Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
File: y0W24SUWoP1eur56eBEILzp0Y5c.mft (raw, json)
Hash identifier: sQ2gMENlaxsvEV3EJBiC0mrUZR2QuWRvF9rH6e4CqHg=
Subject key identifier: 88:94:45:E5:90:43:14:72:C7:8A:D2:2D:3B:4A:6A:A0:6D:CB:3A:19
Authority key identifier: CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
Certificate issuer: /CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Certificate serial: 019D9961DFE1B066CE3365DE0AE008B629EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
Manifest number: 0DEB
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: roqAbM7IFMtztGev_KtwvL7oqjk.roa (hash: ydWNX4Xyz0BhXsi9KhsO32ou0TfatpBXfKo/DL2J1qw=)
2: y0W24SUWoP1eur56eBEILzp0Y5c.crl (hash: rcva9YGasplT4Vwpxi1DPu1M4kbzX52syFjdYbkpLyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:df:e1:b0:66:ce:33:65:de:0a:e0:08:b6:29:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb45b6e12516a0fd5ebabe7a7811082f3a746397
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=889445e590431472c78ad22d3b4a6aa06dcb3a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:eb:1a:01:d3:a5:93:6a:cf:ac:4f:f5:67:
59:0f:78:1f:0e:5d:7b:ab:83:d4:2e:bb:79:a3:ce:
35:91:32:6a:ad:58:b4:6f:90:1e:ca:7d:d8:14:8e:
2a:36:6c:54:c2:d0:2f:6b:21:14:d0:f0:e0:a8:2b:
86:f6:84:be:ff:32:5e:98:9b:e8:b1:6b:f0:51:de:
0e:2a:66:67:3c:49:01:b0:fd:fb:32:8d:f5:9f:4d:
9d:9c:ed:38:45:46:7b:41:a3:68:3a:1a:a1:f6:a9:
a3:bd:dc:5f:1a:63:31:e4:64:fd:ee:3a:f9:87:22:
68:f1:0b:7a:55:58:96:83:e0:0e:a0:17:6c:d2:04:
e1:aa:7a:56:73:38:7b:0a:cf:19:4f:1d:fe:1c:69:
98:d9:2e:a9:05:d5:d5:5c:a9:ab:c5:51:f2:b0:0f:
49:d8:e9:1d:23:c3:f0:a7:32:71:10:ca:0c:5c:b7:
16:bd:8b:c8:6c:f5:76:9e:00:27:e7:e2:f0:55:33:
7c:e5:af:d2:3e:b1:83:d9:c4:d1:33:07:15:04:46:
80:88:d6:db:a8:40:d5:99:24:56:0b:7e:6a:e0:61:
2d:62:88:5a:a2:ba:98:53:a5:12:d0:99:09:5f:9c:
b5:79:36:68:7f:0e:94:c8:e8:ca:b6:0e:f1:b0:f2:
3b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:45:E5:90:43:14:72:C7:8A:D2:2D:3B:4A:6A:A0:6D:CB:3A:19
X509v3 Authority Key Identifier:
keyid:CB:45:B6:E1:25:16:A0:FD:5E:BA:BE:7A:78:11:08:2F:3A:74:63:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0W24SUWoP1eur56eBEILzp0Y5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f841d9-5505-4e3d-a2ff-f7c1899cd7fa/1/y0W24SUWoP1eur56eBEILzp0Y5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dd:a2:54:88:28:85:38:99:60:81:fc:13:c1:fc:0a:d9:ea:
39:f9:f7:27:46:50:69:a9:7f:a3:c9:7e:29:bb:2e:fc:61:c6:
2b:54:3a:14:75:93:50:6e:35:c3:d8:d2:0f:a0:78:f0:54:1c:
b9:8b:f7:ea:b8:70:f5:62:c3:d6:86:54:79:30:d6:e5:9b:46:
74:78:cb:9b:57:f7:94:5d:c8:0e:b6:9e:c4:4b:9a:cb:56:82:
49:7c:6d:72:a6:0d:76:83:be:d9:37:69:41:85:3e:05:8d:a4:
ac:00:5b:a3:dc:25:f9:f3:ef:63:e7:6e:11:8f:57:77:a0:4a:
35:e6:e3:2f:8e:87:87:24:9a:b8:06:81:f4:4c:fa:75:34:6c:
78:49:4e:e9:4e:b2:c8:0b:44:2c:e1:7e:05:af:b6:0e:ca:07:
6a:5e:e5:95:66:75:38:9a:7a:4e:57:67:79:2f:1e:e6:68:4e:
78:92:f1:1c:5b:2e:df:bf:c2:82:02:32:53:8d:b7:be:1b:6a:
ac:b2:ff:9d:75:19:19:f7:86:fe:98:4b:0f:88:e5:5e:df:2d:
31:09:14:c6:23:5a:c0:5c:9e:6c:72:ce:27:ef:56:d2:f1:b0:
2f:d5:bd:ef:e1:6f:65:aa:8f:e4:18:e6:07:35:db:a3:37:59:
82:73:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:54 2026 by rpki-client