Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
File: YvYD86VaKeZhfwlrOmm_8KOSqSg.mft (raw, json)
Hash identifier: fik13JP5GAL1GKl5RCmry2W9nUfhPdaPhpMTTP9uhJc=
Subject key identifier: C0:C4:CD:22:04:9F:1E:ED:4A:29:26:FF:74:CB:21:17:62:C7:8A:65
Authority key identifier: 62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
Certificate issuer: /CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Certificate serial: 019DA37803CFAD01933A7DA503E0C131DD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:00:44 +0000
Manifest this update: Sun 19 Apr 2026 02:00:44 +0000
Manifest next update: Mon 20 Apr 2026 02:00:44 +0000
Files and hashes: 1: YvYD86VaKeZhfwlrOmm_8KOSqSg.crl (hash: KPVVjNuxCgaj4GOSL3bWItySitn00XbF0EBqfU+y+/w=)
2: dbEVVOSGmAB9BVhX1SxdhAa54XM.roa (hash: PzFQiBYckhIajBueW8NDRUzWLgElYVTtb1/iAMzZ3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:03:cf:ad:01:93:3a:7d:a5:03:e0:c1:31:dd:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f603f3a55a29e6617f096b3a69bff0a392a928
Validity
Not Before: Apr 19 02:00:44 2026 GMT
Not After : Apr 20 02:00:44 2026 GMT
Subject: CN=c0c4cd22049f1eed4a2926ff74cb211762c78a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:19:36:ff:ef:15:e2:1a:03:5b:7a:15:88:
f4:c2:82:21:ee:71:29:62:b7:ea:9f:d3:49:4c:51:
37:76:4a:93:70:1b:61:d0:2e:42:56:06:3d:04:2e:
ff:4a:20:ff:c4:31:f2:1a:68:fc:0c:9c:1c:18:4d:
d0:7d:57:ba:7a:a3:dc:59:bb:c0:d7:04:ee:bd:03:
98:d7:6c:1e:67:8d:da:7a:d7:23:a5:fb:2e:0c:c2:
a7:0a:3f:1a:64:d9:42:08:4f:e9:27:a2:7b:68:6a:
99:e2:92:40:2e:ac:e8:8d:bc:f0:e3:26:77:4f:d0:
aa:65:cb:67:d1:4d:0b:02:1d:90:65:54:76:82:72:
e2:77:20:47:a3:71:af:c3:ca:0e:df:5d:1a:02:46:
6f:7f:a7:4a:a0:8c:17:ee:29:07:87:cb:35:d9:f7:
0a:7a:fd:8d:0b:8a:bc:21:2e:ec:04:cf:9d:2c:2c:
22:66:ac:2c:e9:59:fd:f5:ec:01:d3:80:03:6a:70:
9d:20:db:91:aa:70:4a:cc:5e:7f:0e:bb:05:ad:cf:
fd:ac:b3:57:36:fa:23:ff:c0:d5:6d:72:7a:64:79:
6c:86:02:0f:f8:d5:48:00:32:aa:43:8e:05:68:09:
b9:47:a1:01:7f:f4:ef:14:1f:68:bf:b2:ec:bc:59:
d3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C4:CD:22:04:9F:1E:ED:4A:29:26:FF:74:CB:21:17:62:C7:8A:65
X509v3 Authority Key Identifier:
keyid:62:F6:03:F3:A5:5A:29:E6:61:7F:09:6B:3A:69:BF:F0:A3:92:A9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvYD86VaKeZhfwlrOmm_8KOSqSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/47065d-2d83-4641-8223-41f39a8c09dd/1/YvYD86VaKeZhfwlrOmm_8KOSqSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:18:5f:7c:19:1c:61:19:57:ff:c7:ba:9d:71:0b:07:42:3f:
98:72:6c:4a:bd:23:8b:4f:2b:8c:24:00:0d:0b:86:0a:91:d8:
09:af:5c:8d:d0:ef:2c:b1:18:e9:d7:20:67:71:be:b4:60:64:
9b:67:78:af:65:46:e6:f2:12:c5:fc:3f:ba:15:98:0e:ac:02:
eb:a9:8e:36:e1:a6:27:5a:88:90:12:ff:f1:3f:3c:1e:8a:b2:
2a:71:01:29:fe:a2:9f:de:a2:75:71:0e:57:87:ad:58:75:64:
8e:01:09:52:79:cf:40:8a:df:9a:07:37:9e:56:b5:cd:a3:3b:
e5:e9:b0:60:58:06:c7:de:96:c0:17:e2:b0:17:7f:29:9b:5f:
33:72:ab:02:0c:c0:1d:3f:10:20:e2:d0:b8:67:f8:d0:da:a2:
06:b4:44:2c:54:c8:6c:ae:39:a5:96:28:09:86:bc:3f:b8:60:
a0:7d:02:c0:5a:62:7c:bb:73:e9:b4:43:97:e8:5e:f5:47:d5:
4e:1b:b4:ad:3c:14:f9:c2:21:55:dd:cb:cc:aa:5b:6f:c9:14:
a5:8b:1b:74:64:dd:3f:80:29:a3:9b:2a:c7:4e:8d:9d:cf:dd:
fb:13:7f:78:45:6f:81:0a:57:4f:bb:7e:fb:54:a6:a1:a1:6c:
58:26:39:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:42 2026 by rpki-client