Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
File: YdOddLF-aR3RsFIhxgmMr17pOjY.mft (raw, json)
Hash identifier: dtp1I8wnytPL1u5jRz2KoXSoQZ+q4/DYxCUOBiYnrSU=
Subject key identifier: A9:33:3D:C8:89:37:21:78:81:6C:00:69:5A:3A:65:A6:20:20:D9:CA
Authority key identifier: 61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
Certificate issuer: /CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Certificate serial: 019DA34161CC168068A8913A84700C9C1AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
Manifest number: 1390
Signing time: Sun 19 Apr 2026 01:01:04 +0000
Manifest this update: Sun 19 Apr 2026 01:01:04 +0000
Manifest next update: Mon 20 Apr 2026 01:01:04 +0000
Files and hashes: 1: Jf2ybRPxCJRBz81M0sPHI9fL5Xc.asa (hash: ccXR+qhmYk9GcwGl/n5URNgWvh69G6GfXIkJnkUXeww=)
2: TdzUQghIehxteP-iZtI9mD6S7yM.roa (hash: JMCW44uz3J0EyEDOpMW3IeWpIRHn5nCzZnwcaDitVew=)
3: YdOddLF-aR3RsFIhxgmMr17pOjY.crl (hash: 54ugE+S0sPXQjXCYGiw5Fc5r7VDgiFsG1VMeHWJ9/oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:61:cc:16:80:68:a8:91:3a:84:70:0c:9c:1a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d39d74b17e691dd1b05221c6098caf5ee93a36
Validity
Not Before: Apr 19 01:01:04 2026 GMT
Not After : Apr 20 01:01:04 2026 GMT
Subject: CN=a9333dc889372178816c00695a3a65a62020d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:ac:a1:8a:95:51:53:6b:b8:76:c4:04:1c:
62:ea:c4:da:ed:7c:ef:53:51:b5:06:2a:74:c2:cd:
5f:66:d9:67:c5:a7:1e:7a:79:06:57:6b:c4:49:4f:
30:ed:28:08:4a:d7:09:15:08:39:48:5d:78:39:a3:
5c:40:db:c1:95:31:c4:92:98:f7:5d:85:a2:fc:13:
91:b5:0c:17:c3:6f:0e:d3:bb:bb:60:d1:5f:b8:cf:
a4:cf:7f:e8:bf:0c:fd:90:6f:23:2c:3b:b2:68:1c:
3d:e1:c1:97:ff:89:d2:ae:16:46:20:41:a1:7e:01:
90:37:55:91:05:cb:8d:9d:a7:d9:91:92:29:e5:6e:
8d:3f:60:cb:46:e0:2b:29:63:e8:44:79:47:4c:dd:
20:bc:d1:16:c9:4e:79:2a:5b:f8:76:43:f3:ed:c5:
85:cc:08:2a:c9:91:37:e1:b1:26:b3:a5:12:d8:44:
53:51:1b:d8:92:e6:9b:f6:57:cc:1c:f0:0b:14:3e:
a9:1b:70:e6:c0:a0:f2:5a:18:2a:68:81:93:a4:db:
2e:df:a2:2b:25:0a:c0:db:ec:c8:f0:14:d6:6c:d6:
58:9a:ad:ee:82:83:18:de:92:78:a7:c8:4c:d9:cb:
35:17:dd:b6:ce:2e:c7:cf:3a:8b:61:63:cc:eb:f9:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:33:3D:C8:89:37:21:78:81:6C:00:69:5A:3A:65:A6:20:20:D9:CA
X509v3 Authority Key Identifier:
keyid:61:D3:9D:74:B1:7E:69:1D:D1:B0:52:21:C6:09:8C:AF:5E:E9:3A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOddLF-aR3RsFIhxgmMr17pOjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7ca2f2-bf13-4d18-a8dd-980511dc05ae/1/YdOddLF-aR3RsFIhxgmMr17pOjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d6:c9:7b:df:ee:b4:26:7a:15:4a:6f:1a:af:9a:1a:7d:52:
a1:ce:03:f7:7f:a2:15:62:dc:13:db:a9:8e:40:b7:fc:3d:f8:
7b:d6:ea:7c:c7:e9:0d:79:3b:0f:3d:b6:4e:85:a7:63:12:22:
d0:3f:75:28:43:e0:8f:24:c7:ad:96:7d:1e:ce:aa:30:e3:c3:
f0:8f:6f:f7:b1:c1:3f:62:2a:be:5a:3a:2f:3f:57:ce:20:90:
74:99:00:3d:cd:10:cd:1e:0c:2b:5f:cd:12:8a:e7:77:17:34:
09:39:38:98:dc:58:69:ea:86:8b:a7:fe:d3:53:c8:37:21:95:
b6:06:62:9f:0f:5f:92:32:ed:3e:9d:47:34:25:1e:5e:23:c0:
8b:11:07:9d:a4:e7:d6:e2:4e:ee:aa:0b:49:24:fb:7f:a6:0d:
91:ec:62:16:10:ac:ad:da:e1:72:c8:6e:84:0e:fc:7b:11:89:
7b:85:c3:3a:14:1e:18:de:d0:6f:a8:fb:ad:30:11:be:f2:32:
17:5f:78:d7:bf:40:2e:5c:4b:4b:b6:e5:36:61:7e:e1:2c:71:
55:bb:1e:20:ae:d9:31:db:e5:f8:4f:7e:bf:1b:1e:83:fc:a8:
91:11:48:81:9d:20:d6:e9:dc:55:85:c9:5c:c2:07:d0:17:49:
cf:c3:39:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:14 2026 by rpki-client