Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
File: _yBr0QgxynN4dWteFhc4lqYLAZE.mft (raw, json)
Hash identifier: wwjzUcLTPzmj3FiktHq4EJakTDf84tiAVAYHzlosk74=
Subject key identifier: A6:94:C4:A7:78:20:44:FD:19:25:11:CA:5A:29:A5:F1:79:71:CE:2A
Authority key identifier: FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
Certificate issuer: /CN=ff206bd10831ca7378756b5e16173896a60b0191
Certificate serial: 019D9AAC0F609C5227D45489AC3396376D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
Manifest number: 1081
Signing time: Fri 17 Apr 2026 09:01:00 +0000
Manifest this update: Fri 17 Apr 2026 09:01:00 +0000
Manifest next update: Sat 18 Apr 2026 09:01:00 +0000
Files and hashes: 1: _yBr0QgxynN4dWteFhc4lqYLAZE.crl (hash: a5NeNixkHV2+QIUqH/zTOnRQlkwWYU0lEDUL4lJFzEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:0f:60:9c:52:27:d4:54:89:ac:33:96:37:6d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff206bd10831ca7378756b5e16173896a60b0191
Validity
Not Before: Apr 17 09:01:00 2026 GMT
Not After : Apr 18 09:01:00 2026 GMT
Subject: CN=a694c4a7782044fd192511ca5a29a5f17971ce2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:75:16:25:97:65:51:d2:0c:44:51:01:6b:
b5:30:4c:bc:2b:42:42:3d:de:9d:ce:9f:6c:3c:13:
cb:18:e3:21:fd:66:97:4e:4f:9c:a2:55:77:6b:35:
da:eb:13:5d:bc:1c:4c:bd:d0:d2:65:2b:9d:70:b6:
22:63:23:df:f9:bc:a7:9b:91:2b:88:00:64:c2:f2:
28:0c:1d:8b:d1:77:c7:c4:2d:49:5e:75:4f:c8:66:
80:78:bb:82:46:c1:7f:a3:8e:19:fb:51:c0:28:df:
3a:4a:32:6e:fd:79:4b:36:d2:cd:43:c3:38:ce:62:
47:33:c2:a6:91:d4:b7:98:fe:a1:97:30:19:e8:fd:
5b:0b:92:58:30:7b:22:fa:72:d7:8e:35:4c:c0:41:
ca:94:af:a7:cc:87:91:b8:7e:78:b7:bf:93:d5:17:
bb:8c:6d:84:f7:08:dc:f9:a2:56:54:89:76:d6:cb:
78:84:76:5a:25:3e:70:9e:d0:4a:2b:54:7c:ac:93:
d8:7b:18:8e:b9:ab:aa:a3:66:1b:d1:38:44:e1:8e:
77:67:7b:62:dc:66:18:ac:13:0b:fd:e1:35:c7:63:
68:6e:0e:e8:55:bf:68:4b:b5:88:b6:6c:b9:7f:d5:
a4:4d:31:97:c9:39:c2:4a:32:a9:54:33:65:b2:19:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:C4:A7:78:20:44:FD:19:25:11:CA:5A:29:A5:F1:79:71:CE:2A
X509v3 Authority Key Identifier:
keyid:FF:20:6B:D1:08:31:CA:73:78:75:6B:5E:16:17:38:96:A6:0B:01:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yBr0QgxynN4dWteFhc4lqYLAZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a35d37-7447-4cf4-982f-50f398bb26e9/1/_yBr0QgxynN4dWteFhc4lqYLAZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:20:3f:90:bc:ee:1b:57:b7:71:e0:5a:62:23:12:e9:3c:08:
82:cc:a1:bf:8e:ec:c4:21:3c:94:1d:48:18:a9:1d:f5:42:a8:
5e:24:38:56:c1:af:c2:3b:4f:8a:d6:ef:1d:46:84:7f:16:a6:
c4:b1:a0:f0:e8:32:2a:7f:fd:81:a1:6f:5e:e6:04:5c:da:b0:
3c:ef:f3:1a:19:83:f5:88:24:47:95:dc:68:3b:5d:3a:88:44:
8b:e6:9f:b8:0b:0b:42:b9:a2:e6:5c:79:05:27:c8:0d:32:16:
f6:29:13:83:03:53:cf:77:5f:6e:ac:96:53:95:41:fd:0c:ef:
23:80:77:75:24:12:8f:0a:4f:3e:b7:47:48:9d:5c:fb:c9:6a:
c7:b1:d6:51:0c:46:5f:8f:d0:2c:ac:3f:8f:50:7a:5d:3f:a1:
ed:1f:17:c8:f8:93:63:ab:76:01:92:c2:0b:65:5e:a5:89:46:
93:22:5c:a8:cd:7f:89:18:5f:7a:25:a3:50:39:31:c7:cb:4a:
c6:1d:bb:97:a2:1f:c4:86:de:ec:c2:fd:f9:ae:0b:1c:d0:c3:
06:50:42:a2:5e:49:34:b6:dd:07:93:d9:a7:91:3a:73:e5:70:
6e:52:cd:b0:bb:6c:8b:49:22:20:6d:97:47:34:a5:aa:13:a7:
4e:8c:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:08 2026 by rpki-client