Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
File: YhGQEidXeAf0toyLjyX76pxyB2I.mft (raw, json)
Hash identifier: X12VxzuM420razb5hwALkGhZKzkmL+HPMtJDx/Vgh40=
Subject key identifier: 0C:2E:91:95:83:29:57:9A:DF:4E:6A:44:D6:74:E8:24:15:68:93:43
Authority key identifier: 62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
Certificate issuer: /CN=6211901227577807f4b68c8b8f25fbea9c720762
Certificate serial: 019D9AABB55916C53F2D15A59A2B5D872084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
Manifest number: 1386
Signing time: Fri 17 Apr 2026 09:00:37 +0000
Manifest this update: Fri 17 Apr 2026 09:00:37 +0000
Manifest next update: Sat 18 Apr 2026 09:00:37 +0000
Files and hashes: 1: OVXT6gUHNs92I_TpJokrvNCUI_k.roa (hash: GunbA4sCmSgthfWeCRgymGCKQHjNQ++TdcqNZ9NqpfA=)
2: YhGQEidXeAf0toyLjyX76pxyB2I.crl (hash: JKX3lqlIuJsVZKb105EzrxoRDgLuwEVGqKK1fFUZy3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b5:59:16:c5:3f:2d:15:a5:9a:2b:5d:87:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6211901227577807f4b68c8b8f25fbea9c720762
Validity
Not Before: Apr 17 09:00:37 2026 GMT
Not After : Apr 18 09:00:37 2026 GMT
Subject: CN=0c2e91958329579adf4e6a44d674e82415689343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:a9:aa:ad:36:2f:c8:b1:8b:8b:fb:91:92:
0b:fd:82:35:c9:ef:b4:88:a8:70:5e:4d:1b:be:51:
e3:d8:b0:0a:ed:29:db:c5:1e:03:87:e9:c7:1b:b7:
e5:14:9f:65:cd:4b:ec:e8:6a:57:9b:f7:06:a8:33:
a5:85:d3:f2:f9:13:ce:52:f3:cf:79:d7:45:a7:8e:
08:1d:75:75:d0:9d:22:ce:21:73:84:0e:15:af:66:
54:4a:23:98:5b:e7:6d:95:e2:fa:a3:b7:aa:33:4b:
83:61:8f:b7:e4:7d:e3:f8:25:3c:6d:6e:27:4b:d5:
37:21:b0:d1:a1:d2:e3:3a:0f:a2:36:b0:e4:27:0c:
1c:f9:59:9b:17:eb:83:f8:b8:7b:df:12:4a:7b:25:
f6:6e:9a:d0:12:ea:24:5a:67:67:32:5b:e9:1d:41:
04:0b:df:ef:03:cb:6f:2b:03:96:5e:f7:88:92:94:
ea:c4:92:ea:3f:11:83:25:80:d0:46:11:9f:cf:75:
6e:c3:57:1c:7b:4f:17:0f:90:ee:ae:b6:ce:0c:1e:
fd:ba:c9:54:85:e1:22:36:16:88:08:62:f1:6c:ec:
ce:c9:eb:7d:0b:2f:99:33:62:57:93:dc:68:8d:e4:
f1:83:7c:96:67:78:d6:64:0a:bc:6a:98:7c:4c:ed:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2E:91:95:83:29:57:9A:DF:4E:6A:44:D6:74:E8:24:15:68:93:43
X509v3 Authority Key Identifier:
keyid:62:11:90:12:27:57:78:07:F4:B6:8C:8B:8F:25:FB:EA:9C:72:07:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhGQEidXeAf0toyLjyX76pxyB2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b210f6-7ca1-47b1-9a5f-7cfdd84f734d/1/YhGQEidXeAf0toyLjyX76pxyB2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:09:d7:3a:06:2d:60:31:2d:1b:8d:93:c9:b5:af:c7:70:
92:40:da:51:b7:78:b3:23:96:8c:bb:cb:5c:7e:17:8e:d8:17:
3e:c0:45:0f:60:c5:a0:f8:1d:21:d4:d6:99:c4:c1:37:ea:80:
aa:fd:0a:26:5a:d8:dc:0b:cc:cf:47:15:15:c6:e1:e8:f7:09:
75:80:7b:84:72:88:42:50:e7:73:7f:bb:fe:05:1a:41:cf:1f:
64:f8:ee:c4:6e:cd:5c:6f:78:26:b2:45:a4:96:c2:38:51:f7:
17:b9:53:95:a7:5b:34:c9:d7:0a:75:b9:5d:28:0d:ec:a6:77:
dc:77:54:f0:67:cc:1d:fa:1c:f9:bc:75:88:36:b2:cc:db:e5:
db:22:6d:e5:db:a6:d8:3f:52:d2:81:7e:08:20:dc:a3:34:78:
53:34:98:ef:5e:3a:64:cc:71:1e:69:93:cf:f8:a8:65:de:b3:
4b:af:7d:72:58:3b:ee:50:dd:eb:9e:a9:bf:9f:24:8d:c3:b0:
1b:89:1f:c2:bc:dd:8e:5b:c9:80:ea:38:b8:50:e4:4d:63:4e:
e2:e9:1a:ea:fb:00:4b:db:67:87:66:5e:9d:f4:3a:f0:0f:de:
e0:f9:4d:f0:fc:a9:3e:44:6a:28:5b:38:b9:2a:d8:0c:a0:e9:
a5:8f:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:24 2026 by rpki-client