Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
File: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft (raw, json)
Hash identifier: sJlzGm+SFJ78M/mFNASCoo6MR+7gdStU4vlYU+uvyUU=
Subject key identifier: 93:62:63:B6:D1:8A:CB:F6:87:78:98:83:F9:B7:B1:05:BA:40:74:E3
Authority key identifier: 62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
Certificate issuer: /CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Certificate serial: 019D9AAC55E26487F07DD5210BCAC45A9941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
Manifest number: 1149
Signing time: Fri 17 Apr 2026 09:01:18 +0000
Manifest this update: Fri 17 Apr 2026 09:01:18 +0000
Manifest next update: Sat 18 Apr 2026 09:01:18 +0000
Files and hashes: 1: Xxs4ldV2enfWsLfgfxEllPDWnWo.roa (hash: 8Cn8Jb6BuKTBrGl7OMfhVUGxRn/9grjWQRc7jCMSinQ=)
2: Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl (hash: 8gV2AA/RQT3/8PlJiQ2QyJgKP6XjYzYsWxFFwoo9RZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:55:e2:64:87:f0:7d:d5:21:0b:ca:c4:5a:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6246bd00daa4da92a0c36facdd9cd69491d96c68
Validity
Not Before: Apr 17 09:01:18 2026 GMT
Not After : Apr 18 09:01:18 2026 GMT
Subject: CN=936263b6d18acbf687789883f9b7b105ba4074e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:a3:ca:48:6b:86:ca:f5:76:b5:a5:ff:cd:
af:83:03:89:c5:4a:0d:84:f7:89:f2:2e:ea:d8:66:
8f:21:88:b0:2f:6a:65:7c:df:ca:d2:83:0e:ae:65:
8a:2b:c1:ff:70:84:ef:fb:04:8b:db:1c:d7:96:0e:
8e:d4:5c:1c:f1:1d:ea:bc:ea:c3:e0:be:9d:52:72:
86:3a:8b:19:e3:4e:7a:90:6b:1d:ec:bd:e9:b9:51:
bc:20:59:a1:98:8c:6d:02:41:64:95:5c:b4:55:7d:
c5:76:9f:f9:06:e7:69:1b:2b:c7:f8:9f:69:f6:24:
7b:88:7b:d8:98:ca:d2:3f:7a:86:9a:1c:84:49:b1:
50:63:42:24:62:ae:4a:4e:f9:4d:ef:03:d0:fe:50:
48:8b:dd:21:26:e2:8d:58:52:ed:e1:1c:07:c6:28:
c0:52:7f:5c:42:8c:88:0b:76:eb:89:41:aa:7c:34:
59:8e:79:8c:fd:37:a2:0d:a5:ba:da:98:18:c5:72:
b2:36:c6:2d:9d:71:db:4a:a8:37:ea:c5:17:fd:de:
41:12:ab:19:c1:87:c5:4a:00:ad:91:2b:5e:c3:fe:
6d:21:9d:d3:22:0a:61:1a:27:1c:47:1f:d5:ce:f7:
a2:e6:16:84:ed:86:ed:53:28:49:8d:1e:74:cc:44:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:63:B6:D1:8A:CB:F6:87:78:98:83:F9:B7:B1:05:BA:40:74:E3
X509v3 Authority Key Identifier:
keyid:62:46:BD:00:DA:A4:DA:92:A0:C3:6F:AC:DD:9C:D6:94:91:D9:6C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f74738-5830-417c-8360-0d60d64732bf/1/Yka9ANqk2pKgw2-s3ZzWlJHZbGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b7:d7:ff:ad:63:7c:d6:85:9c:16:f0:2c:e9:65:84:e4:20:
8f:08:6c:72:cd:e4:1d:50:27:1e:9b:3f:46:fb:35:2e:9e:13:
76:be:34:1e:47:76:c0:f6:e4:ac:e1:0d:0f:30:0e:c5:fa:39:
e7:5d:7d:29:9c:a6:e3:50:1e:8b:d5:8d:2c:85:7e:61:be:95:
f2:c6:9e:bf:72:01:45:df:e8:bc:9b:70:18:9b:f1:d4:ba:9e:
0b:1c:fc:74:d2:2f:32:f6:6b:4b:3c:33:2e:d6:41:1f:6b:15:
6e:02:18:b2:94:f5:99:aa:e7:28:c6:d5:45:a0:41:a7:04:99:
1a:f9:1c:11:3f:a0:df:03:58:14:f8:49:35:6e:22:f9:2b:f8:
21:cb:cc:b7:77:a2:7f:95:9e:40:8d:f5:90:2b:4b:b9:7b:6a:
70:ec:0c:ec:7f:49:39:a0:59:46:3d:dd:55:9a:86:ea:0d:a8:
85:68:a1:3b:c1:43:52:14:09:a8:60:f7:38:9c:9b:02:09:f3:
00:2a:56:21:a8:dc:90:91:e7:40:6f:5d:26:4f:6e:57:9f:b7:
65:ba:27:36:9d:72:4e:02:17:f5:b4:c2:9d:73:7d:cc:67:28:
4f:a6:43:20:f0:d1:6c:28:d4:73:1e:b6:05:de:be:b2:4b:fe:
25:5d:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:53 2026 by rpki-client