Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
File: YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft (raw, json)
Hash identifier: M34b2pfhO+SujrDUgMA65/wcUvg8o5OQVWUaseNWNjE=
Subject key identifier: C2:F6:FF:4A:C2:C2:23:21:76:63:30:A5:32:EF:2D:CA:86:8B:1E:D7
Authority key identifier: 62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
Certificate issuer: /CN=624c494f56193b4e9adf3db72e4f01978c587f18
Certificate serial: 019D9886809E3CF4610EE447D8541438A220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
Manifest number: 15EC
Signing time: Thu 16 Apr 2026 23:00:44 +0000
Manifest this update: Thu 16 Apr 2026 23:00:44 +0000
Manifest next update: Fri 17 Apr 2026 23:00:44 +0000
Files and hashes: 1: C3nc48r2b2USpSkgOVzgsEQF2h0.roa (hash: kvFI72ZsGMqBnEvEAYRTWIp6gxPL8rac8rSJwcsVy0w=)
2: XaIcpqpb27hhGRIZ8h_xuzKRev4.roa (hash: pQLbKPAj3ndWd5qjjlikkIwvz29S32Fkmehgv5Ouuf0=)
3: YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl (hash: 4XBcHNsVkFrsM0XCOEDLS0ZN/nqcSISL43I/W8A5/4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:80:9e:3c:f4:61:0e:e4:47:d8:54:14:38:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624c494f56193b4e9adf3db72e4f01978c587f18
Validity
Not Before: Apr 16 23:00:44 2026 GMT
Not After : Apr 17 23:00:44 2026 GMT
Subject: CN=c2f6ff4ac2c22321766330a532ef2dca868b1ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:47:06:88:6c:b4:39:27:cf:70:bd:f2:e0:
c6:db:a8:25:be:3c:75:c8:6d:0c:4b:cb:be:c5:15:
30:28:d7:e9:09:5a:a8:88:f1:2f:3a:7f:a3:87:c9:
84:b0:3c:3e:c1:32:87:da:12:e7:45:d7:b7:6e:34:
06:a8:ec:a5:b6:0e:23:93:b3:b3:0e:86:c9:1c:4d:
fc:bd:33:ad:87:70:c6:48:6c:3e:f1:75:97:f1:7a:
ac:9f:56:8c:1d:09:6d:88:86:dd:5e:b2:3e:16:9e:
40:3e:1b:17:10:44:c8:f0:3d:60:48:7d:92:c8:84:
f6:e8:12:69:9f:68:99:3d:ad:4b:06:3e:91:f4:f4:
a2:cc:66:8e:c6:3a:a4:63:16:7e:b4:04:22:86:bd:
be:c6:ba:61:a4:3d:a2:cd:51:d9:97:6d:6a:ce:8c:
4f:e1:82:c0:56:ab:c4:85:44:2b:ee:45:6d:18:e5:
72:19:9f:47:97:87:e9:8f:33:ce:8b:12:67:bc:fd:
af:41:b1:3a:06:42:34:2e:1f:fe:74:41:2e:55:04:
bf:dc:7d:08:0f:5e:b7:68:45:e6:62:f3:27:8c:be:
c4:5d:f6:8c:32:2f:77:79:5f:51:97:5c:e1:c1:c8:
f9:2d:f3:46:32:0a:7a:3f:1a:de:24:5e:2b:7f:ae:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:FF:4A:C2:C2:23:21:76:63:30:A5:32:EF:2D:CA:86:8B:1E:D7
X509v3 Authority Key Identifier:
keyid:62:4C:49:4F:56:19:3B:4E:9A:DF:3D:B7:2E:4F:01:97:8C:58:7F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkxJT1YZO06a3z23Lk8Bl4xYfxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0988af-8d7f-4c29-b5cc-7aab6ef955a1/1/YkxJT1YZO06a3z23Lk8Bl4xYfxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f1:f6:f0:28:2c:e7:d8:83:b1:80:06:b8:7d:14:f2:94:61:
c4:c9:77:08:ae:ec:cc:6c:14:87:37:ff:c8:cd:95:99:d7:10:
bb:64:07:f6:7c:95:0c:27:72:83:76:1b:da:24:af:a6:b0:43:
d2:13:08:b4:2b:9a:02:54:a3:b8:b0:6c:c3:cc:7a:70:a9:0b:
df:3c:e0:fb:f4:73:1c:34:21:d2:85:3a:07:db:f6:35:f2:5b:
ec:38:18:8f:93:d5:92:ec:f0:a2:d0:98:87:f8:19:68:3b:f0:
40:03:13:8b:9b:60:18:5e:56:83:92:90:47:aa:a7:15:8f:b9:
26:5e:03:b5:0a:c5:57:b7:8c:f9:16:e0:63:9a:16:df:88:ac:
ce:d5:0e:b2:95:19:82:3b:9e:cf:48:e4:ad:b3:60:9c:8c:60:
e9:86:8c:5f:20:54:a8:09:1e:53:5d:04:c9:7e:82:1e:41:5b:
d1:65:5b:8d:5a:a4:66:49:21:17:8b:bf:18:24:c4:ae:69:10:
6e:46:11:de:4a:9f:b1:96:81:59:36:6c:da:14:ac:9e:15:09:
61:78:5d:a6:c6:ef:b3:06:90:4e:c7:0b:73:9d:a9:0e:2b:f0:
73:15:30:20:1d:85:b0:fa:ac:d8:d4:b8:d3:bf:8e:0d:66:23:
bb:f8:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:55 2026 by rpki-client