Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File: YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier: s71jKrr/w8ROngt2e+dM9mAHMTlMMugInQjOPTx2idc=
Subject key identifier: 3A:1F:F5:64:A4:ED:72:AF:EA:FB:10:C6:08:DC:92:60:9A:2D:D7:75
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer: /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial: 019D9B5074A84E617C01AD83C37EB701D1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number: 0223
Signing time: Fri 17 Apr 2026 12:00:34 +0000
Manifest this update: Fri 17 Apr 2026 12:00:34 +0000
Manifest next update: Sat 18 Apr 2026 12:00:34 +0000
Files and hashes: 1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: qfb+RNjvjAraaOgyNBsVtToTdK0e3h/gsOdKpZoUdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:74:a8:4e:61:7c:01:ad:83:c3:7e:b7:01:d1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Validity
Not Before: Apr 17 12:00:34 2026 GMT
Not After : Apr 18 12:00:34 2026 GMT
Subject: CN=3a1ff564a4ed72afeafb10c608dc92609a2dd775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:46:83:05:1f:c9:f0:ad:9d:e9:27:81:9b:
e6:56:70:ad:14:e9:dd:2a:53:c7:29:1b:4a:c1:f6:
18:48:58:3e:18:b6:a6:00:36:6b:94:94:4d:83:51:
8f:c5:3a:18:cc:9b:f1:c0:df:f5:e0:5c:83:66:98:
20:b6:94:35:5a:9d:1b:ec:6f:53:e1:f9:fa:77:3c:
fd:de:05:26:26:b2:15:99:9b:cb:96:b1:3c:5b:02:
03:c4:16:7d:4b:4e:e4:48:55:5d:c0:63:37:bb:72:
81:89:90:2d:6e:c1:e9:b9:18:04:4f:9c:a8:f1:f5:
1c:c4:6d:ef:38:a1:60:6c:69:ca:59:ea:a4:ba:72:
e2:2a:76:09:24:8d:34:e9:85:89:c2:15:e1:d5:da:
c6:e2:94:3c:37:ba:fc:6d:07:55:8b:0b:ed:1c:7f:
04:75:6f:db:34:06:a3:85:36:39:c4:ad:d8:00:0e:
c5:f2:1e:1b:f2:07:4d:0b:cf:03:fa:c5:f9:fe:59:
1e:43:a4:7f:18:95:2e:60:fe:3b:3d:a1:00:dc:52:
d1:d7:1e:7b:5c:a3:cb:c6:11:4c:2e:34:79:00:4b:
4d:a8:0d:58:15:ae:e7:d5:a5:74:99:1b:91:29:11:
0c:81:a3:0a:da:eb:51:62:2c:b4:aa:c7:66:25:64:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:F5:64:A4:ED:72:AF:EA:FB:10:C6:08:DC:92:60:9A:2D:D7:75
X509v3 Authority Key Identifier:
keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:0c:e9:6c:f1:ba:3d:9b:8d:c1:f2:21:12:60:1c:8d:61:
f4:d0:a0:19:4f:eb:90:c5:ef:6d:67:d4:13:d6:a9:96:c0:e3:
42:12:4c:51:96:79:de:4d:be:73:09:d2:ee:df:51:7b:42:3e:
c3:f2:c3:1f:6a:45:2d:ad:33:44:e1:cb:c2:16:2b:5a:68:13:
8f:5f:1d:f7:39:9b:01:e4:f1:c1:d2:cd:b6:01:2c:6d:d0:22:
c5:15:c4:b6:b0:b9:f9:46:84:42:64:b9:d7:c0:af:a3:20:3b:
a2:46:8e:2c:47:fe:a3:17:4b:c8:3a:ad:14:a8:45:01:69:54:
dc:1e:cf:db:6a:84:80:55:da:cb:e0:c7:9b:35:95:82:55:8b:
fa:57:fb:85:d8:04:72:93:6a:b2:47:06:d2:dc:ed:d0:21:73:
02:d3:57:71:ed:a5:76:64:b2:64:40:99:e6:f4:e0:52:a8:60:
8c:df:08:9a:2e:a9:a1:7a:57:29:97:25:94:9f:75:b5:17:4d:
aa:0c:27:41:86:31:bf:d1:7e:92:40:91:72:80:50:e2:ee:a6:
86:d4:6d:03:ae:1a:b5:67:f1:88:26:2b:bd:78:37:48:05:f5:
05:23:f0:f4:8d:d7:94:67:9a:3d:0e:ca:bb:b3:b4:24:3b:ae:
aa:3a:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:21 2026 by rpki-client