
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
File: YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft (raw, json)
Hash identifier: Ozd1mtxMO0TG94p8oZ6EGnDZerh9d1oYkjhQ9MyLLVE=
Subject key identifier: E4:C5:59:AF:A4:57:A1:3D:B0:41:AD:FD:BA:D1:DF:53:B5:61:7C:8E
Authority key identifier: 60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
Certificate issuer: /CN=602be661e57c14659a608e9f6be605d6250047fc
Certificate serial: 019D97738AE2FCB05EF2FAE0BBF8397CD9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
Manifest number: 1351
Signing time: Thu 16 Apr 2026 18:00:24 +0000
Manifest this update: Thu 16 Apr 2026 18:00:24 +0000
Manifest next update: Fri 17 Apr 2026 18:00:24 +0000
Files and hashes: 1: ObjrmTselcOgfHeqKSeC3ZkZE8M.roa (hash: h15edxf80NHDBsD89JncvBzL8sjznUrSp3Fp172V3UI=)
2: WrTCSuQUvxPpAUF0e5vDgZhjo64.roa (hash: +oAgf/l41Uj9PIOaXoHSTwcfDAsCiAHjtNGVMj4O9AY=)
3: YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl (hash: HxgnhdMOihb3PK4pKk7YJFQp6U1T3sPrt2gYAPsJfJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:8a:e2:fc:b0:5e:f2:fa:e0:bb:f8:39:7c:d9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=602be661e57c14659a608e9f6be605d6250047fc
Validity
Not Before: Apr 16 18:00:24 2026 GMT
Not After : Apr 17 18:00:24 2026 GMT
Subject: CN=e4c559afa457a13db041adfdbad1df53b5617c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:3b:4f:81:f2:95:fb:b9:b0:62:2b:9f:f3:
ec:0f:b3:ca:50:9c:4f:56:69:0b:07:92:47:ed:5d:
74:a2:98:66:3a:af:69:3f:f5:7d:14:77:9d:b9:ce:
fc:44:63:8d:e7:23:a6:98:69:d4:17:e5:4b:01:f9:
a0:ac:98:26:f2:12:b7:2d:03:e3:55:ab:54:0e:86:
48:1b:2d:4b:00:e0:2c:f8:5d:20:47:ef:5f:b7:f4:
d1:78:00:91:4d:4e:b2:01:16:68:04:a1:7c:bc:1a:
91:21:88:3b:48:8f:1a:53:96:85:cc:dd:d3:b0:e4:
60:12:2e:46:9f:58:c5:5c:0f:af:9a:ce:aa:64:15:
de:07:1c:e7:19:9f:e5:98:32:43:3a:90:5e:dd:c2:
fa:28:9a:47:e4:e1:01:ad:45:30:cc:53:7c:32:d5:
0b:ec:a9:32:4e:df:02:0a:01:c2:76:bc:64:17:a3:
ba:5c:80:71:7f:35:be:ee:8e:cc:7c:dc:3b:6e:a3:
9e:75:76:b8:dc:a0:5d:7d:63:18:41:9c:5f:ec:08:
9b:ed:11:cb:d5:54:9c:5e:80:25:bb:c8:8d:72:18:
17:97:59:6e:0c:9e:b7:8f:16:4c:b7:ff:69:8a:1c:
dc:87:e0:e6:4f:93:a1:4b:02:62:47:f1:51:f6:84:
0a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C5:59:AF:A4:57:A1:3D:B0:41:AD:FD:BA:D1:DF:53:B5:61:7C:8E
X509v3 Authority Key Identifier:
keyid:60:2B:E6:61:E5:7C:14:65:9A:60:8E:9F:6B:E6:05:D6:25:00:47:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCvmYeV8FGWaYI6fa-YF1iUAR_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974213-49fd-4c5c-8014-bd3a630ee5cc/1/YCvmYeV8FGWaYI6fa-YF1iUAR_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4f:82:57:3f:cc:ab:a5:c0:a2:19:65:2e:b3:c5:95:24:32:
23:8f:a6:e4:b0:20:be:e2:8f:08:38:4f:f7:ad:a3:21:87:6b:
72:32:be:9d:23:f6:88:80:78:22:84:a0:10:34:1a:5c:bb:b0:
82:60:18:30:ea:af:9b:d8:61:79:8f:4d:1c:92:05:68:70:d8:
b1:2e:24:77:7b:7d:b1:87:52:68:45:28:5b:44:11:11:d4:e0:
d2:d4:22:bc:37:65:a1:95:8b:03:94:25:9e:62:d7:fb:ee:14:
24:78:06:73:ac:1c:17:7d:e0:08:07:93:6c:fb:a8:7e:18:39:
42:de:8a:20:11:71:3d:76:46:25:95:5c:9d:7e:29:c6:73:a6:
ce:43:0c:d3:0e:7e:a8:75:c9:15:4d:1f:b5:10:90:a1:b3:8c:
6d:51:23:1e:22:f7:4c:1e:5d:a8:3e:87:c7:73:eb:2a:01:32:
92:01:e2:43:81:23:49:e9:42:ba:43:c8:f7:ee:1d:e2:68:be:
49:d9:f3:39:f5:86:45:d7:3f:aa:21:51:66:d2:09:47:35:9b:
fd:96:b0:10:25:39:e7:92:b5:94:53:d0:ca:df:01:56:60:11:
57:72:38:69:00:e9:0d:52:8f:ab:f7:39:ff:3e:c4:35:ed:30:
fa:35:30:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:32 2026 by rpki-client