Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
File: YdOLN5gKDfrpz5osW1at6X-vUC4.mft (raw, json)
Hash identifier: Sf/YJIhocltH1TNQSwpF+Gvb02m0GkSEqpBKTmUS94k=
Subject key identifier: 5B:3B:94:47:CE:93:80:18:6F:F0:BA:BF:E4:3C:38:01:D0:C9:07:4C
Authority key identifier: 61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
Certificate issuer: /CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Certificate serial: 019D9AAC1115D723C9B3A49D62004131C509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
Manifest number: 0D4D
Signing time: Fri 17 Apr 2026 09:01:00 +0000
Manifest this update: Fri 17 Apr 2026 09:01:00 +0000
Manifest next update: Sat 18 Apr 2026 09:01:00 +0000
Files and hashes: 1: YdOLN5gKDfrpz5osW1at6X-vUC4.crl (hash: AIN9QKUR/eZIkTFxzK52TlPFeriB6aZZspHJdwP3mMY=)
2: kGLxA9onzrf8JLssDr-KbBw0Iso.roa (hash: iCYCJqbAYcmF46KnTkB1atw07n5B8BjwCirxzmxkzlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:11:15:d7:23:c9:b3:a4:9d:62:00:41:31:c5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d38b37980a0dfae9cf9a2c5b56ade97faf502e
Validity
Not Before: Apr 17 09:01:00 2026 GMT
Not After : Apr 18 09:01:00 2026 GMT
Subject: CN=5b3b9447ce9380186ff0babfe43c3801d0c9074c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:4e:f9:81:41:3b:ef:08:bc:c9:9d:cc:3f:
cf:fa:3b:e7:23:ec:26:79:96:99:0d:8c:20:7e:ea:
53:d4:fa:62:89:35:2a:34:04:75:d1:3c:29:58:53:
6c:cd:2f:92:da:63:b2:3d:76:c6:67:6a:ae:c7:52:
37:7f:ff:52:2b:95:83:44:99:c1:38:d5:a4:cd:89:
22:28:5c:68:a1:fa:b4:1b:60:a7:22:ea:34:b2:62:
50:05:57:42:c4:01:3d:f5:81:cc:9c:c6:e1:ff:0e:
61:89:4f:b1:f3:48:94:df:90:58:9b:cb:cf:25:62:
d5:8c:4d:1e:34:7d:b4:c0:a9:32:de:15:1c:bd:92:
d3:c8:27:d8:d5:19:bb:52:51:1d:cc:68:79:23:65:
aa:d3:21:10:a0:d1:25:cf:2f:2b:38:31:a0:9b:52:
91:3c:f7:8a:a3:29:c6:56:8c:cc:bf:2e:aa:a7:ec:
e0:c8:91:a3:65:53:e4:4d:23:01:a9:87:f8:8e:12:
de:78:3f:9b:59:41:9e:ec:a4:6e:37:05:2e:f3:35:
fc:9d:ee:4f:73:9e:e7:5e:ff:bf:ba:ed:77:de:8a:
39:9e:75:be:9e:e8:4a:a8:58:ab:bd:05:03:3d:56:
1b:af:26:a0:15:07:1e:43:2b:31:92:fa:c1:2f:f6:
19:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3B:94:47:CE:93:80:18:6F:F0:BA:BF:E4:3C:38:01:D0:C9:07:4C
X509v3 Authority Key Identifier:
keyid:61:D3:8B:37:98:0A:0D:FA:E9:CF:9A:2C:5B:56:AD:E9:7F:AF:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdOLN5gKDfrpz5osW1at6X-vUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/69746c-501a-43e8-b887-7d448b396776/1/YdOLN5gKDfrpz5osW1at6X-vUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:63:5a:4e:a7:ed:56:95:80:4f:4f:2c:90:37:ab:0e:6a:9c:
a2:da:20:11:1a:18:25:ac:7b:a9:07:7b:0a:54:32:fd:1d:60:
19:b3:49:75:1c:4c:31:de:42:31:cc:21:c3:03:50:28:c1:eb:
0a:f6:c3:13:ce:50:73:d3:78:79:de:14:49:74:6a:8d:8f:8f:
97:19:36:bf:5d:db:90:66:85:c8:66:d5:05:4e:78:5f:23:28:
0d:2a:de:94:ef:7d:1f:b1:d4:86:2a:6f:d3:29:0e:5d:cf:b1:
35:a6:18:99:ea:81:58:67:b5:4d:09:6e:84:f6:b4:50:07:23:
fb:6e:71:81:06:a0:9c:6e:1c:c9:1c:cd:e7:32:a9:cf:0c:d0:
c4:12:17:10:75:92:44:be:41:64:8e:20:f1:79:e0:d4:0b:55:
3f:dc:9f:12:1e:05:a4:3d:62:17:3a:4d:84:14:b3:9c:8e:99:
b5:b8:ea:c0:24:a3:e8:97:ad:7b:f2:22:52:56:27:1f:04:49:
b4:6a:9b:96:96:d2:44:ed:16:66:3d:0e:9a:a4:1b:35:63:ff:
a2:ac:09:5d:92:44:a8:3d:a1:54:d8:e9:d1:80:cb:c7:93:de:
24:4f:85:d0:b5:db:df:0b:65:29:f8:d9:41:00:16:18:b6:59:
cd:eb:29:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:06 2026 by rpki-client