Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
File: Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft (raw, json)
Hash identifier: gMPGgL0A5LAulOZXyJpB/VNQ37/WqSZ3D4Yowhajd+0=
Subject key identifier: B9:54:9A:72:FC:17:60:44:1D:A5:CA:99:4E:99:B5:6A:FC:42:D1:C8
Authority key identifier: 62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
Certificate issuer: /CN=62cbfa24a488327b730775e329d51a1921612531
Certificate serial: 019D98BD59F1C630A9C77FDAC110361551EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
Manifest number: 1429
Signing time: Fri 17 Apr 2026 00:00:39 +0000
Manifest this update: Fri 17 Apr 2026 00:00:39 +0000
Manifest next update: Sat 18 Apr 2026 00:00:39 +0000
Files and hashes: 1: 8x2lbzATa3H4_U7d408bsEgZzKw.roa (hash: 53Kid1ogHSH7N2teYQIc9O6E1We0YD/42VIa5q1GrYE=)
2: Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl (hash: RcgNbUTE9pxn7l/SGIO6yJBfNRq9s6cPcWH8nW5HCd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:59:f1:c6:30:a9:c7:7f:da:c1:10:36:15:51:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62cbfa24a488327b730775e329d51a1921612531
Validity
Not Before: Apr 17 00:00:39 2026 GMT
Not After : Apr 18 00:00:39 2026 GMT
Subject: CN=b9549a72fc1760441da5ca994e99b56afc42d1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:ae:ed:7d:d8:f2:d0:84:77:94:d7:50:90:
e9:58:be:0c:a8:01:a1:31:16:66:9a:5b:1b:42:70:
76:55:6a:d1:52:bd:32:b6:dc:4b:0f:db:55:d3:83:
2e:96:f2:8c:08:b1:c4:b4:32:c6:a5:d1:59:8b:b5:
28:cb:99:a9:00:ee:f2:86:39:a6:a7:93:7c:cb:5e:
72:04:68:e3:5f:4d:1a:80:b6:52:21:69:77:ec:86:
57:b1:bb:68:0f:ec:51:ee:a6:52:0a:e9:25:d0:f6:
1c:32:78:f1:26:c9:85:74:b2:cf:4a:70:0c:dc:e1:
e7:17:4b:ab:7e:90:aa:25:1d:98:32:42:a6:5b:9f:
d3:28:13:e9:af:7a:ef:47:c1:6b:93:11:9d:c9:06:
99:61:9b:ef:f2:96:05:52:2d:53:ae:f2:4a:c8:08:
3b:7d:2a:c3:a6:65:01:02:a6:43:e4:98:d5:d0:43:
55:d8:3e:ae:fa:38:fb:63:c1:50:ae:a5:8f:5f:19:
7b:cd:93:08:61:29:05:88:75:28:fa:0c:0a:8f:a9:
0b:ac:67:10:d9:0e:15:e7:be:a7:e3:24:7e:6b:10:
08:56:28:b6:84:e5:41:5d:1e:81:34:85:ce:7e:10:
3b:b5:1c:cf:2d:e6:ba:68:66:36:ec:4c:d0:13:a7:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:9A:72:FC:17:60:44:1D:A5:CA:99:4E:99:B5:6A:FC:42:D1:C8
X509v3 Authority Key Identifier:
keyid:62:CB:FA:24:A4:88:32:7B:73:07:75:E3:29:D5:1A:19:21:61:25:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ysv6JKSIMntzB3XjKdUaGSFhJTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/15fee7-d411-4c1d-a7cd-570d17f9f2a5/1/Ysv6JKSIMntzB3XjKdUaGSFhJTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ac:b9:d2:04:e5:b1:20:18:1b:29:5a:a8:e6:3f:9e:24:cb:
21:13:17:e0:2d:61:72:f9:d4:5d:0c:89:0e:5a:62:aa:2a:39:
ac:f1:0a:1d:c0:c0:d1:6c:9e:91:5f:df:7b:8c:47:06:2f:ba:
ce:6a:e6:57:4d:34:cf:6f:c0:c9:3e:4d:45:e2:02:7f:97:a6:
7b:63:3d:35:8a:68:fb:c0:2f:b9:72:99:57:bc:64:fa:eb:b2:
7a:0b:a0:2d:cd:b4:f2:f6:5b:3c:1b:8f:41:9e:79:86:4d:54:
21:e2:bf:74:a3:f2:09:c4:e1:5f:f1:a9:5e:a5:48:a2:fb:bb:
aa:81:ac:0b:52:c0:a0:a5:7d:b0:4f:8a:57:d3:04:65:2d:f7:
1b:4d:e8:32:2d:db:8b:c5:7e:26:26:0c:93:38:93:a7:42:b0:
64:10:a0:6e:22:3b:98:04:dc:c2:eb:37:f2:c1:e5:a6:3d:8c:
ed:7c:38:0b:5d:28:9b:13:aa:ba:00:36:a3:85:38:3b:17:ed:
df:fd:8e:16:82:1f:a4:6c:df:92:5b:2e:ab:7a:2e:52:94:93:
39:ee:00:04:bb:28:64:9b:83:b0:b7:ac:9b:ca:b4:ae:90:52:
8f:c2:1b:14:fc:d7:db:62:24:6e:fa:2d:39:ea:c9:ca:25:42:
56:1f:50:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:38 2026 by rpki-client