Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
File: YRBtLf9xFvNat_oQJ1pF44O85SM.mft (raw, json)
Hash identifier: kV6sC3dWb4Ms4CRSjta0tsY82jmbhGCQcIQG9Jf3XGk=
Subject key identifier: DF:36:16:D3:6C:C7:79:37:59:96:80:F1:29:D6:6B:2F:3B:03:AB:02
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 019DCED0648A0772DD999864A88C025B5949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
Manifest number: 17B2
Signing time: Mon 27 Apr 2026 12:00:56 +0000
Manifest this update: Mon 27 Apr 2026 12:00:56 +0000
Manifest next update: Tue 28 Apr 2026 12:00:56 +0000
Files and hashes: 1: YRBtLf9xFvNat_oQJ1pF44O85SM.crl (hash: 4/0RiQ/ZoxCVRq7WPtgwYvG1A2LPvVwOYKPIoIVGKJw=)
2: ds0HwgnE1wK4tusqij2iDAo4C4w.roa (hash: AV7GAfjJkTxxVqb/RhgxTIb2SMDdBmXXWKpB5XXq9g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:64:8a:07:72:dd:99:98:64:a8:8c:02:5b:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Apr 27 12:00:56 2026 GMT
Not After : Apr 28 12:00:56 2026 GMT
Subject: CN=df3616d36cc77937599680f129d66b2f3b03ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:c4:21:49:62:9d:28:8b:b9:ce:13:94:d9:
e9:6f:92:e9:c6:f3:4b:ec:fe:be:fd:b5:4a:e5:0f:
51:62:98:f6:11:08:ee:92:8e:4b:4d:60:24:d4:0d:
b5:c0:be:59:c9:9f:bd:2f:d8:0b:51:72:d0:12:af:
ac:f6:9e:ab:91:c0:ac:fb:21:c1:aa:b6:7e:a3:41:
74:22:12:2a:f5:23:7a:45:ab:69:a3:d6:9b:1b:7d:
7e:e6:97:a1:54:f9:a2:c3:e4:9d:0e:f5:26:b0:20:
e2:46:82:05:23:1a:14:bb:90:7d:63:6a:26:b6:61:
a7:48:ce:82:2b:57:bc:45:86:68:f8:ae:5d:f7:de:
62:89:b7:b2:74:c9:c6:d0:ee:d6:9c:1d:19:93:a5:
d1:d3:17:99:1c:ab:55:dc:86:2e:06:3c:18:87:4b:
75:36:a1:0b:8c:3d:a8:5a:6f:17:b0:e7:b6:92:4f:
d7:3c:e3:32:0e:37:e7:ed:b0:a7:7c:7a:ec:8f:90:
50:93:56:79:0d:ee:75:88:50:17:e3:7a:a6:9f:30:
37:63:67:ca:61:06:9f:ab:51:70:f2:a2:65:e9:d8:
21:24:b9:9a:aa:2b:7b:3d:8b:70:f3:a9:03:59:56:
4d:a1:0a:1d:81:aa:bf:5c:b7:97:f1:af:ee:02:1f:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:36:16:D3:6C:C7:79:37:59:96:80:F1:29:D6:6B:2F:3B:03:AB:02
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9f:77:22:ab:6d:ec:65:29:8d:53:6a:58:36:12:5b:9e:89:
db:c7:47:26:4a:00:a5:96:54:47:44:56:7f:94:83:d7:4c:eb:
0e:04:5a:4d:52:31:c3:5b:25:ba:70:98:1f:d0:f4:17:36:19:
35:a8:e6:23:de:d5:96:26:56:e4:86:22:b1:1a:b5:92:6e:f2:
66:bb:d9:23:f5:36:44:2f:39:4b:4f:82:a6:91:81:48:9f:65:
2f:dc:57:5e:78:a0:6f:b7:34:0b:b3:6d:cb:61:96:1f:5a:be:
41:24:c8:f1:7a:60:6c:99:47:fb:a2:f0:f4:2b:d2:6f:02:ab:
c5:a5:13:33:fe:d2:76:3c:8c:db:c3:27:df:b6:a6:32:d5:36:
06:d4:aa:32:aa:24:3f:69:59:ae:7d:a2:77:a8:d6:84:4d:36:
c5:0a:fd:d2:6c:8a:b6:7e:bb:3b:57:1c:98:49:9d:33:a9:2b:
81:ee:b1:43:3c:e8:33:e0:b2:8c:21:15:83:5a:63:db:7e:84:
30:25:31:cd:61:bd:c9:ff:39:a8:e4:4d:f6:04:43:71:b6:b2:
55:4e:20:a0:0a:b1:0d:01:da:97:1d:88:5e:82:1f:5d:bf:80:
f3:ce:4c:70:86:f3:9c:7a:63:51:5c:07:ce:0c:ba:25:04:0c:
05:8a:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:42 2026 by rpki-client