Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
File: YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft (raw, json)
Hash identifier: 0RGNN0jfsRVqyypQuiZGHh6HcdPLKvg5Ol2t3U7PiMk=
Subject key identifier: 1C:DB:57:07:AB:F3:A9:10:F3:44:F6:64:89:D9:1A:0A:24:C8:5C:F9
Authority key identifier: 63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
Certificate issuer: /CN=63082d6d3a1dc501795737537ca74d27a80265a2
Certificate serial: 019D996230CAB09DCDF30A6F5250C4A211B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
Manifest number: 0928
Signing time: Fri 17 Apr 2026 03:00:42 +0000
Manifest this update: Fri 17 Apr 2026 03:00:42 +0000
Manifest next update: Sat 18 Apr 2026 03:00:42 +0000
Files and hashes: 1: 1-oc31O5yGfJm_mzZWVg8lkL2Wxc.roa (hash: Zj2r9ATg5ynR2EMFecfZew5Um/8F+DW2YUnerFrqrJY=)
2: YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl (hash: FpFJXrApazxDX1Ltpvfm4/CwOBSu8v3SFmC3TYO+F2g=)
3: _3UUxWfdIKjZ94RP_R__5_MA69o.roa (hash: xEub+d4iGHet4J1D7KwTY4kCPRXkdFvIc+V+yAPzmjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:30:ca:b0:9d:cd:f3:0a:6f:52:50:c4:a2:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63082d6d3a1dc501795737537ca74d27a80265a2
Validity
Not Before: Apr 17 03:00:42 2026 GMT
Not After : Apr 18 03:00:42 2026 GMT
Subject: CN=1cdb5707abf3a910f344f66489d91a0a24c85cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:ed:b0:4f:4a:64:c9:46:e6:e4:b4:e0:f8:
67:79:fe:61:e5:c3:b5:84:c7:7e:d7:37:69:dc:c7:
ac:6c:d0:77:0f:05:08:e6:7a:10:6f:88:ee:cf:e6:
91:41:9b:c2:98:b2:6c:e3:52:4b:22:67:c8:5e:bd:
39:80:df:be:20:0e:19:26:32:20:72:eb:d6:54:59:
65:93:06:53:17:75:d5:e3:35:5e:3f:f2:24:c3:f6:
99:b1:4b:03:6f:fd:eb:2f:ff:e7:7f:0b:0b:a8:79:
54:15:df:56:85:f0:02:38:da:26:d3:07:14:28:05:
af:b7:37:3b:cd:d3:6d:d0:13:7c:50:26:05:40:e5:
4d:76:ed:cf:e5:55:a5:74:a8:6f:5d:7a:9e:61:15:
a9:f4:76:e4:ab:ad:9b:31:7d:e8:1c:4d:5d:d2:cb:
55:93:7d:01:d3:30:f0:63:7d:fd:5f:c4:ab:48:b1:
2d:4d:64:b6:54:e1:88:5d:8a:52:e8:59:22:64:7c:
3f:63:6a:a5:a8:c9:db:c0:e2:de:d1:fc:3d:08:57:
1d:ad:d7:23:d9:b5:6f:72:a0:8e:c9:c2:7c:e2:ed:
d9:3c:1e:78:18:c0:ec:85:cd:52:6f:30:90:31:25:
cc:ee:b9:6c:d5:e4:9f:10:9c:63:30:3d:30:56:d8:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DB:57:07:AB:F3:A9:10:F3:44:F6:64:89:D9:1A:0A:24:C8:5C:F9
X509v3 Authority Key Identifier:
keyid:63:08:2D:6D:3A:1D:C5:01:79:57:37:53:7C:A7:4D:27:A8:02:65:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwgtbTodxQF5VzdTfKdNJ6gCZaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97e1e2-567f-414e-9b03-c18ad36a7b30/1/YwgtbTodxQF5VzdTfKdNJ6gCZaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:da:74:4e:b4:fd:f5:96:39:3a:ae:0c:12:1b:d3:b3:ca:a8:
c2:82:72:39:ca:82:84:33:e4:0d:dd:08:b8:29:8b:da:b1:3b:
7d:1f:65:a1:89:38:fb:f1:13:13:a3:1e:38:05:b3:96:6c:77:
89:5a:8e:d1:87:2b:26:2c:f3:29:93:7f:30:49:81:b8:8f:37:
44:d2:f2:45:8c:90:c5:c4:35:20:e4:65:cb:b8:5f:cf:27:5b:
c0:4f:48:46:7b:99:0e:a6:6d:50:b9:e4:f4:f7:d3:74:7d:d3:
e9:2b:dd:d8:05:bc:02:ac:a0:5f:99:92:10:c8:d1:95:32:ea:
32:d3:3f:3c:20:a1:65:3b:de:fd:d1:76:1f:3b:62:92:b5:e6:
48:13:22:d8:82:e5:ff:7e:87:c9:46:ad:9c:aa:b9:c5:5d:a0:
72:2f:8c:df:3b:ec:76:59:53:21:93:1d:0c:6c:ae:34:e8:d3:
0a:41:78:63:34:0f:59:f0:3d:d9:d4:ec:64:b5:f1:f1:b4:d0:
28:3f:38:45:1b:cd:7f:08:0a:97:cd:53:86:96:29:b3:49:8e:
a4:cf:53:3d:eb:19:41:19:dc:a3:a3:aa:29:a4:49:af:b6:54:
d3:47:76:fb:db:3c:7a:ec:e9:46:de:01:74:dd:77:40:61:34:
4b:28:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:56 2026 by rpki-client