Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: yB7Z21k7iDrDJcE82oUwT+EzpCwit1EPVv8haUy8rbA=
Subject key identifier: B1:61:A5:8B:3F:75:F2:5A:15:52:33:02:3C:45:64:D5:B0:70:45:A1
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 019DCDBDB616436BA9CA8B460A97EC9C08DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 0C99
Signing time: Mon 27 Apr 2026 07:00:55 +0000
Manifest this update: Mon 27 Apr 2026 07:00:55 +0000
Manifest next update: Tue 28 Apr 2026 07:00:55 +0000
Files and hashes: 1: 6PWOGz_KqRkb1zSJBPSYqwA3Obk.roa (hash: 2QNX7SpmW+cQkXWOHdllDN5APRnT1YGjOBVoLe9iX0U=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: tbeuxOcEfQtZ8UK+kNcxj8er2JR1zu6lAE15nSiQhNs=)
3: prAX8QK9sJ83-_8sb5b9uyxyLB0.roa (hash: MGpYm8TiAMHtR6UX1RiE9OEkX3HH/xl2rU9chl3K2sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:b6:16:43:6b:a9:ca:8b:46:0a:97:ec:9c:08:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Apr 27 07:00:55 2026 GMT
Not After : Apr 28 07:00:55 2026 GMT
Subject: CN=b161a58b3f75f25a155233023c4564d5b07045a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:d4:ae:c1:40:4b:83:ab:fd:10:ec:97:45:
35:55:bc:99:c1:72:34:26:a0:ea:6b:2e:f0:b8:7e:
a7:c8:ec:47:cc:91:80:0e:20:03:8f:8e:b5:ea:3e:
3f:39:0a:e6:e1:b8:fe:36:20:f0:85:d3:f5:ab:d1:
a7:2e:c7:2b:a5:e3:ac:50:70:93:b8:b0:68:0a:e4:
15:c2:f2:38:65:8d:a6:47:84:e8:df:40:32:35:36:
73:a4:65:2f:0f:65:68:e8:b4:e4:60:31:24:47:e8:
8d:68:07:b5:a4:c4:63:b5:b7:44:62:6f:b5:91:cf:
8d:d1:ab:ce:93:00:d9:02:2a:e6:42:24:11:47:5d:
2c:13:14:76:e2:f0:70:dd:df:d0:32:8f:27:5a:c3:
9d:59:61:3f:0e:b2:e3:ac:aa:29:60:8a:78:ce:ce:
62:9d:cc:a1:df:85:30:2c:98:1a:e0:da:19:8a:43:
90:e7:20:fd:e4:dd:9d:d0:8e:11:f1:49:3d:9b:d7:
53:ff:7a:97:bc:63:9c:f4:5b:05:12:48:8f:b2:1e:
c7:d0:2b:f8:5a:ba:8d:f8:45:fd:00:58:30:ab:24:
6b:95:3e:45:c9:4a:9e:ff:ab:02:9c:53:89:cb:52:
48:6a:a6:06:d3:f5:47:60:8a:34:c8:85:a3:76:af:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:A5:8B:3F:75:F2:5A:15:52:33:02:3C:45:64:D5:B0:70:45:A1
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9e:29:cf:fa:47:7c:29:fa:66:da:c3:d2:69:b0:bb:7e:d4:
7f:e7:f3:26:07:de:0c:dd:25:82:fe:3e:b9:bc:d9:37:32:c0:
16:ad:6b:26:87:78:c1:84:3b:4b:49:9a:5c:ef:e9:9c:16:1b:
22:d1:22:56:cb:da:f9:db:0e:73:af:87:94:5b:fb:66:d6:f4:
a6:e5:6a:4e:a0:4c:05:cf:dc:ab:24:87:42:05:2a:95:be:e3:
91:12:36:21:e7:90:6a:66:0e:d4:37:e1:4d:39:41:66:e5:8b:
77:31:8a:65:fc:a3:b9:12:f4:2f:e0:93:63:85:b1:da:2b:a8:
c2:88:c4:46:04:99:11:ad:61:47:19:21:14:fd:ce:1c:1e:1f:
77:58:f8:d7:99:2f:2b:23:46:ba:b6:ad:1b:96:31:b1:45:ad:
90:5e:41:51:9e:06:da:e6:7a:90:d0:f7:08:81:5d:22:45:ed:
7a:73:2f:d8:e9:65:9f:82:f5:dc:45:c3:f3:ce:76:11:14:0d:
74:81:ec:01:5b:45:ec:40:5a:6c:80:50:57:5d:cd:49:66:6c:
ab:db:ce:77:a3:18:d2:0e:bf:67:2c:42:68:82:a4:a1:e6:b0:
d8:87:90:2a:de:a9:d9:b3:7a:48:a6:26:5b:52:2c:3d:02:cc:
d0:b0:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:05:42 2026 by rpki-client