Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
File: YuJWVsULslT1gHfRuWbkdLFjR68.mft (raw, json)
Hash identifier: FRqBnY5E9n88PrbEr0CvvZBW2RT6R9x2ftVIn0Ibcqg=
Subject key identifier: BF:B9:C1:54:EA:31:35:44:8D:20:5A:51:B6:5C:AC:C5:A3:F4:F2:35
Authority key identifier: 62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
Certificate issuer: /CN=62e25656c50bb254f58077d1b966e474b16347af
Certificate serial: 019DB27D1F06FE80D5993E0A5B28E6FCAB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
Manifest number: 18CE
Signing time: Wed 22 Apr 2026 00:00:37 +0000
Manifest this update: Wed 22 Apr 2026 00:00:37 +0000
Manifest next update: Thu 23 Apr 2026 00:00:37 +0000
Files and hashes: 1: WDz5bqq9s7Sot6DZTyns7ujP_G0.roa (hash: jp6a/AgGzZ0JdGjudIFSMOs/t8/efE23HGLQbGbVGxE=)
2: YuJWVsULslT1gHfRuWbkdLFjR68.crl (hash: sELvvhpP2f5I7HiAKsTEmWD8D1/YARx0gRnfW2889bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:1f:06:fe:80:d5:99:3e:0a:5b:28:e6:fc:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e25656c50bb254f58077d1b966e474b16347af
Validity
Not Before: Apr 22 00:00:37 2026 GMT
Not After : Apr 23 00:00:37 2026 GMT
Subject: CN=bfb9c154ea3135448d205a51b65cacc5a3f4f235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:e6:d9:38:e0:f5:4b:f1:07:39:f5:58:00:
92:b6:9b:95:f7:46:7f:fb:1b:34:8d:d0:45:dd:1b:
5c:1e:78:7f:a6:4a:e2:6d:a8:5a:a2:1c:f6:14:7a:
31:ed:92:2d:07:2f:9c:9e:6d:75:eb:ce:03:c8:6c:
f5:b9:2e:ec:70:3c:d2:49:ee:14:39:c4:d1:80:51:
bc:ee:00:56:a4:a9:20:eb:64:6d:46:72:8d:b3:fe:
a7:87:42:b7:94:bc:df:10:94:cb:ba:53:94:28:53:
a0:ca:5c:61:bd:fd:e5:ef:86:47:f5:a8:25:e4:b3:
26:bc:6b:87:52:fa:a3:fe:76:7f:89:4f:c1:0d:e4:
7d:99:53:f7:f0:87:ce:c6:93:39:08:3a:80:4f:25:
2a:5b:35:6e:09:bd:eb:f0:6e:fc:14:a3:da:0f:66:
d2:52:5c:d1:f2:ae:28:5b:b8:89:e1:1b:75:32:13:
c9:45:a0:45:c5:c5:83:89:36:76:bb:d6:a1:ae:e6:
cb:d1:cb:a6:94:bb:0c:82:5d:26:2d:e7:94:a8:8d:
9f:9b:19:c9:25:29:f9:fa:df:f8:f6:cf:8d:cf:d7:
ee:59:82:60:fc:f0:02:45:f2:fa:39:f7:57:d0:67:
cc:c1:79:96:01:71:25:a5:ff:93:c9:14:74:83:0c:
62:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B9:C1:54:EA:31:35:44:8D:20:5A:51:B6:5C:AC:C5:A3:F4:F2:35
X509v3 Authority Key Identifier:
keyid:62:E2:56:56:C5:0B:B2:54:F5:80:77:D1:B9:66:E4:74:B1:63:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuJWVsULslT1gHfRuWbkdLFjR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/424685-d8a9-4368-8d3c-c2064b0f9ab9/1/YuJWVsULslT1gHfRuWbkdLFjR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:1f:ad:2a:09:7c:0e:bd:5e:7d:d6:ba:60:ab:8c:3e:6e:
a7:1d:85:3e:c5:c3:05:3c:b6:b6:e7:e2:bb:39:c6:b5:d4:f8:
09:ee:74:5d:0b:5b:b5:ba:6a:e0:a2:62:45:c3:e7:91:df:20:
57:ad:9c:6c:c4:46:8f:31:a2:33:3d:75:e8:f0:37:a5:55:35:
ab:aa:09:4b:05:d4:84:46:c5:c4:02:9d:b9:f8:51:c5:78:e2:
70:75:c3:80:4c:10:ec:c1:3a:18:e0:fb:a5:56:90:29:4b:8b:
f8:54:87:12:38:c1:7e:e8:aa:e1:6e:a8:33:67:3b:f6:4c:e1:
39:f2:74:5a:2a:22:84:35:87:9b:79:1b:e3:96:fa:93:75:5b:
a0:5c:f1:1d:4e:b7:95:91:3d:57:02:48:2c:47:1b:0b:4f:07:
3e:1a:16:ab:07:77:3b:ba:80:64:a1:21:cd:b1:64:9a:86:3f:
d1:44:4a:30:c0:46:fe:4a:22:bc:67:cb:44:a7:2f:0c:7d:28:
58:41:f5:bb:31:bf:56:17:b5:31:df:bf:ca:ba:b7:fc:a6:9a:
e7:a1:94:cb:79:f3:95:1f:ec:dd:9b:90:49:69:80:53:00:b1:
96:6c:d9:82:33:0a:f8:91:bf:e5:05:0c:9e:b0:07:40:15:87:
22:86:78:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:21:05 2026 by rpki-client