Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: teJnZmwqdQ0+rNeuVxeIIZMATXY5iUDfPhEvboB7M8w=
Subject key identifier: 13:4B:72:40:07:D5:5B:B1:62:C9:D6:29:F5:8A:26:FC:B2:E0:74:B4
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019D39E5B260A52FECE87EA2933D3BAD5E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 18FE
Signing time: Sun 29 Mar 2026 14:00:47 +0000
Manifest this update: Sun 29 Mar 2026 14:00:47 +0000
Manifest next update: Mon 30 Mar 2026 14:00:47 +0000
Files and hashes: 1: 1ZMsVQGAWg2it-JAEuC_i_hCIyc.roa (hash: ZLAKov/0hadhlGoY/KwpJKZ7o/B0xm108yvYfzR8PiE=)
2: ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa (hash: drk6qrOhljg5/CDI9FQXdFU1YNYaPplLqtldYNHdpKY=)
3: WhS9iKVaUFg38uZaHtFMBX5xGXA.roa (hash: AUcEJ+4tf05fJdicnZl50BMdPlLmWRqkiu+wHdC3Q9g=)
4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: m7na3Qyqm9oam7ZXGU7oqRSXgcmz4cCzmjQV0OBQWVI=)
5: hxC2jpRlaIaM98LvLVjeqhOV9cw.roa (hash: TgtubXCf93hQu/hiX0qxTtjIPY7Fb9Uk/YixVE2mPWw=)
6: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
7: y3D_6T7LItZVGNAAIM2oiQLXK4k.roa (hash: wbaR1iGKJRGc1NnOpfqCm7AMxI+gqPXjh0axv9TvfKE=)
8: yM-BRopjf51qtduhIy15MptpHyA.roa (hash: cYXBlJN/z+ptyvUxLCa1zDp3B5VQu0MKslmhphO0gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:b2:60:a5:2f:ec:e8:7e:a2:93:3d:3b:ad:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Mar 29 14:00:47 2026 GMT
Not After : Mar 30 14:00:47 2026 GMT
Subject: CN=134b724007d55bb162c9d629f58a26fcb2e074b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5a:11:f2:8c:07:99:97:cb:f1:8f:87:89:6d:
be:89:4a:36:8f:fb:7a:ba:bc:e7:ce:23:e9:64:19:
71:25:a5:42:c0:4d:cf:8a:8c:74:d9:be:41:a7:9b:
6a:0f:fe:c2:ab:f4:2a:2d:de:c7:fa:a8:83:81:6b:
7a:1e:fc:7f:5f:d7:a3:10:cb:04:ac:6a:b8:f3:8d:
04:fe:65:aa:b3:10:4b:1f:58:d4:b5:9c:61:75:41:
19:e4:5a:53:cb:3c:e4:c0:3e:a6:b1:2b:be:01:59:
f4:7f:18:ca:a1:bb:9d:0c:ef:39:0e:68:e0:56:5f:
7a:8d:51:47:39:b6:1b:22:97:fb:01:d3:b2:3a:25:
ae:67:58:6e:7a:09:d4:09:f0:b2:19:82:f5:c2:ac:
de:fc:33:0c:c8:b6:51:a4:a7:c9:ec:ea:19:f2:19:
f5:c1:cf:ef:a4:21:be:34:8a:8d:48:9b:16:5f:fb:
ee:3a:5c:93:6c:5b:d2:c2:08:be:75:3b:63:d8:0f:
c5:1a:06:77:82:9d:dc:bb:65:42:a7:00:71:7e:7e:
54:92:d4:40:86:c4:89:24:6a:88:07:48:49:71:e2:
34:38:13:0e:d8:58:41:c6:af:03:48:24:35:ff:5f:
66:b7:47:a9:1c:46:b3:3c:87:38:88:5d:ca:0d:8e:
64:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4B:72:40:07:D5:5B:B1:62:C9:D6:29:F5:8A:26:FC:B2:E0:74:B4
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ce:81:5c:fc:f5:6f:b0:2a:39:b3:66:8f:94:60:97:38:3e:
81:a4:5c:0d:61:3f:f6:5d:c9:63:9a:fc:02:eb:4c:3f:17:e6:
04:ba:c8:ff:dd:44:32:21:a0:67:a3:13:1b:1c:b1:58:ce:dd:
67:14:34:94:dd:ba:bb:7d:8b:52:55:53:81:e6:57:df:2f:ec:
f5:6e:90:30:25:f5:aa:20:db:c8:32:5f:61:19:fd:8f:c7:8b:
ba:2a:9b:de:bd:67:e8:3d:a9:82:70:c3:49:98:b0:44:4d:cd:
02:b7:df:1f:9d:31:24:c8:d2:4c:99:33:ea:01:ea:5b:d4:d2:
85:20:f4:d2:a4:e4:73:d9:db:35:3c:06:bf:6b:5b:90:26:76:
27:d0:13:2b:6d:a9:b6:91:26:24:f4:77:32:4e:51:05:cf:36:
fa:ad:42:dc:e6:d9:ad:8f:9d:9b:07:d6:87:21:9c:ad:57:bf:
44:09:45:c1:0f:fb:06:f8:3e:5e:5f:6b:68:9b:01:6c:e9:b0:
65:f3:1a:1c:c2:cd:3d:96:22:ce:09:a2:09:e6:a6:90:99:68:
b6:69:f4:11:d6:51:33:d7:82:a9:1b:2e:65:c6:cf:64:8d:e4:
6c:98:1f:7e:b3:6c:89:c5:50:fc:e9:cc:67:c5:d7:e0:2a:4a:
7b:8c:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:05 2026 by rpki-client