Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
File: YgTQ-JHcR16nA-be89bq0ej3wtY.mft (raw, json)
Hash identifier: jbfND6TBU7H1f6hlxJquQI3mUMUaEEVBjGFvQWpzEn8=
Subject key identifier: 47:DE:5D:6B:D5:07:09:1A:59:4E:27:35:6D:58:B4:0D:50:94:FE:5B
Authority key identifier: 62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
Certificate issuer: /CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Certificate serial: 019D99D0A33231A8D823950360CFEB2E10A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: YgTQ-JHcR16nA-be89bq0ej3wtY.crl (hash: Kxt22XyDUCOdg7eXR6Ewxre45aCkplwMgG63SdK06kA=)
2: pYLH_zSZV0273TNEBYT79f1lmcg.roa (hash: k3iAoFqBBNaSN0iQRFo4OKQZqr7mC8NP7hdAPA1B80I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a3:32:31:a8:d8:23:95:03:60:cf:eb:2e:10:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6204d0f891dc475ea703e6def3d6ead1e8f7c2d6
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=47de5d6bd507091a594e27356d58b40d5094fe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:d7:fe:2f:64:bf:e9:63:b0:a8:68:a9:44:
ed:2a:ad:7e:67:33:a8:0f:39:af:9c:7d:e3:e4:f6:
24:27:2d:b2:ff:da:8e:c7:35:2b:90:a7:e0:de:eb:
24:ba:51:5d:c9:51:69:02:3e:74:eb:b5:58:e8:33:
ac:4d:10:95:17:ff:b3:d2:4b:b3:cf:0f:0e:b2:1c:
77:13:c1:74:64:78:63:27:9d:a3:46:de:ea:cf:33:
1a:31:a5:74:96:24:79:3d:a2:48:f2:02:1f:5b:08:
89:85:89:e3:81:c2:0e:80:1c:51:09:c2:d4:62:8a:
ea:cb:91:61:c2:3e:ad:52:16:bf:af:f0:a1:62:87:
c5:e7:01:ae:30:d9:bf:b0:97:54:86:30:9a:2c:2d:
eb:e0:2c:98:e3:5a:b8:e3:65:29:1a:f4:f3:f9:54:
21:6d:e5:00:65:cf:cd:b5:25:f1:e9:cc:65:55:2b:
eb:5e:a3:34:9c:30:3d:37:b7:01:ef:d9:49:8f:01:
70:05:72:73:ca:43:eb:54:1c:d1:3c:1b:8c:ed:30:
28:02:5b:42:38:c8:7a:45:de:39:a8:3b:fb:57:9e:
68:06:0d:dc:bc:d0:d2:ea:42:e9:1d:5a:e4:9b:43:
75:01:f8:fb:3a:75:17:29:86:8d:86:7a:bd:7c:aa:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DE:5D:6B:D5:07:09:1A:59:4E:27:35:6D:58:B4:0D:50:94:FE:5B
X509v3 Authority Key Identifier:
keyid:62:04:D0:F8:91:DC:47:5E:A7:03:E6:DE:F3:D6:EA:D1:E8:F7:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgTQ-JHcR16nA-be89bq0ej3wtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f96121-0335-402d-8491-4d88fce32399/1/YgTQ-JHcR16nA-be89bq0ej3wtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b8:4d:81:c4:a0:db:69:7b:ca:b0:c7:96:29:22:ec:6e:45:
f3:ca:41:c2:f3:09:ec:22:e7:6f:1c:08:7b:1a:64:0e:be:6a:
23:8b:5f:41:e7:0a:9b:a1:9a:46:c4:7c:ed:28:02:9c:1b:28:
d3:1d:cf:d0:36:07:5d:d7:04:e9:6a:9c:8c:f0:65:5f:ff:20:
74:ea:b4:81:bf:3c:dc:d5:b3:f8:95:02:68:c6:e2:eb:0c:16:
71:34:58:a1:e1:1a:04:93:8b:9a:05:52:8f:4d:e8:7a:51:87:
26:57:a5:b5:90:5d:30:ae:5d:1f:f6:41:bc:fd:1a:5b:bf:49:
5f:61:b4:c5:1b:0c:92:48:e2:6d:b1:d3:b9:80:e7:f5:71:58:
0f:0d:22:c4:b4:5a:5f:f2:27:ab:bc:f4:c6:1f:54:12:b3:e9:
39:d2:b4:01:42:ea:d0:e7:ea:ce:1d:37:5f:6b:e3:28:92:84:
ac:da:b4:43:0f:a0:23:e2:d3:35:df:34:76:c7:bc:a5:18:bb:
29:b6:26:4a:bd:39:b2:34:61:98:ba:20:70:f2:d9:05:ab:96:
54:82:ff:bb:ed:d2:71:ce:b7:69:d2:e0:e6:6a:81:67:4a:93:
12:55:4b:e5:07:3b:42:c8:ef:e6:2c:68:f7:03:c9:e3:50:91:
36:c4:f0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:30 2026 by rpki-client