Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
File: YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft (raw, json)
Hash identifier: hRccAGIaHtRlyTsQPFRWGiloNf3NPpsiA4ea02UXTQo=
Subject key identifier: 67:D6:F1:4E:4A:5E:C0:E3:F1:92:DF:F3:A0:5A:D7:CE:25:6A:EC:67
Authority key identifier: 60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
Certificate issuer: /CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Certificate serial: 019D99622BF1BACE45CC394792426B298A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
Manifest number: 1520
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: 3IMyxyNm6r93DqPE2aE52SXbIuI.roa (hash: QbQusr/PsSc9ZEq6dT5CeLnT4svv4+NWJleDs2gqqNo=)
2: YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl (hash: Eslb4gwr3Jv1w+oX6Uz8OSprti+cMjukSPn7QoNuzNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2b:f1:ba:ce:45:cc:39:47:92:42:6b:29:8a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607e5caff4f47b2b8dc81cc36c8e346662639898
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=67d6f14e4a5ec0e3f192dff3a05ad7ce256aec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:05:46:e5:75:97:63:ef:4a:9e:60:80:60:
8f:09:05:71:03:42:3e:ac:ce:2a:c2:17:db:9b:71:
15:a8:84:ae:4a:48:1b:e7:02:9b:f5:87:ab:74:1d:
ff:bc:c6:e2:92:ac:b9:16:1d:37:04:60:81:aa:df:
04:76:e7:a2:1e:4a:b4:a1:92:01:05:14:80:2a:a1:
8b:73:b2:e6:8d:e1:9b:03:cb:11:44:69:7c:97:8f:
5e:ab:55:7e:f0:ad:e5:6e:5d:8e:49:d4:aa:e8:a1:
24:a0:77:bd:95:20:92:00:9c:ac:7c:72:2b:c0:2f:
e9:d4:7e:43:8b:84:2d:1d:36:8a:6c:d2:1a:24:5d:
08:5e:6d:26:db:48:98:5e:b2:00:d3:16:06:49:59:
e9:7e:fb:ec:52:ea:b9:83:b6:54:7e:12:d3:56:5e:
a1:59:1a:2e:be:47:fe:2e:ed:f3:68:16:bd:0a:aa:
69:c5:35:75:37:8d:c5:7b:b4:d3:b0:12:44:e4:47:
03:57:fb:7b:61:40:46:ed:c0:b1:dc:b9:d5:3e:7a:
ad:4e:86:86:15:68:3f:98:13:d6:d5:0d:59:b5:19:
5d:c5:2e:29:6a:ae:9b:ad:8b:6f:98:c1:a9:9f:11:
4e:de:b8:88:37:75:68:c1:a1:db:11:4b:f3:b9:4a:
d7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D6:F1:4E:4A:5E:C0:E3:F1:92:DF:F3:A0:5A:D7:CE:25:6A:EC:67
X509v3 Authority Key Identifier:
keyid:60:7E:5C:AF:F4:F4:7B:2B:8D:C8:1C:C3:6C:8E:34:66:62:63:98:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH5cr_T0eyuNyBzDbI40ZmJjmJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7d66de-5f0c-4765-a0f6-67fbf2155e4e/1/YH5cr_T0eyuNyBzDbI40ZmJjmJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:39:c7:0a:3d:48:56:fe:24:52:83:05:49:1c:95:a7:de:fd:
29:b9:b6:c0:c4:ed:00:f9:b2:ef:52:da:86:cc:41:4c:20:b6:
20:8b:f6:1d:93:8f:3a:3a:81:95:58:68:d2:07:9b:bd:56:e9:
0b:c8:f1:0c:df:14:2c:a3:34:04:01:07:40:2d:1b:e4:a6:48:
1b:9e:2c:86:89:7c:ed:48:33:5c:da:0a:55:b0:46:21:7d:6c:
bb:7d:d8:55:a9:f3:fc:7c:ac:87:49:01:09:81:40:96:33:04:
91:f1:05:09:86:93:d3:ec:2b:59:70:9b:a0:29:27:a7:ba:39:
c1:05:0f:fb:d3:d8:56:24:93:34:7f:01:76:98:53:64:33:77:
0f:85:24:9b:26:5e:81:ad:7b:da:6b:e3:84:ba:a2:2c:4f:d0:
e7:82:91:6b:5c:c1:a4:4e:74:62:af:30:39:a8:be:86:31:40:
0f:26:66:2f:3c:31:8e:8d:79:c9:3b:df:1c:63:f9:73:ab:5b:
39:3f:c3:7d:5e:70:fb:a6:55:cd:e3:1f:14:98:d2:e3:d6:6a:
b3:1c:33:14:5e:4a:a6:53:ad:1f:6e:4d:d4:1a:85:54:fc:57:
73:3e:40:39:e3:89:86:8f:5a:73:ef:73:bc:24:46:28:d6:86:
fd:a0:2e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:22 2026 by rpki-client