Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
File: YcK0WmXBm2irsFFsnMr0VHpcwxI.mft (raw, json)
Hash identifier: 7W8LYDl8JjcDjuoWMxdzGvsODR6yEkOS+Fv5xvt6+VU=
Subject key identifier: 81:2F:96:86:CE:EA:B4:14:BC:00:41:E3:0F:4D:C6:3C:2F:0A:95:A7
Authority key identifier: 61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
Certificate issuer: /CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Certificate serial: 019DA2D36EFEA1B6CCF97283490DC8370647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
Manifest number: 11ED
Signing time: Sat 18 Apr 2026 23:00:58 +0000
Manifest this update: Sat 18 Apr 2026 23:00:58 +0000
Manifest next update: Sun 19 Apr 2026 23:00:58 +0000
Files and hashes: 1: YcK0WmXBm2irsFFsnMr0VHpcwxI.crl (hash: BsJc7uMiah28Yz2yB1usJbUxFtYENwBm/Yo89LrVvBc=)
2: aL2Fa93Pq0uyo59pgUgspQyUPKc.roa (hash: Bga4XDZkfRChSZnLWZqmel++JYpGqGLT7JPEKTaVvO0=)
3: rxVxvq80s018HousURd0ic36W10.roa (hash: 4vWzh852MFR+K32Ov40708je2OYVViB9fVjK6c0oRMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:6e:fe:a1:b6:cc:f9:72:83:49:0d:c8:37:06:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61c2b45a65c19b68abb0516c9ccaf4547a5cc312
Validity
Not Before: Apr 18 23:00:58 2026 GMT
Not After : Apr 19 23:00:58 2026 GMT
Subject: CN=812f9686ceeab414bc0041e30f4dc63c2f0a95a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4f:82:3f:59:d0:0b:e3:5d:db:69:6f:5b:15:
4d:a1:f4:84:5c:c3:4b:2c:8f:7d:be:5e:bd:d9:5c:
ba:d1:83:71:21:d7:84:84:8e:c9:fc:76:b8:86:41:
28:8e:a0:84:f3:23:bd:c4:30:47:75:94:0a:01:dc:
9d:9b:4e:21:36:95:08:90:55:f9:2d:2b:90:a7:4b:
c9:cc:96:69:a5:d9:89:25:da:ab:97:02:98:69:e3:
e0:88:18:5f:83:93:46:4c:a2:f6:81:77:63:5d:28:
e8:6c:fe:6d:f8:a4:51:54:51:84:f4:20:3d:c8:b1:
94:34:59:7f:62:03:ea:c6:6b:8a:b3:78:51:5a:80:
2f:7d:e8:9f:68:26:ec:3b:7d:98:42:b6:01:52:9e:
cd:0b:cb:8b:36:58:17:c1:85:90:c8:ee:cf:92:8e:
70:9c:d5:f5:01:7b:c1:d5:e7:24:d1:cc:74:c2:01:
b4:f0:88:4d:01:13:24:ba:77:86:9f:58:7d:4e:00:
8a:31:4d:e1:f1:e4:5f:bc:0b:1a:6b:ec:2c:55:1e:
ed:af:eb:3d:e0:67:19:2b:50:80:35:cb:70:7b:de:
3b:d4:bb:b3:46:2f:c1:4b:9b:d2:48:fb:4b:02:06:
31:e9:ae:65:47:f8:8d:af:34:fd:04:7e:0a:9a:90:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2F:96:86:CE:EA:B4:14:BC:00:41:E3:0F:4D:C6:3C:2F:0A:95:A7
X509v3 Authority Key Identifier:
keyid:61:C2:B4:5A:65:C1:9B:68:AB:B0:51:6C:9C:CA:F4:54:7A:5C:C3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YcK0WmXBm2irsFFsnMr0VHpcwxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2862ab-37dd-47f2-8df2-22c27b993ae2/1/YcK0WmXBm2irsFFsnMr0VHpcwxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bf:5b:d3:a4:82:ba:32:93:bf:fa:c9:ef:53:55:48:7c:dc:
7c:2c:44:37:4e:ec:f6:51:f7:cc:9d:27:97:5d:5b:8c:1b:59:
ff:95:73:0a:ea:cd:58:16:d5:47:6f:08:3e:cf:74:eb:ba:12:
b0:73:c0:46:3c:1e:61:ea:4a:65:40:f1:48:7e:c1:d5:83:ce:
7e:d6:f6:28:ae:ec:f1:17:9e:dc:08:97:b4:2a:d0:c1:a6:45:
50:37:d8:15:d7:bd:54:f3:01:54:3e:5b:5f:d4:5b:cc:24:85:
7f:4b:a8:56:74:5d:15:a1:2c:f0:11:24:8a:24:23:e7:5b:a2:
b2:84:f6:91:ef:47:05:ac:45:90:14:34:02:d1:b3:ff:bc:40:
23:42:fe:24:67:82:50:bd:be:dd:8f:b2:22:33:c2:af:ba:21:
14:4e:bb:bf:10:92:7e:0c:f7:86:62:ce:11:91:53:42:1a:b8:
8b:b6:be:80:68:0c:30:5a:4a:ab:8f:ff:15:c2:bd:8d:a4:22:
bd:e1:53:1d:75:9a:38:80:8d:1b:2c:67:e2:6e:b6:9f:9b:16:
1a:2c:ba:10:2b:f2:f9:7a:ed:b1:41:c3:69:ad:ff:9d:e0:f1:
87:43:79:0f:b3:8f:51:ae:5e:f0:13:65:2e:68:39:38:f6:7d:
ed:18:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:12 2026 by rpki-client