Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft (raw, json)
Hash identifier: unh0v5NGSY06hGwznwty5WSnga4L23T1XpAn9hdKQiQ=
Subject key identifier: 0C:CC:70:CA:5F:99:F4:5D:4C:9F:64:D9:54:BD:DC:E7:57:F9:FB:7B
Authority key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Certificate issuer: /CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Certificate serial: 019D98F4701D91D09A628B6B1BC7A5AB128C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
Manifest number: 106E
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: JY81usnotweZyZdSahI8RyYPcPQ.roa (hash: a+Ax7M2k213Mauckfl1KLZA2jvBbE/xfAhO6740Uqk8=)
2: yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl (hash: OtSx7+Qs7JwWkX8p+RLOUyjBwoQ58jV8chmVKwOFTJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:70:1d:91:d0:9a:62:8b:6b:1b:c7:a5:ab:12:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=0ccc70ca5f99f45d4c9f64d954bddce757f9fb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:71:65:47:e5:94:68:b7:4f:c1:7f:9f:57:
dc:78:b8:fa:d1:43:94:51:c6:1a:59:74:fe:72:66:
9e:0e:20:97:db:f5:c3:74:55:40:e6:23:8b:37:99:
99:ab:01:21:30:0e:ad:c8:3d:82:b7:26:f8:5f:d0:
e0:a4:13:f7:35:23:8e:cc:58:c9:28:01:87:a8:59:
f8:3d:a4:ca:e6:37:f2:01:d6:34:2c:0e:d4:8c:3b:
15:03:8c:ed:a2:ad:b6:6c:e8:31:98:0f:bc:e3:36:
17:4b:c4:d2:5e:0f:cf:3a:17:d5:bf:0f:cc:4a:2d:
8b:4b:bd:79:4c:92:02:0b:7d:44:51:1a:3f:11:dd:
1e:5f:2d:5c:62:8a:b9:b1:b7:19:6d:7d:d3:da:9a:
a6:19:3e:49:b3:e0:2c:b4:e1:3a:91:da:5e:b0:47:
3a:28:ff:72:59:6b:4e:0e:f0:43:68:09:9a:7d:1d:
e6:e0:e2:5a:9d:52:76:04:3c:9f:31:9c:3e:97:74:
16:4e:f1:fb:c9:07:b9:37:6f:1e:ed:f8:65:a0:c0:
64:57:aa:dc:43:ed:89:eb:6c:70:91:fe:3d:37:75:
97:2e:58:1d:d1:20:e8:9c:75:5a:b4:77:f5:72:40:
03:47:9e:62:42:e0:2c:09:96:f1:44:80:d4:45:ea:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CC:70:CA:5F:99:F4:5D:4C:9F:64:D9:54:BD:DC:E7:57:F9:FB:7B
X509v3 Authority Key Identifier:
keyid:C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1b:08:07:fb:b9:79:71:be:ae:07:77:9c:b0:ea:43:7a:db:
ed:75:3a:b6:28:37:92:f8:c5:30:32:96:2b:63:63:33:0f:91:
b3:04:02:f1:7a:d1:cb:ac:3f:df:4d:26:b0:55:b5:81:0c:82:
e8:13:e4:e7:7e:3d:10:b0:8e:41:e0:d0:52:da:d8:24:90:4e:
d1:1d:43:1d:ac:26:4f:0f:08:94:29:c1:06:04:cb:31:d9:f5:
7d:60:fc:d0:eb:70:b3:1d:35:6d:0e:7d:d0:14:be:a6:01:f8:
65:7a:7d:3e:f5:d1:12:64:f7:e8:5d:0b:87:c2:4e:73:e1:20:
1a:93:b9:5b:f0:59:7c:e1:95:38:ad:e9:af:f2:da:d4:35:3c:
b9:6f:96:31:ae:0a:a0:73:99:f8:c6:6e:38:64:86:c2:01:7a:
e9:07:82:e7:bf:d4:29:90:8e:9f:41:c1:6a:f1:8a:9c:81:d4:
7f:97:a9:2d:fc:96:7f:f3:9d:8d:30:54:0d:2d:04:d0:be:c8:
1a:a8:ff:f0:b6:89:ab:b0:e6:5d:ed:12:b2:f7:23:85:bc:a1:
13:5c:e1:98:cf:64:31:4b:b6:ed:7d:43:dc:5c:37:47:20:d8:
ab:85:e9:6a:18:df:95:06:db:5d:e3:04:50:52:94:5a:43:a1:
b7:c7:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:19 2026 by rpki-client