Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: 3M+32VOOaDe3ioKzTKVlIuFga7D+AgEykegZthkMp1w=
Subject key identifier: DC:B9:1E:DD:41:6A:70:BF:F9:14:BC:43:3F:DC:A2:81:FA:42:E5:ED
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 019D9C9A3C7E4CE726251C55E3C6AF237FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0D4E
Signing time: Fri 17 Apr 2026 18:00:46 +0000
Manifest this update: Fri 17 Apr 2026 18:00:46 +0000
Manifest next update: Sat 18 Apr 2026 18:00:46 +0000
Files and hashes: 1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: 37hrfQMRUBHUVu4s2qWgDffyo9qr9H/MgTLluE9p5Zc=)
2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:3c:7e:4c:e7:26:25:1c:55:e3:c6:af:23:7f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Apr 17 18:00:46 2026 GMT
Not After : Apr 18 18:00:46 2026 GMT
Subject: CN=dcb91edd416a70bff914bc433fdca281fa42e5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:29:05:f8:06:39:d8:1c:ec:9b:d5:5c:72:b1:
09:9e:3d:3f:4a:2a:f2:81:4e:b9:8f:89:22:9f:c8:
62:99:0a:5e:3c:8f:ab:bb:03:bb:a8:88:01:51:ed:
e0:9f:66:44:16:0a:95:77:5b:b0:cb:5d:bf:f2:8f:
e7:14:da:6a:4a:42:9a:62:0f:7f:75:dc:65:63:16:
a2:28:4f:6a:1c:07:22:99:cd:3d:27:2e:f5:45:32:
88:f7:ef:67:72:d0:4e:d4:5c:f0:03:86:be:0e:06:
b7:ad:d5:ba:22:9d:92:f8:c0:35:b2:04:5e:7a:b9:
32:73:34:c4:f2:45:1c:6f:8e:3d:49:74:da:4f:48:
49:c7:ff:e9:4f:21:59:a2:cf:c8:66:b2:0f:f9:3a:
37:28:9f:c9:34:0b:6c:64:8c:4f:d6:54:1c:31:47:
34:18:ce:4a:2f:22:6b:95:e7:ba:69:e4:b3:2d:a7:
56:c8:12:3a:be:92:7e:f4:05:4d:cf:66:ca:ae:ba:
53:f8:59:68:67:b7:4c:73:7b:67:7c:30:f1:43:69:
76:df:d5:a1:f2:8f:b5:c5:6e:7d:f8:57:2f:7d:31:
e0:ee:4d:c6:18:88:55:94:d1:59:3b:2f:2a:1f:26:
31:4b:8d:f9:19:e5:98:50:ac:6a:b9:e0:c7:13:91:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B9:1E:DD:41:6A:70:BF:F9:14:BC:43:3F:DC:A2:81:FA:42:E5:ED
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c6:35:d4:78:4b:7f:51:25:f4:f4:7a:af:59:6d:c0:14:0d:
ad:e6:f9:52:59:72:b1:2b:69:2b:d4:87:e8:a5:f7:8e:d4:3c:
b9:c6:16:d6:ff:55:74:f7:b8:27:43:c9:a7:d3:51:8b:7b:a1:
ab:4c:69:62:09:13:90:26:f4:d8:c6:e1:d0:48:ed:cd:f3:fd:
50:c8:bb:3b:c1:d4:b1:6f:a6:1e:da:0d:79:97:c5:ab:39:15:
4b:14:57:65:33:82:72:d9:ae:2c:b8:72:47:5d:6c:c1:58:ad:
89:96:8b:d6:a1:4c:c1:80:da:69:05:c5:67:85:f8:4a:44:58:
39:15:f7:f9:1a:24:4a:9b:65:e2:39:3d:38:5a:11:e2:3f:80:
d4:78:27:5e:16:fb:27:1f:94:d3:87:ae:2a:75:ef:fc:bc:cd:
e7:5d:c5:10:81:7e:07:c2:0d:38:c3:52:e1:54:8d:de:3e:34:
7f:5b:e8:57:9e:6e:bb:b6:7a:39:1a:b4:b5:63:2f:d9:35:13:
ff:cc:c6:27:c5:98:04:49:89:48:aa:d2:43:37:4c:c7:fb:6c:
45:41:3f:d5:4a:6e:fc:aa:00:3a:be:10:c3:6d:8d:e2:8e:78:
91:fa:ad:50:1d:6b:31:a5:20:98:80:b8:e7:b1:10:2d:2a:c3:
1a:14:a8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:58 2026 by rpki-client