Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
File: YLlhXfjGWdrIzAh70BHUtf83Pio.mft (raw, json)
Hash identifier: Vi1Q48urJ2vv27y4ZlWEvrEuCCKuQlTHNntdIXqpBJU=
Subject key identifier: 48:FD:B6:9A:5E:15:DF:75:48:EE:1D:5F:D3:7B:BE:6C:38:91:7F:53
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 019DCDBE00BD48CA3B5AE75D3DE0248CE1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 07:01:14 +0000
Manifest this update: Mon 27 Apr 2026 07:01:14 +0000
Manifest next update: Tue 28 Apr 2026 07:01:14 +0000
Files and hashes: 1: YLlhXfjGWdrIzAh70BHUtf83Pio.crl (hash: omcYG7PY7tjPco1i4CXwoMkKNE9DUeGWJXcoaaYIjBA=)
2: aEsbh_haMhsqIB5wCxd9t5IabFM.roa (hash: Ne5BDRQ7SBRIMJmF2NPdjnl9j7TlWo9N5JJSWBtw7bI=)
3: yrgQph9zHMA3wU0ZObxjZhTJQrM.roa (hash: XV/X6CYSDEZtr00aa1x8ls6ykfziXhFe1fHOXXDEkhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:00:bd:48:ca:3b:5a:e7:5d:3d:e0:24:8c:e1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Apr 27 07:01:14 2026 GMT
Not After : Apr 28 07:01:14 2026 GMT
Subject: CN=48fdb69a5e15df7548ee1d5fd37bbe6c38917f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:9c:65:f1:6a:18:f9:16:12:3f:89:90:81:
06:90:8e:0b:71:2b:39:49:37:05:6b:46:cb:50:95:
e3:4a:6b:80:71:28:6d:85:e2:5d:ac:bb:69:6b:87:
85:e0:44:0d:f9:14:80:6a:53:ff:ca:d5:4c:42:57:
99:fe:6d:85:35:3b:d2:d0:97:c2:bf:a5:3b:12:4d:
65:64:4a:d3:e8:ac:8a:d2:76:eb:d1:17:2b:2e:c8:
97:23:b0:01:d5:75:05:8f:6d:0b:7e:db:50:5c:12:
3a:a1:1f:90:38:77:ad:ef:05:51:1e:cf:4c:ec:23:
62:9f:f9:3d:4e:9f:11:a5:17:de:c6:36:8f:e1:f2:
f2:0d:fc:cd:fa:dd:ed:30:ab:be:b4:e7:18:51:10:
95:55:a5:68:e4:7d:8c:4a:98:9a:dc:a6:7f:25:88:
e0:8b:03:b1:59:cc:96:cc:55:0c:2d:d2:86:34:c7:
ef:af:76:ee:28:6e:07:33:9c:24:76:a2:70:c7:f6:
67:71:8a:5f:d9:66:f1:98:46:9c:90:d9:5e:2a:4d:
74:b6:cd:af:30:f3:d3:50:cb:3a:52:4f:44:de:76:
bd:22:88:a3:81:bd:78:c7:3c:2a:54:19:b5:82:4e:
16:71:7c:34:60:91:d0:6f:14:3f:e5:d0:94:13:a3:
79:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:B6:9A:5E:15:DF:75:48:EE:1D:5F:D3:7B:BE:6C:38:91:7F:53
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:25:fe:50:6e:4c:65:d5:e2:8b:b9:e3:73:74:9a:1c:c7:02:
26:0d:70:c9:1c:e7:12:0f:9f:39:79:bb:7b:17:f4:5c:0f:c7:
35:68:a0:fc:03:60:4f:d7:ff:94:3a:16:d6:95:c0:f9:2e:9d:
b8:8c:22:15:b7:b6:0a:b4:db:90:c9:7e:8c:f9:d4:b4:f8:03:
0d:01:83:d8:46:22:87:85:01:1a:ff:41:8c:1e:4b:3b:30:f7:
f2:bd:b9:e4:38:0c:82:e8:ab:12:e5:cc:d2:d6:e2:3c:43:15:
56:68:ea:40:d3:18:45:1e:5d:5a:0a:bf:8e:96:10:6d:5e:ce:
e7:a1:a6:3d:0b:4a:b8:7a:bf:27:75:48:91:0e:e3:e4:c6:95:
c7:bc:4a:14:26:88:6a:6c:79:c2:ab:2a:08:b6:13:97:80:67:
81:7f:8d:5b:50:fb:36:0d:da:5b:f9:12:fe:4b:89:7c:32:32:
b3:5b:12:e5:9a:a2:d2:05:30:0b:24:cc:d3:c8:b8:44:21:ba:
2b:47:96:27:bf:9f:71:47:86:cd:62:53:66:fb:d5:49:6c:68:
30:73:f4:92:86:2f:b2:12:1a:9b:3e:5c:cf:5f:29:c2:63:e3:
4b:07:ee:af:56:ae:4e:64:82:c6:6a:e1:6c:82:48:c4:ed:ae:
c7:c3:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:20 2026 by rpki-client