash: L4bJuUWO2gnQgNZGjNWenFyT2afWw9Uevb7bzugFRaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:7b:66:34:ae:a7:7f:d1:61:71:fd:c6:de:d8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd
Validity
Not Before: Apr 19 01:01:10 2026 GMT
Not After : Apr 20 01:01:10 2026 GMT
Subject: CN=99ce84cf4d370f89138da95165c933ca62eb161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:cc:04:3e:2e:12:db:17:f8:8a:94:54:03:
41:f8:1f:93:f0:3c:13:81:3c:57:30:b8:2a:bf:93:
c3:f8:b3:c0:a9:73:a8:17:ad:26:3b:73:07:4d:cb:
09:6b:87:4d:9f:b3:f6:47:1a:9f:8f:49:c6:91:f5:
fb:83:9b:cf:c9:ee:1a:b0:34:15:a1:40:f6:18:06:
1e:80:00:e4:e7:57:0f:15:5d:6f:09:11:bd:d7:28:
5e:20:e2:bd:97:ec:5a:8e:cd:ac:bc:6b:d7:1f:11:
6a:6f:63:93:3b:10:4c:24:d5:17:7b:cc:a3:74:34:
50:53:44:63:6b:fa:81:6a:c6:18:b5:43:b1:54:70:
21:22:4f:1b:db:d8:50:8e:0b:27:34:ea:13:69:2a:
1c:87:78:2e:d1:18:a5:5e:26:89:a6:a0:33:5e:f8:
14:05:f3:8d:38:69:f4:6a:ed:0a:cf:10:34:d9:7c:
03:8d:41:e5:54:82:73:dd:b1:7d:04:c6:0b:8d:5e:
f7:13:4b:15:0a:6e:ab:95:1b:97:4b:7b:12:fd:f5:
b6:eb:50:3a:eb:c9:b7:ff:4f:3f:24:06:1b:a2:5a:
9a:c8:5f:da:36:08:e9:f7:73:8a:0a:72:40:78:33:
ee:73:55:f5:0c:b8:54:84:ca:5a:00:3d:01:1a:3e:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CE:84:CF:4D:37:0F:89:13:8D:A9:51:65:C9:33:CA:62:EB:16:1B
X509v3 Authority Key Identifier:
keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1d:6e:bd:40:dd:fd:1f:1e:6f:fd:ad:65:91:d9:4a:ce:25:
84:e3:1a:11:bf:22:99:51:cb:19:e1:06:70:11:b4:39:82:32:
ef:7d:35:ba:9a:e6:13:fe:8c:1d:1e:05:b2:96:f4:9d:84:07:
f4:70:5a:d2:23:ee:16:fa:da:e2:e9:5d:cc:c9:cb:90:f5:a9:
8b:a6:75:07:90:ea:39:9c:f1:a0:d6:4f:88:d5:98:68:31:4f:
2a:97:1a:47:b8:1a:52:53:43:8e:e9:b6:ab:5f:a2:72:21:6f:
2b:0d:24:36:74:e4:09:1b:0d:b4:52:c8:89:cb:67:e2:3e:e8:
bb:89:fb:5d:5f:c8:a0:66:cd:52:76:a4:a2:48:0a:68:b0:8a:
1c:21:fe:a4:ee:20:f5:4a:11:80:f8:9d:01:3d:f4:f7:54:42:
5d:9f:bb:c9:22:48:20:c3:b8:1c:bf:00:9d:65:46:20:f6:1c:
61:1e:9f:b7:7f:8c:25:ec:00:01:a1:b3:a9:b4:22:22:54:29:
01:93:87:20:ad:e9:f5:6a:f1:9f:91:c5:c4:f2:6f:0f:f6:d6:
44:83:13:0a:52:d3:0b:7d:1f:55:88:d2:e1:80:55:b0:7c:72:
2b:67:6b:6a:41:91:a9:22:f7:02:ff:b4:5c:9a:ac:c8:9f:a4:
7a:74:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:51 2026 by rpki-client