Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
File: yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft (raw, json)
Hash identifier: N7m5abtHHjfEYi95wF3fdoo9U2flipTxGpWHZZSl3LE=
Subject key identifier: 73:13:1B:41:D6:1C:46:2B:D4:FC:0B:71:82:F0:88:42:1F:B5:56:02
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 019DA56770C7FB553C6D16B94D27FCE5C283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
Manifest number: 06FE
Signing time: Sun 19 Apr 2026 11:01:52 +0000
Manifest this update: Sun 19 Apr 2026 11:01:52 +0000
Manifest next update: Mon 20 Apr 2026 11:01:52 +0000
Files and hashes: 1: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (hash: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=)
2: yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl (hash: yJEYh79U1AD3Vl73I6aSWnqQdIiXdh0Hsj+YIy65Z1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:70:c7:fb:55:3c:6d:16:b9:4d:27:fc:e5:c2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Apr 19 11:01:52 2026 GMT
Not After : Apr 20 11:01:52 2026 GMT
Subject: CN=73131b41d61c462bd4fc0b7182f088421fb55602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:41:3a:38:88:de:82:48:55:02:3b:23:38:
29:e1:65:90:50:60:2f:37:2f:2b:92:9a:94:3d:2f:
2c:83:03:ab:ac:d2:ba:1c:0e:aa:46:0a:27:18:c9:
c3:71:43:34:5b:34:bf:9a:76:6c:46:03:aa:10:04:
3c:0b:36:f2:be:5f:83:df:2d:6f:25:d5:96:3e:10:
2d:26:29:fa:ba:e8:4a:b5:13:75:2d:05:90:39:1b:
67:d9:05:ab:9a:78:0c:61:4b:cf:8b:32:0f:8b:1e:
3d:50:17:56:c0:48:6a:90:02:86:ef:bc:04:f9:89:
ac:08:6e:9e:9d:72:a7:6b:a3:0f:31:fe:f2:6b:23:
9a:79:c9:41:e1:71:3b:84:24:21:66:a1:76:73:8a:
0b:fd:26:22:49:82:d0:05:cb:04:2f:b3:30:83:5d:
94:64:43:cd:3e:ae:1b:00:74:f3:64:45:76:a3:5c:
f1:fe:31:9e:6e:37:be:5a:bb:cd:d3:94:24:f1:c6:
85:6b:12:67:ff:97:c1:bd:96:e3:13:9a:0b:ad:bf:
e8:e9:b3:33:96:b1:0a:f2:53:61:b1:1c:45:62:02:
fb:a8:6b:a2:9e:a2:59:91:a8:1d:d7:b1:93:40:04:
53:5c:79:58:89:08:d3:38:d7:9f:01:a3:61:92:6b:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:13:1B:41:D6:1C:46:2B:D4:FC:0B:71:82:F0:88:42:1F:B5:56:02
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:a1:40:40:8a:b5:20:d7:22:2b:58:4f:a5:a0:de:4d:7c:
57:cf:e0:e6:46:ff:0a:c8:4f:f9:65:8b:99:b1:8c:9a:14:a3:
b9:cb:18:e4:a2:d4:ca:e6:c4:ac:53:89:3c:b9:99:9a:d0:b2:
f2:7e:70:b2:80:5b:d6:26:9c:52:8c:03:b7:64:5a:9c:a9:52:
ca:58:05:e9:d3:d9:54:10:2e:81:1d:02:ee:46:43:48:b7:f3:
85:ba:a0:1f:d4:c6:04:a2:92:ec:05:e9:9e:37:81:5b:f1:74:
24:9a:5b:ea:20:b1:a9:ab:ed:f0:b2:6a:bc:24:79:01:de:3e:
f6:af:cb:d5:b9:f6:68:ce:d2:6c:79:e6:97:f0:4e:17:ec:bf:
f8:75:e1:31:d5:d4:9c:70:1d:ec:4e:51:74:af:44:2c:78:cd:
9b:15:75:10:be:68:27:a2:5d:96:c7:33:b2:c7:af:49:ec:b8:
73:97:5d:a5:56:2a:ff:43:fe:6d:b0:c2:98:7b:ee:a8:f2:1b:
8c:19:da:86:e0:4a:fc:85:41:34:6b:02:8e:3a:ef:ba:87:71:
07:5b:02:b7:d5:6f:56:e3:d0:13:3c:42:79:8a:b9:4e:8b:5a:
d3:61:4a:bf:5d:b2:e1:8d:3f:6e:ab:d8:34:e5:45:a8:a1:b8:
12:73:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:50 2026 by rpki-client