Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
File: ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft (raw, json)
Hash identifier: cCIuehWUwFZoJI/0uma+XjAAKhBHQZ1QyW3ipHUKR4I=
Subject key identifier: D0:50:A0:4C:B0:8F:D6:16:F3:48:85:89:90:CF:10:D7:29:C1:0E:75
Authority key identifier: CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
Certificate issuer: /CN=ca09149f34784f5b202c56761b01d35dd02569cd
Certificate serial: 019D98500848B3FC61AA81BF3743C6413BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
Manifest number: 0664
Signing time: Thu 16 Apr 2026 22:01:14 +0000
Manifest this update: Thu 16 Apr 2026 22:01:14 +0000
Manifest next update: Fri 17 Apr 2026 22:01:14 +0000
Files and hashes: 1: saLkMBpBsWlxL5YAPxjxZxzwLm0.roa (hash: HWMfF/NkSXptcowH52WnAePE/1Sax5XIolYonHNfsPw=)
2: ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl (hash: eh7087q4ELl4/1Mb0sF5QCkyBXdbkrsnM4qDde0Su9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:08:48:b3:fc:61:aa:81:bf:37:43:c6:41:3b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca09149f34784f5b202c56761b01d35dd02569cd
Validity
Not Before: Apr 16 22:01:14 2026 GMT
Not After : Apr 17 22:01:14 2026 GMT
Subject: CN=d050a04cb08fd616f348858990cf10d729c10e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:e8:3a:14:da:7e:08:42:0d:6a:9c:b8:59:
1c:1c:2d:f1:98:61:10:89:f3:ee:d1:4f:08:9b:f6:
c2:04:39:fb:9c:2c:46:ce:72:a1:00:e3:9b:a9:dc:
ef:de:73:c7:50:d2:9b:f3:10:55:88:19:8c:70:3e:
05:70:3f:ad:c9:cf:13:e3:01:3c:b2:3b:1d:ed:04:
54:97:ba:38:9c:32:ff:3d:06:7a:22:22:7c:a0:3b:
7a:fb:76:bc:5f:1f:b4:e4:d7:18:8d:37:c7:a2:6d:
dd:93:4e:82:ce:9f:1e:31:10:c0:49:f8:80:f4:c0:
f0:a2:36:98:be:02:7f:b6:c9:c9:cf:da:d6:92:b0:
6c:80:6f:6d:fb:b9:3d:4f:58:8b:88:c1:a1:c5:0e:
e0:44:c8:24:a8:73:b5:cc:2e:95:05:90:4b:43:64:
67:29:c9:c8:95:67:38:66:fd:29:f5:53:6a:e6:d0:
d9:02:10:5c:39:2b:f2:b7:f4:19:e1:e6:de:c3:2c:
5d:fd:84:f4:0b:e2:ba:a7:b9:bb:ac:67:46:bf:f0:
56:e6:47:3e:a5:92:34:71:01:f9:6f:96:22:a5:fc:
89:4e:e1:e9:14:48:e3:ce:48:3a:cb:33:8f:54:82:
3e:2d:e4:56:e5:a1:1a:97:6e:8d:ca:e0:de:2c:48:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:50:A0:4C:B0:8F:D6:16:F3:48:85:89:90:CF:10:D7:29:C1:0E:75
X509v3 Authority Key Identifier:
keyid:CA:09:14:9F:34:78:4F:5B:20:2C:56:76:1B:01:D3:5D:D0:25:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygkUnzR4T1sgLFZ2GwHTXdAlac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b0dcda-a37e-4703-8d5a-9aad903a7276/1/ygkUnzR4T1sgLFZ2GwHTXdAlac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:12:68:71:0f:24:8d:77:7a:f3:6f:4b:38:65:13:93:72:95:
1e:25:75:43:70:24:8e:1d:a3:fb:a7:3b:62:be:8f:0f:16:86:
bc:a0:00:dd:d9:50:39:ff:f4:c9:cf:63:42:a2:47:63:8e:d1:
1c:60:24:54:f1:bd:b8:d4:b3:3b:dc:32:3d:d2:a9:0b:cf:a1:
37:6b:43:83:6a:bb:4a:54:aa:1c:7f:f5:9a:fc:f5:e4:09:43:
5d:09:5b:39:3a:ca:86:06:3e:83:91:a6:9d:3c:d7:87:44:f4:
44:36:09:15:04:ae:46:49:f0:dd:a5:9e:33:0a:0f:bf:b2:e9:
6f:1d:5a:c5:1e:e9:58:8c:78:0a:18:32:06:3f:af:90:dc:92:
a9:08:e5:2a:17:e4:d5:34:de:a1:3b:9d:e9:8a:0f:e5:94:f2:
62:72:e7:86:f8:29:87:fb:61:9b:26:96:67:a6:bd:62:87:35:
d0:e9:82:2f:d7:d8:da:6a:dc:47:62:4e:5d:56:71:d5:7d:14:
28:17:9c:33:7c:bc:f3:13:e0:51:b4:ba:d5:4b:11:14:90:21:
e1:33:53:72:5b:67:f9:66:13:40:ac:6a:4c:cc:2b:bd:b7:4c:
c5:a4:bb:41:2f:01:b9:58:d5:59:ea:35:48:39:68:a5:10:8c:
54:e9:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:18 2026 by rpki-client