Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.mft (raw, json)
Hash identifier: Zw4F7MB621EsqeqKdCCfX2f97828JM8vK9glydq1ulo=
Subject key identifier: CE:FD:F0:DC:E0:E7:16:09:18:96:1A:A9:41:C1:FD:6B:26:DE:36:63
Authority key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Certificate issuer: /CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Certificate serial: 019D9AE2DE9C03C6180B8EAAD2E7E3A65E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
Manifest number: 05A3
Signing time: Fri 17 Apr 2026 10:00:52 +0000
Manifest this update: Fri 17 Apr 2026 10:00:52 +0000
Manifest next update: Sat 18 Apr 2026 10:00:52 +0000
Files and hashes: 1: PvCgDhF7NMwisHTGu6gMJAQYao8.roa (hash: iU0qJG0gVhiOE7d2EF+iy3h3MwEr90mkXIIvaKDVia4=)
2: YCGk2qfc9KTLCKxHRzdfaYquhkM.crl (hash: OEGa432ySx4E+ZRZWTe2pBGO87D5avYoH31QarNiJFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:de:9c:03:c6:18:0b:8e:aa:d2:e7:e3:a6:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Validity
Not Before: Apr 17 10:00:52 2026 GMT
Not After : Apr 18 10:00:52 2026 GMT
Subject: CN=cefdf0dce0e7160918961aa941c1fd6b26de3663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c8:ab:ac:32:e3:60:4d:d2:5a:34:fd:55:cc:
55:85:a5:7c:44:8a:14:54:f0:62:92:f2:23:fc:e1:
c6:5c:c6:64:a3:3a:3e:74:1b:43:7d:fc:ab:9c:b4:
0c:10:aa:ca:36:50:85:16:c8:90:b9:01:0f:7f:b6:
cb:8c:92:fb:3d:dc:96:91:09:e4:cd:a9:12:f6:2f:
40:cd:72:cb:6a:6c:3e:2f:44:7e:d1:26:fb:62:bc:
94:67:9d:36:10:98:4f:b9:e1:4c:bc:66:e4:56:e9:
f0:a5:50:10:27:7a:8d:02:20:bd:6b:83:f4:d5:ee:
c6:58:b1:82:57:65:bc:95:31:08:2e:be:2d:11:6d:
d9:3b:55:33:4e:37:92:bd:6b:5a:b5:41:25:d7:4c:
75:b1:cd:b2:5a:db:04:80:70:3f:21:31:97:fa:5b:
d0:88:63:24:2b:df:18:30:c5:11:33:0f:18:03:b8:
ae:55:6d:4d:64:03:a7:0e:f5:bb:8b:00:bc:e7:b2:
e0:fa:74:a7:70:6d:78:e5:6d:80:90:47:26:96:2f:
51:ce:b9:7b:06:57:30:af:66:e3:53:2e:e3:fd:c1:
69:69:ef:f1:ca:45:e2:6b:cb:76:03:c5:a8:f1:8b:
ad:c8:1c:bb:13:ae:02:d1:8b:58:8c:03:db:c3:85:
90:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:F0:DC:E0:E7:16:09:18:96:1A:A9:41:C1:FD:6B:26:DE:36:63
X509v3 Authority Key Identifier:
keyid:60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e5:f3:8c:c8:5f:23:2b:64:8d:ce:08:c7:07:45:92:fb:c0:
d2:3c:22:66:0a:16:00:2f:44:26:be:86:d6:9b:1c:3b:08:c7:
bc:f9:4e:3c:c5:7c:0a:ae:47:95:3e:15:91:6f:dd:9d:e1:f0:
32:e6:3d:00:b0:e7:0e:f4:0d:5c:ee:b7:cf:cf:3c:4f:db:0a:
a1:ee:ff:1c:11:ba:4f:c9:a6:d0:df:2b:00:a1:07:c4:e3:8b:
ad:03:a0:9d:da:a5:be:8e:c9:52:41:20:fe:0c:75:26:26:22:
93:f0:f3:f5:a4:58:7d:ee:44:a7:07:5c:87:6c:5a:40:d4:2a:
55:5a:57:e8:db:46:76:c8:0e:0d:ef:2b:7c:ba:eb:c6:0a:23:
0f:5b:07:b2:33:56:c7:d3:2d:df:83:4c:bc:03:5c:5c:9f:33:
e0:8f:6d:53:33:26:f2:af:db:95:88:aa:9a:24:7c:5a:30:d1:
82:5d:6d:47:4d:d4:5f:1e:0f:1e:d5:ed:c5:74:ba:8f:60:29:
0a:ee:56:d4:a7:dd:42:6b:22:36:0e:72:7a:d1:e1:c8:35:19:
af:d2:eb:fc:96:78:11:93:5d:65:aa:b4:37:fe:1b:29:25:44:
fa:48:54:0f:cd:0f:34:8b:08:20:38:45:03:71:f1:41:41:ba:
44:7d:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:06 2026 by rpki-client