Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft (raw, json)
Hash identifier: yCgtk/3pOjCNx4cU9mK5ezoii/Zi+sRplPfDH2Q3a3k=
Subject key identifier: AA:5F:61:DE:1E:8A:6C:A8:98:DD:62:FB:DF:94:69:D4:D5:C6:9C:4F
Authority key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Certificate issuer: /CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Certificate serial: 019D9B19A7B8C65AB5FAD290E4E80CFA49F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
Manifest number: 066A
Signing time: Fri 17 Apr 2026 11:00:42 +0000
Manifest this update: Fri 17 Apr 2026 11:00:42 +0000
Manifest next update: Sat 18 Apr 2026 11:00:42 +0000
Files and hashes: 1: YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl (hash: IDEAqxD9gEOLsObvgFrRSXiHPf8QCj5UdhwG+jzKgsU=)
2: ZoWDl6ndQ9Hfznn3PsQgxbbAxbw.roa (hash: kikQlykcn+WarGEP2RIaDoLYfnMDSfgY1GHVB0fe+tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a7:b8:c6:5a:b5:fa:d2:90:e4:e8:0c:fa:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Validity
Not Before: Apr 17 11:00:42 2026 GMT
Not After : Apr 18 11:00:42 2026 GMT
Subject: CN=aa5f61de1e8a6ca898dd62fbdf9469d4d5c69c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:99:ae:83:1e:7b:b5:40:77:e1:ab:c9:b5:5e:
2d:11:b9:fd:51:6b:c3:2d:0e:ea:95:47:23:84:cc:
f1:29:64:e8:c6:e4:07:b4:8d:1b:28:27:b6:c3:d4:
76:1c:19:b8:48:5a:c8:14:f4:40:8b:a1:27:7c:7d:
50:75:50:18:d5:9c:2f:1b:98:86:fd:8b:6e:d8:e3:
d0:a5:99:89:e3:fc:57:87:1c:0f:4a:d9:8e:1e:91:
50:86:1b:1e:41:fb:66:5f:a9:84:36:16:fe:0d:dd:
33:c2:9c:57:e5:b3:18:d5:f7:18:be:eb:c9:30:f5:
96:d8:6e:07:9d:33:f9:51:b4:f6:d7:69:49:64:6b:
a4:79:a7:ce:83:da:18:69:ab:96:e8:71:ac:a9:96:
5d:15:88:f4:c7:4d:84:98:f7:88:37:90:ce:17:a7:
0b:15:63:a8:b7:b0:8b:80:34:27:e9:b0:4b:b6:58:
eb:32:85:1a:f2:58:12:81:5d:07:5f:b9:53:59:0e:
d4:be:32:f2:51:bf:19:80:e0:f0:dc:34:1e:50:54:
f2:d1:f7:59:88:9d:66:30:95:51:f4:f5:d7:ae:91:
83:3c:a7:64:55:32:c9:05:1e:46:a2:58:93:21:d0:
96:fb:e7:ea:c8:f8:de:ae:27:dc:f0:3f:cf:1d:0a:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5F:61:DE:1E:8A:6C:A8:98:DD:62:FB:DF:94:69:D4:D5:C6:9C:4F
X509v3 Authority Key Identifier:
keyid:61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:81:0e:39:9a:cc:2e:b2:66:bb:58:2f:3c:21:a1:b9:31:33:
72:fd:05:43:75:0d:5c:a1:68:2e:4d:61:bf:bb:10:1b:22:de:
b8:6b:62:a0:0c:0f:fa:e2:a0:3b:c7:5f:94:d5:e9:60:f0:bc:
71:cb:62:59:fc:e2:8f:88:62:e6:4b:a2:81:4a:2d:ec:8b:7e:
9e:98:6b:2a:26:3c:77:b2:ed:83:97:2f:bb:c8:4d:98:68:59:
ae:38:9a:e6:39:ec:9e:01:da:77:7a:81:c1:29:fc:94:e6:76:
45:9a:41:6f:00:2a:b1:cb:00:6d:69:78:23:94:48:38:67:13:
05:0c:0a:2e:d1:ea:2d:be:58:c0:c8:5f:0a:5b:8d:c6:18:a1:
ad:55:97:f7:e2:36:34:2a:70:34:04:96:bd:33:d6:ac:47:40:
57:6c:e1:b7:7a:dd:13:6c:00:90:74:1c:b6:1e:60:1d:23:3e:
d5:93:fb:af:46:78:ef:18:16:13:22:31:2d:bc:10:81:37:5a:
97:98:23:85:9e:61:f6:3b:41:0b:25:bd:7c:9f:dd:4a:c4:c8:
50:7d:ff:dc:bf:7d:29:33:94:40:96:6f:b9:97:4d:e0:5b:5e:
bf:73:fc:97:f0:63:a8:f3:16:56:8c:19:e8:db:e8:6d:56:57:
50:e4:d3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:51 2026 by rpki-client