Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
File: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft (raw, json)
Hash identifier: ZAHmqYXXvuZO+A9v1PjSscL0bG3D0jqrwjraBwTBvc8=
Subject key identifier: 99:A9:EF:12:F4:37:1C:90:6C:64:0A:8A:7D:0B:07:EB:98:9B:4D:4E
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Certificate issuer: /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial: 019D9818B28322B81EC4A74F21532E50F5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
Manifest number: 182B
Signing time: Thu 16 Apr 2026 21:00:48 +0000
Manifest this update: Thu 16 Apr 2026 21:00:48 +0000
Manifest next update: Fri 17 Apr 2026 21:00:48 +0000
Files and hashes: 1: Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl (hash: PU/jYhsgtmuf0c9OP8Zq51EGEcYGxOxljOOm8LxT5tE=)
2: sw8tmXWb62c9gz1qsBrZbffyXTY.roa (hash: b0ehz9drkVBnOmXweW7dtXPuDg7z70w2Le8bMJVLAGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b2:83:22:b8:1e:c4:a7:4f:21:53:2e:50:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Validity
Not Before: Apr 16 21:00:48 2026 GMT
Not After : Apr 17 21:00:48 2026 GMT
Subject: CN=99a9ef12f4371c906c640a8a7d0b07eb989b4d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:1a:87:37:e4:72:40:92:ec:41:77:2d:c0:
d3:1a:00:87:7d:10:48:0a:0e:08:67:40:b0:b1:bc:
89:b6:26:c6:ba:aa:9c:fa:da:31:48:73:ef:ad:44:
84:7d:c4:38:11:5e:5c:88:52:cf:78:78:9a:6d:14:
fb:49:6d:d2:34:6a:75:2a:fd:a2:27:17:d0:84:8f:
51:ed:76:b1:bd:13:8b:a5:a2:df:1f:f1:69:6b:b3:
c7:a9:b8:ba:57:0f:76:5c:af:12:5e:ff:2a:3c:d9:
9d:8c:8b:bc:c5:5c:f8:7b:a9:a0:2a:d2:2a:b1:d1:
31:44:de:7f:6d:33:67:45:20:80:91:15:39:c3:e6:
5d:73:39:92:e0:3a:08:ab:1d:88:ea:f1:78:1c:be:
f2:1c:0b:37:a8:ec:27:5b:18:e7:c4:f7:e2:cc:3f:
9a:b5:fd:3d:7d:dc:ee:69:9b:37:88:b7:ad:87:4a:
73:88:7e:51:4d:41:01:52:58:30:90:f5:c6:bb:48:
c3:5f:2c:7a:21:0c:ef:e6:a9:84:3e:0e:d1:32:f9:
59:77:c5:a9:a7:4a:23:86:b1:d0:c1:81:ae:41:ba:
08:45:7a:42:75:05:44:f9:a6:bd:e1:fb:17:4c:ba:
15:d1:68:24:ea:91:6a:4b:91:7a:fb:ec:4d:26:bf:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A9:EF:12:F4:37:1C:90:6C:64:0A:8A:7D:0B:07:EB:98:9B:4D:4E
X509v3 Authority Key Identifier:
keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d3:4a:f3:65:48:9a:54:25:7f:d0:2b:e8:49:66:65:d5:9e:
f6:3e:e4:73:c6:61:10:c5:11:5a:bc:6e:ec:e6:6e:2e:05:51:
32:05:f6:a6:1b:d8:8e:67:17:8c:43:9b:79:7e:3d:66:98:bc:
8f:b9:0c:07:78:a5:e7:74:79:58:d4:a1:74:a5:f1:1c:07:a9:
2e:b2:38:1d:8a:26:ef:00:11:0f:e0:cf:14:cd:4c:67:ae:77:
f1:2a:e7:bb:24:be:ca:cc:9b:45:fc:0f:b6:05:e0:bf:76:5c:
df:a5:4d:38:41:5a:6d:75:83:51:80:4f:f1:5d:7e:a6:f5:23:
a2:fc:d2:08:79:db:36:08:c9:4f:7f:9d:a5:c5:63:00:32:1f:
60:f6:f8:92:f4:9f:2c:70:26:01:d7:eb:69:ec:eb:ce:e3:24:
66:db:e0:61:dd:25:bb:6e:d1:5e:42:92:30:f1:c8:0a:57:c4:
0b:a0:71:9d:ca:28:9c:27:48:d6:03:18:a2:43:ed:18:67:cc:
44:4c:ef:d1:b5:39:f6:6a:e7:a6:31:71:05:a4:50:a2:b8:1b:
b7:71:a9:25:97:fb:52:da:59:a4:56:8a:66:2d:3e:bb:9f:af:
d7:56:9f:34:61:e2:2a:00:c1:6d:ca:bb:8e:bf:63:1c:d1:44:
eb:28:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:15 2026 by rpki-client