Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
File: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft (raw, json)
Hash identifier: dXfDBdhObO1lpO4VEaAD6JWJ1U7TXTOSRxQ2Drotrlo=
Subject key identifier: D4:C9:3F:D1:1C:2D:D3:4E:95:0B:E0:EB:FE:6E:4C:3A:40:BA:DC:3B
Authority key identifier: CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
Certificate issuer: /CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Certificate serial: 019D9B87643746B9ECBE5FC1630661288AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
Manifest number: 0669
Signing time: Fri 17 Apr 2026 13:00:34 +0000
Manifest this update: Fri 17 Apr 2026 13:00:34 +0000
Manifest next update: Sat 18 Apr 2026 13:00:34 +0000
Files and hashes: 1: ApB3AApTkd-CTxpkFDEIw_6nXz4.roa (hash: BHpUQQ7BEi0kv1fti7vIaRRcfrlm8kSIsZNfVucwYew=)
2: yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl (hash: A+ozAwCdU3aSsIoWm4VltDJyMQwoXeZ3Dgj93FM0IQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:64:37:46:b9:ec:be:5f:c1:63:06:61:28:8a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb12d8ba2e0894dd06ca143a5517234e584af8c7
Validity
Not Before: Apr 17 13:00:34 2026 GMT
Not After : Apr 18 13:00:34 2026 GMT
Subject: CN=d4c93fd11c2dd34e950be0ebfe6e4c3a40badc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:b8:74:c5:3b:9e:d6:d9:02:66:2c:1b:96:
f5:12:9d:bf:4d:fb:5a:dc:0a:a4:1c:65:0d:30:7e:
94:fc:4f:f8:0c:b9:86:aa:90:6c:92:86:34:20:06:
09:cd:8f:fe:10:fc:3a:f8:ae:29:81:97:cd:38:c1:
8e:b0:6d:63:ae:2d:de:ad:ff:a6:da:3f:95:3e:23:
87:8c:e8:06:5b:98:e3:7b:fe:90:df:66:fb:64:8b:
7c:2c:68:25:1e:a3:ea:30:d7:dc:a3:18:ec:14:7e:
78:1f:c2:22:0a:3c:b2:73:cc:63:a1:02:95:b4:21:
c3:26:71:a7:f9:87:04:9e:2b:94:e1:3c:b2:0c:6f:
20:70:36:37:21:29:76:30:04:7a:fc:ba:dc:8e:bb:
01:14:e0:d5:c1:b2:65:84:ec:a6:c4:d1:07:6a:cf:
d3:95:e6:04:0a:54:ff:e0:d4:99:29:1b:15:f5:15:
b4:bb:ce:b8:30:19:36:f9:3b:d4:53:8c:ef:00:b0:
5e:c3:f6:4b:66:45:86:27:b8:a1:b6:95:c8:e4:18:
d7:d9:f1:bc:43:ef:e0:97:94:66:17:e8:01:1f:3f:
fe:ee:0f:b8:7e:b4:32:62:63:55:4b:af:35:fa:db:
12:69:a0:32:d5:6f:71:18:b5:aa:96:c5:8c:ed:37:
29:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C9:3F:D1:1C:2D:D3:4E:95:0B:E0:EB:FE:6E:4C:3A:40:BA:DC:3B
X509v3 Authority Key Identifier:
keyid:CB:12:D8:BA:2E:08:94:DD:06:CA:14:3A:55:17:23:4E:58:4A:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4d1696-3341-4ddb-8e23-34e2279be765/1/yxLYui4IlN0GyhQ6VRcjTlhK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:26:e9:07:d2:4a:41:68:34:e2:76:2e:c4:a3:f6:aa:5e:73:
4a:6c:6e:3c:50:5e:16:1f:57:03:66:41:7b:dd:2f:77:c6:ed:
91:0e:6f:9c:9d:2a:06:45:8f:0e:d4:87:d4:59:dd:2c:4d:51:
35:68:2c:2c:98:07:4e:cc:a4:35:23:51:08:10:10:cb:d5:37:
fc:20:02:f1:55:e7:70:42:fe:6e:9f:62:2c:9f:14:26:e9:ea:
da:6b:d7:ae:aa:3e:34:ba:4b:08:e7:81:c3:b4:28:71:53:95:
db:ab:fa:c5:2b:bb:22:07:e2:37:7a:09:1d:cc:eb:58:85:70:
b1:d7:12:84:63:9e:95:0e:d9:5d:50:45:c5:6c:cc:63:62:1b:
ae:62:da:b2:01:12:82:8c:28:fe:f6:88:1e:bd:f3:34:17:0f:
40:68:25:91:e5:35:63:3e:6d:6b:d9:e0:70:5c:48:09:2f:f4:
e5:37:49:98:fb:2b:de:30:69:c1:a7:d8:e3:6e:c4:c0:78:eb:
32:c4:d0:e1:0c:cf:0b:6b:44:da:b9:12:ec:ee:64:7f:b6:5a:
80:85:34:e7:33:87:b4:6e:5d:9e:fa:3a:66:7b:7b:d0:80:37:
bc:08:a9:03:fe:04:ae:55:e6:2b:71:cc:3a:2f:af:a9:7e:0e:
b5:91:13:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:26 2026 by rpki-client