Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft (raw, json)
Hash identifier: SG9ECOaqxpjKr8z/DlM3fPUyxy0dEDqKIRAtCthH7FQ=
Subject key identifier: 38:7C:2A:F5:A3:46:8E:82:6D:68:69:B6:DC:E4:9C:B7:69:A1:B5:A0
Authority key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Certificate issuer: /CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Certificate serial: 019D98BD88109DC9D45DDC41D2A38BB67DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
Manifest number: 0825
Signing time: Fri 17 Apr 2026 00:00:51 +0000
Manifest this update: Fri 17 Apr 2026 00:00:51 +0000
Manifest next update: Sat 18 Apr 2026 00:00:51 +0000
Files and hashes: 1: An9tSo9g-Gy9Up4GlPHJ27LvWXs.roa (hash: v2Ll6SU0terKek9jzeeagy8cmeBNdj6wWNsYdp2V7sU=)
2: YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl (hash: PCAYGsqX3dtgk7QL8FpdrhgOZwLs14j8LjkHTx5NDto=)
3: slyTkpHxsHHbymiBgxBnw2OM_JE.roa (hash: C2RqSAQP0bQ9sirjpml2aDPA2kjBI0WnlaU7NuMnd5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:88:10:9d:c9:d4:5d:dc:41:d2:a3:8b:b6:7d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Validity
Not Before: Apr 17 00:00:51 2026 GMT
Not After : Apr 18 00:00:51 2026 GMT
Subject: CN=387c2af5a3468e826d6869b6dce49cb769a1b5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:7d:1b:43:cb:17:cc:8b:be:2e:fc:f0:bc:
a4:f0:6d:cf:2f:65:20:08:a1:3a:71:d9:d2:b4:a9:
e5:f6:59:dc:82:8f:c8:0b:ef:c2:14:20:6d:71:20:
e5:2f:cd:2d:ba:59:ea:ad:c0:37:37:ea:de:a8:3f:
f4:9d:ec:78:3e:29:0e:39:30:81:dc:b2:98:22:11:
e5:8d:1b:bf:fe:14:61:9b:44:5b:ba:18:3c:48:ad:
0b:a9:31:95:7a:13:5a:57:bf:57:2e:bf:e8:89:ca:
eb:8f:81:1d:7c:ba:42:45:8c:3f:03:7f:c2:66:0b:
8c:5b:02:16:54:11:30:8a:41:6d:4b:3d:3f:02:41:
3f:06:2e:66:ef:68:b4:f3:b1:e8:2a:5b:d1:4d:ab:
d3:78:01:55:41:d6:f4:bd:b3:6e:fa:fe:84:34:98:
eb:75:12:23:94:17:dd:18:f1:01:5c:ae:8b:7a:11:
86:5a:70:35:fd:9e:48:37:53:ca:34:4f:da:d5:29:
11:c8:c8:cc:c0:a4:4e:11:a3:e6:aa:9c:1d:7b:d8:
45:58:c6:b9:0f:09:5e:5a:f7:4a:62:de:b3:f5:32:
2f:21:08:ee:32:b1:7a:32:9c:48:00:9e:9e:ea:f8:
9a:11:d8:3f:2d:84:df:a2:02:b9:0f:aa:6d:77:82:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:2A:F5:A3:46:8E:82:6D:68:69:B6:DC:E4:9C:B7:69:A1:B5:A0
X509v3 Authority Key Identifier:
keyid:60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:04:d3:78:0f:8f:bc:ff:69:a5:a8:8f:bf:16:a9:2b:39:f2:
52:14:73:22:dd:c9:6e:5a:c3:73:2c:c1:5a:50:a7:e5:36:ef:
5f:aa:8a:e6:9f:2c:22:81:ba:2c:59:78:15:bb:90:68:54:9c:
20:3e:8a:c5:c2:f1:cd:a7:c0:7d:3d:a8:b9:e0:69:ef:da:8f:
bc:b9:65:02:3d:0e:d2:09:02:69:c1:99:20:5c:2c:b8:9e:bb:
bc:c6:dd:d0:47:be:b8:bd:96:28:df:63:6b:b8:c5:71:a1:fe:
58:ec:8f:dd:68:7d:10:b3:d6:e3:0b:3c:98:4c:90:23:20:15:
98:68:3b:8d:87:08:86:9a:03:8c:12:01:6d:55:40:55:9f:56:
32:15:54:9c:5a:14:34:b7:44:2c:82:ba:1e:c3:ab:18:9e:6d:
f7:9c:c2:64:1b:25:68:60:3f:6d:2b:39:0f:27:59:38:83:ad:
97:ca:5a:4f:a8:3a:df:0b:ac:25:c0:b9:a4:a5:7b:35:ca:7e:
32:36:2c:dc:7d:cd:f1:0a:e6:43:42:16:0c:cc:24:1f:a5:9e:
16:dc:3c:59:a9:f9:73:b7:3a:73:f4:2a:e2:04:78:ff:24:d6:
d0:69:2e:69:46:0c:75:de:77:33:27:6e:43:37:4e:d3:ed:09:
31:58:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:23 2026 by rpki-client