Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
File: YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft (raw, json)
Hash identifier: ZXKDA37rR4TAH9Q/7UFS8AmDUIUk7btHUbNog5ezqkU=
Subject key identifier: 16:1F:3F:4A:E7:6E:11:CB:16:71:EB:63:5E:8E:85:30:C3:F7:F9:9F
Authority key identifier: 61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
Certificate issuer: /CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Certificate serial: 019D98867FCC5967B80E795CD91C6E9623EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:44 +0000
Manifest this update: Thu 16 Apr 2026 23:00:44 +0000
Manifest next update: Fri 17 Apr 2026 23:00:44 +0000
Files and hashes: 1: X_VAzsonJf2-Y0J7PUgtiVvr18s.roa (hash: omFujTcefEd3WWyYkvlLAE/INtwxFEvZh0pqgOeoURc=)
2: YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl (hash: l0xQA1ERFqdkCSmxkOos51UYX1Xp9OqeoVcyUQ0yo48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:7f:cc:59:67:b8:0e:79:5c:d9:1c:6e:96:23:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612aef4c7bfe7e072f62d2dd505ab57e37ea385e
Validity
Not Before: Apr 16 23:00:44 2026 GMT
Not After : Apr 17 23:00:44 2026 GMT
Subject: CN=161f3f4ae76e11cb1671eb635e8e8530c3f7f99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:c7:d5:b1:fb:a8:f3:61:39:f1:5d:9b:a7:
b7:87:05:eb:d8:ff:5f:db:61:f1:00:9c:ae:3c:dc:
db:36:fe:fe:a8:a6:99:48:69:01:1f:d3:8c:40:41:
0c:aa:50:9d:57:54:71:1a:ad:5d:66:39:a9:fe:ce:
61:7d:6e:2f:0d:84:7f:ca:10:6e:c2:52:2a:2c:81:
d6:aa:ec:ef:b3:95:54:19:4b:37:a2:79:e4:1b:3d:
55:57:34:c3:54:32:a9:95:21:37:55:9c:a2:3b:b7:
4a:01:92:a7:25:60:15:70:29:8f:91:b1:b3:08:7a:
3a:80:5c:9b:b1:ed:2e:54:6b:e6:c1:fc:5a:8e:95:
a2:8c:2e:ef:29:93:8b:9b:2c:33:76:7d:6f:f0:f5:
59:96:e7:5e:b3:e8:02:c5:bf:6c:d4:14:60:f5:79:
27:f4:cc:b2:b1:2b:77:ad:b4:36:94:6e:15:5e:a9:
99:e0:36:58:2d:9a:1b:cc:8c:1d:70:90:b5:64:88:
1a:62:97:2d:32:6c:c6:73:9f:e0:3f:57:97:5e:f3:
2f:89:03:68:ff:0f:ae:46:ac:e6:7a:0c:ac:ec:e3:
dc:72:6c:da:a5:64:aa:e9:90:f6:22:84:3c:fc:56:
59:ba:31:df:73:71:87:ec:2d:10:80:41:44:4c:70:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1F:3F:4A:E7:6E:11:CB:16:71:EB:63:5E:8E:85:30:C3:F7:F9:9F
X509v3 Authority Key Identifier:
keyid:61:2A:EF:4C:7B:FE:7E:07:2F:62:D2:DD:50:5A:B5:7E:37:EA:38:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSrvTHv-fgcvYtLdUFq1fjfqOF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7207a9-27f4-44ec-bf78-a207c7a19ed2/1/YSrvTHv-fgcvYtLdUFq1fjfqOF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b5:d7:e0:b1:e3:6d:1b:56:0c:ef:0e:0d:c3:dd:44:de:b7:
14:b1:6f:6e:c7:1e:68:b8:42:7c:14:7f:28:1b:f0:df:1d:94:
a5:66:d1:bc:5f:3e:9b:90:ec:0f:5c:bd:33:af:98:e9:3e:39:
81:9e:ed:80:a4:05:95:44:4b:e8:d9:f4:4d:fc:d6:c4:da:35:
d2:ac:ed:6a:2f:50:22:ed:59:7a:ef:b0:5f:88:19:61:94:6c:
b9:b2:44:e2:5c:1c:72:41:a8:1e:ba:f2:7d:5d:f7:0a:51:37:
44:7b:db:8b:cd:e9:7b:6a:ce:2a:f3:25:ae:a6:b4:e7:ae:fd:
00:a8:a0:b7:f5:2a:f0:7b:c4:44:70:61:61:81:82:d6:1e:e5:
17:0a:e6:7c:21:8b:f9:bf:90:e6:b1:6c:4e:cc:0a:10:68:b8:
8b:cd:89:79:0c:51:09:e9:c4:3b:d9:8c:27:56:21:68:6f:29:
a8:40:2f:f3:d1:66:fb:b7:0f:3c:50:34:8f:dc:58:bc:f2:51:
c2:3a:21:a3:ab:23:f9:a2:eb:4a:ce:13:d6:37:98:a9:75:38:
e5:e1:ad:d8:27:25:a8:4f:bf:65:26:0b:86:0c:13:45:96:4c:
fe:7d:7d:34:79:32:8c:80:7d:6d:4b:69:22:64:27:e7:68:15:
aa:94:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:10 2026 by rpki-client