Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
File: yZdBPtdKNxYei7P2FWJUHdKJBb4.mft (raw, json)
Hash identifier: LZtlD1mPnb/vkn+cSZt2mSrNQ69JuMiDj7jpVYq3w4A=
Subject key identifier: AB:35:C1:3C:D4:CB:16:AE:DB:D4:DC:70:3D:D7:AE:7F:E4:CF:FD:71
Authority key identifier: C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
Certificate issuer: /CN=c997413ed74a37161e8bb3f61562541dd28905be
Certificate serial: 019D97E1ED7F7AF9B67F4DEA04DB137837F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
Manifest number: 0C54
Signing time: Thu 16 Apr 2026 20:00:59 +0000
Manifest this update: Thu 16 Apr 2026 20:00:59 +0000
Manifest next update: Fri 17 Apr 2026 20:00:59 +0000
Files and hashes: 1: 1JivGUDnbvvAALdPLWmN3LnRPUU.roa (hash: CFdTUCMz6IqAjDVASJIEHVZNQPU5MvWCKn0J2DxXzcY=)
2: mDQRP_41vCpTv8zEQtwrpsMlm6o.roa (hash: wP6wE0fEKqnHP4YtC1NM+FHDVJbGLAERsWmmC8DpUK8=)
3: yZdBPtdKNxYei7P2FWJUHdKJBb4.crl (hash: QAlfw/j9EyizWXuAK4Qn8uuxjepXheukMBk5l8q0pe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ed:7f:7a:f9:b6:7f:4d:ea:04:db:13:78:37:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c997413ed74a37161e8bb3f61562541dd28905be
Validity
Not Before: Apr 16 20:00:59 2026 GMT
Not After : Apr 17 20:00:59 2026 GMT
Subject: CN=ab35c13cd4cb16aedbd4dc703dd7ae7fe4cffd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:8e:da:8f:8b:84:2a:34:2c:82:c7:13:f6:
e6:6c:f7:c3:4c:be:ba:d9:21:a9:ae:8b:2a:58:4d:
ed:a7:65:41:2a:bf:09:24:dc:d3:13:5f:13:16:97:
5c:83:31:06:b9:ac:4b:85:9c:30:15:fb:fa:b6:df:
64:4f:ed:4c:b7:c4:88:29:19:b1:01:db:24:e5:58:
e1:9d:7a:02:9c:82:fa:da:17:95:dc:f7:83:c2:27:
43:7a:d7:f6:b4:c9:67:16:cd:0a:8c:02:8c:4d:12:
d2:d4:25:8d:ae:13:98:a5:96:26:49:a2:56:ed:04:
19:a0:11:e8:bb:9b:70:4a:62:ca:59:e0:ad:0c:a8:
c5:b9:51:58:cd:9d:2a:ee:38:e2:5a:ec:2f:c0:9e:
1f:93:05:80:b7:ee:a6:d0:5b:86:75:75:1e:46:f6:
3e:e1:5b:28:e2:fb:97:a2:ad:bb:32:b9:50:c7:27:
c0:5e:2a:e1:0f:1e:cb:08:59:06:2b:9d:88:2a:e9:
83:4b:6e:1a:49:15:09:42:7a:91:50:8f:0f:e5:95:
95:ae:2d:a0:24:1f:ff:ef:57:3c:e5:06:88:4e:da:
64:8d:e7:9e:60:70:34:30:24:93:ad:bc:41:dd:28:
8e:a9:ed:7d:34:1e:ee:93:f3:ab:ca:b9:1e:dd:c5:
34:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:C1:3C:D4:CB:16:AE:DB:D4:DC:70:3D:D7:AE:7F:E4:CF:FD:71
X509v3 Authority Key Identifier:
keyid:C9:97:41:3E:D7:4A:37:16:1E:8B:B3:F6:15:62:54:1D:D2:89:05:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yZdBPtdKNxYei7P2FWJUHdKJBb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/04163e-da0a-4206-9378-e49d461c3154/1/yZdBPtdKNxYei7P2FWJUHdKJBb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b4:42:f2:ad:56:60:30:db:53:4f:e5:44:5e:75:57:10:0f:
40:09:05:17:6d:34:c8:7c:99:48:3c:65:a7:6a:44:51:5f:d3:
be:fc:98:4d:a6:07:f4:59:a3:d7:56:ac:b8:04:12:d6:1d:4f:
1e:a7:ab:63:f3:a1:bd:2c:d5:5e:05:21:33:27:6a:dd:6f:d5:
40:f3:b5:f7:f2:26:fb:e2:da:c8:9b:ca:d4:fb:e6:a2:ce:ce:
d0:cf:fa:d4:63:4c:9f:ad:ac:e7:8e:57:05:63:86:23:b1:3f:
35:73:7f:a0:17:c2:61:dd:9f:74:61:b5:7c:b3:c1:53:4f:c5:
25:2f:fe:d4:c8:bf:24:a1:d2:f1:c9:bb:7a:d2:a0:6c:eb:cf:
3a:5d:8b:4b:6a:d1:45:e6:2a:f9:36:80:7a:44:58:a5:af:49:
ce:37:44:92:8e:31:a7:c3:cf:03:49:02:1b:70:a2:29:99:0c:
4c:1a:4e:e6:89:38:1d:07:b1:5b:2b:55:08:e6:af:c7:ec:b7:
64:6c:96:cb:b2:cd:71:8a:b3:31:0e:18:98:40:c4:c4:93:4e:
1e:51:bb:ec:f5:ff:26:fe:e9:75:44:cf:18:0f:c3:43:fb:6f:
e1:ea:a5:7c:6b:bb:d8:37:30:37:77:14:b5:67:1b:1e:0c:eb:
0a:33:46:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:46:30 2026 by rpki-client