Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
File: ykeSHkQwUhp3J4iME7x7jhBMvb4.mft (raw, json)
Hash identifier: boK3zIaih6LC1vckP9DFYlbJt4xla3rIGQ5k+3NAnGc=
Subject key identifier: 37:C2:36:32:1B:B9:D0:89:5B:EA:FB:CA:27:BB:D3:C3:6F:EC:05:66
Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Certificate serial: 019D99997455480A830D09F1D72AC3D9DA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
Manifest number: 175D
Signing time: Fri 17 Apr 2026 04:01:03 +0000
Manifest this update: Fri 17 Apr 2026 04:01:03 +0000
Manifest next update: Sat 18 Apr 2026 04:01:03 +0000
Files and hashes: 1: 9Nl9UE6iQ8BzYdxl7G-kytsnGM0.roa (hash: DwCSayZkRcTecU+QYNWzkQO84K94CzpgnweIdh3T7XA=)
2: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (hash: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4=)
3: ykeSHkQwUhp3J4iME7x7jhBMvb4.crl (hash: /FTUCmwrOtOz1sY3qYcPFL2HRhRF16FLHRWMTS1Opx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:74:55:48:0a:83:0d:09:f1:d7:2a:c3:d9:da:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe
Validity
Not Before: Apr 17 04:01:03 2026 GMT
Not After : Apr 18 04:01:03 2026 GMT
Subject: CN=37c236321bb9d0895beafbca27bbd3c36fec0566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:f8:51:c4:8b:34:86:32:32:77:60:9c:65:
02:58:20:9b:03:61:75:51:b0:7e:15:a5:5d:16:34:
01:03:63:40:0e:43:5a:de:e6:8a:13:7e:d0:f8:58:
f5:35:3a:1c:1b:c8:70:76:c5:a3:69:a2:ac:15:8f:
a2:b1:b1:84:23:05:ad:84:90:e1:49:cb:da:85:4e:
88:dd:9a:5d:4c:8f:69:90:3b:db:b4:cb:97:48:84:
23:1a:d8:fb:6c:5d:a4:a2:23:72:47:ac:1d:51:9d:
52:7a:3a:bd:40:58:06:c9:a1:1f:a0:95:86:b1:1b:
6a:70:bd:95:67:be:bf:31:47:1f:02:be:9b:42:ec:
55:65:02:ab:67:8e:c2:40:aa:a2:46:0b:f2:8b:e8:
99:ef:e6:60:2d:33:f9:74:b6:06:4a:34:0a:22:d3:
1c:9d:c2:62:26:29:ff:b9:55:ec:44:a5:a4:6c:ab:
5e:54:dc:95:f1:8f:eb:33:18:09:1d:3e:e8:c1:68:
fe:fe:30:bb:94:9f:bf:cb:55:1a:00:f5:65:2b:e0:
e7:b8:47:c8:a6:a6:7e:10:7d:e0:57:ee:e3:32:fc:
21:58:09:c3:29:24:c8:23:7c:cb:6d:5d:be:77:94:
b9:b6:d9:9a:f4:01:76:6d:b0:ac:ad:4b:41:e3:75:
13:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:36:32:1B:B9:D0:89:5B:EA:FB:CA:27:BB:D3:C3:6F:EC:05:66
X509v3 Authority Key Identifier:
keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:09:07:97:40:40:9b:8f:4b:5b:0e:a1:97:9b:bd:62:0e:34:
94:c7:e8:24:c8:e8:be:9f:e5:8a:7e:96:b4:4e:95:8d:21:ac:
82:ec:91:1b:a2:fa:ed:94:e8:f8:46:d4:3b:e1:cc:ba:25:7e:
ee:7d:66:2a:73:43:38:48:49:65:db:8b:f0:d4:26:50:81:9c:
2f:86:04:16:cb:a8:6e:ad:ac:22:a4:4b:67:23:37:ac:ef:e6:
3d:2f:04:45:bf:c7:c0:6e:24:c5:e2:81:c7:e4:de:45:c0:a6:
34:a1:fd:12:73:0f:4a:00:e5:56:f4:be:c0:83:4a:0b:21:d4:
06:d8:45:98:98:9b:b9:69:e6:94:2a:45:e4:5b:d7:ae:71:0e:
14:93:85:2b:80:24:f2:bb:c6:e8:d4:19:f8:63:d4:f8:5e:5b:
6d:07:65:95:1e:91:ce:b1:6e:a1:ed:f6:15:9f:c9:8a:db:40:
77:92:77:66:72:30:52:95:e4:dd:a8:05:66:c6:0a:5c:7c:0d:
32:94:ac:bf:d5:06:43:f6:a2:3c:ab:de:89:f6:76:9d:f9:cf:
fc:97:ad:2e:3c:89:36:18:ff:7a:c4:bd:96:48:92:89:74:28:
cf:67:1e:fb:d5:9c:76:c5:6e:ac:ed:12:ee:60:5b:0a:31:80:
8c:d7:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:30:07 2026 by rpki-client