Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
File: Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft (raw, json)
Hash identifier: IPNyOi5C9oj870UJR8SkpOpc/fwTXvifGNoB/KjpOV0=
Subject key identifier: C9:2A:8D:32:F4:CF:03:39:35:B6:1E:41:99:C2:84:65:5C:36:30:E0
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 019D9A3DFD0A898F8A7281402D773BC34449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
Manifest number: 12DD
Signing time: Fri 17 Apr 2026 07:00:46 +0000
Manifest this update: Fri 17 Apr 2026 07:00:46 +0000
Manifest next update: Sat 18 Apr 2026 07:00:46 +0000
Files and hashes: 1: YS4KfdF48rW5SEIpeCeYxOP-Du0.roa (hash: FKGkIDKaHogWgazEiZbFbdSEfBT5S7dX/PkphiCX2e8=)
2: Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl (hash: ra5asYhlup5Ij4RFYn2CgpqiNrSZpotAfdmS68YxT58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:fd:0a:89:8f:8a:72:81:40:2d:77:3b:c3:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Apr 17 07:00:46 2026 GMT
Not After : Apr 18 07:00:46 2026 GMT
Subject: CN=c92a8d32f4cf033935b61e4199c284655c3630e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:d6:b2:30:08:35:11:aa:5a:97:ad:45:f3:
78:04:34:c2:e1:89:4f:ed:e2:e3:0f:f4:5f:18:b1:
a0:5b:a8:42:38:ea:f1:b1:6d:cb:0e:ae:e8:98:a5:
d7:da:41:65:f8:31:82:1b:9b:38:fd:5c:fb:b4:f4:
48:08:ef:07:c9:00:e9:71:f9:20:df:10:95:84:d1:
26:1e:68:ab:80:08:81:29:d4:27:15:a8:ee:70:b1:
fc:5a:9c:d8:1c:49:cd:35:19:8a:b0:58:6f:aa:4c:
af:83:cc:79:2b:07:f2:e7:6b:d5:a7:17:0a:7f:6d:
97:2d:c6:86:ef:ef:8a:d9:ec:61:df:0a:14:aa:e6:
46:06:6b:a3:39:8a:be:36:1b:63:0a:0d:ed:6a:6d:
6c:12:06:ac:c0:ca:53:90:ef:0e:77:be:09:ad:9d:
f7:94:7f:a2:54:25:53:52:89:af:84:39:53:4e:71:
26:4d:91:37:ee:6a:5f:a9:fe:85:5e:37:69:0c:1b:
dc:d2:4f:18:4d:29:6e:e7:47:a7:c0:b9:74:ec:fa:
17:c3:ca:91:37:d3:fe:56:08:54:f2:2c:3e:48:87:
49:87:81:2e:68:23:1d:bb:d5:64:58:68:5d:93:5b:
ff:77:31:e3:4b:a7:eb:c3:82:3c:90:2b:c8:28:37:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2A:8D:32:F4:CF:03:39:35:B6:1E:41:99:C2:84:65:5C:36:30:E0
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:93:08:25:9d:6e:42:7f:69:18:99:76:96:a0:54:8d:aa:57:
7b:5c:93:5e:0a:2e:5c:f3:0b:73:67:38:e7:dc:6a:aa:9c:c1:
de:c1:61:17:3d:9b:41:ba:5c:3f:9d:56:16:c2:cf:cf:8a:83:
ba:b1:c5:ff:eb:a2:e2:3c:2f:14:a5:f1:13:8e:3b:bc:97:be:
4d:3c:a4:68:9b:b5:e2:0d:b1:90:41:7a:e8:ef:18:04:66:1b:
5e:c8:66:59:df:f1:36:d7:69:d4:0b:83:62:e5:0a:19:4b:2c:
2a:db:bb:51:c5:66:47:62:8e:5f:b9:80:f7:3b:3a:d9:45:1c:
72:fe:69:35:81:32:cb:5d:60:4f:f7:4f:7d:67:64:cf:d2:f8:
a9:51:46:ce:55:af:84:14:90:e4:04:91:53:ac:de:77:42:24:
83:84:eb:b7:9d:0e:7a:d0:70:6a:91:fe:68:e0:1e:7d:7d:d2:
83:23:bb:8a:7b:42:08:9c:d8:f6:62:dc:11:76:cf:aa:67:f0:
40:e9:44:60:b3:bd:40:63:c2:fd:15:cf:2d:ce:4b:7b:d4:bd:
80:82:50:f7:bb:95:0a:09:f1:56:97:52:ba:e1:91:f5:86:cd:
f5:3f:bd:5a:12:28:03:70:c7:3e:8f:93:7d:97:a3:ae:d9:ab:
f8:25:b9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:58 2026 by rpki-client