Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
File: yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft (raw, json)
Hash identifier: TJAAtiL2dQe2su/mLSF1Jk4mjJg70c+FZEjsRbG+snU=
Subject key identifier: 0B:9A:C4:C3:CC:CA:36:68:2F:17:1E:E9:A3:81:A7:7F:82:2B:E8:42
Authority key identifier: CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
Certificate issuer: /CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Certificate serial: 019DA11C048E2AE52A9C384162A76CF956D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
Manifest number: 05E1
Signing time: Sat 18 Apr 2026 15:01:00 +0000
Manifest this update: Sat 18 Apr 2026 15:01:00 +0000
Manifest next update: Sun 19 Apr 2026 15:01:00 +0000
Files and hashes: 1: vli7nBMVVsmnP9pgh14ogSpMo5o.roa (hash: vG8+FAZpGpoQ8aVKGYzKfazZEnPs10bdq4+yw4mlzf4=)
2: yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl (hash: JusEl/ugQtL8X2c3MfRsbfaMO5DbAEoCRonQb//9vrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:1c:04:8e:2a:e5:2a:9c:38:41:62:a7:6c:f9:56:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab11f493b31a5a2c1f23ce0e3004647a3242576
Validity
Not Before: Apr 18 15:01:00 2026 GMT
Not After : Apr 19 15:01:00 2026 GMT
Subject: CN=0b9ac4c3ccca36682f171ee9a381a77f822be842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:eb:4f:ff:52:28:ac:e4:8b:04:88:d0:60:
89:65:14:55:a4:71:de:b2:e8:fc:73:18:90:73:be:
7b:0c:3c:7a:ab:08:f6:0e:55:8f:ed:16:b4:9d:07:
97:ee:0d:a9:a2:6c:0d:58:ad:4e:89:dd:e5:c0:2e:
c1:64:2c:77:4d:d6:b3:f2:c1:65:79:05:17:f1:c9:
66:f1:2c:07:3d:0d:56:11:dc:23:61:fd:27:bc:9f:
d8:c7:33:1c:b5:fc:8a:75:da:d8:a7:b1:4a:7b:29:
bb:42:ad:a6:87:5e:0e:ce:0c:05:7a:2f:5e:47:61:
49:fd:10:55:91:87:9e:21:8a:f3:29:12:9e:6f:c4:
e3:92:8d:fe:b1:fa:ef:05:0c:35:5b:93:c7:7f:61:
e4:ac:08:1f:25:13:0e:81:09:16:82:3f:85:a8:81:
9a:0e:00:b8:48:ef:c3:2c:e8:66:30:ae:75:72:20:
8e:2c:b5:a1:b9:bc:c2:cb:90:f0:27:64:da:f1:3c:
f3:1e:ec:43:9d:5d:56:f1:53:1c:f3:f7:82:85:19:
0a:ba:11:e6:36:7e:fd:8f:ea:c3:7d:fa:24:0f:7d:
8d:8b:59:72:93:74:32:2e:18:61:b3:31:ce:f6:74:
1c:dc:7b:e7:61:b6:ab:69:d3:19:c7:33:15:a3:9e:
39:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9A:C4:C3:CC:CA:36:68:2F:17:1E:E9:A3:81:A7:7F:82:2B:E8:42
X509v3 Authority Key Identifier:
keyid:CA:B1:1F:49:3B:31:A5:A2:C1:F2:3C:E0:E3:00:46:47:A3:24:25:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrEfSTsxpaLB8jzg4wBGR6MkJXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/74d2ea-6e60-40af-a56a-151f6ed17691/1/yrEfSTsxpaLB8jzg4wBGR6MkJXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:56:f7:a5:55:da:cc:c2:93:72:08:96:a7:f1:ea:29:04:37:
b3:99:a3:8f:4a:9e:ac:54:82:17:3e:97:ed:90:35:23:99:1a:
52:a1:62:2e:b1:03:d3:53:5f:8b:e0:6f:1c:be:3c:c1:28:80:
10:5b:95:57:62:cf:76:4d:ca:b7:19:4d:d2:11:9d:50:85:88:
15:8c:aa:87:d8:c4:15:d5:b9:31:e5:d0:56:5b:c9:7b:23:65:
18:86:72:7f:b8:d0:55:66:5f:01:81:5f:96:83:2f:3a:c0:bc:
88:8c:da:39:19:9b:80:c1:b4:0e:9a:fa:6e:ef:a1:06:37:8b:
2c:68:59:86:2e:f4:97:d1:c6:e6:87:b3:bb:e5:61:4d:84:40:
61:91:d9:56:45:10:f4:2b:56:ec:74:6f:f3:81:e5:de:40:01:
c5:2f:ba:f7:ea:88:3c:32:ca:41:33:46:a5:b6:f1:ea:97:04:
5e:38:15:72:c5:b1:93:39:ea:7c:a5:85:90:39:65:5d:2f:43:
d8:17:2d:ef:5e:42:97:b2:4c:f9:0a:dc:1c:e4:0b:4a:bf:33:
b9:7c:a0:05:aa:f3:9a:f6:21:4b:41:a0:41:bc:2d:54:f2:53:
4f:e4:6e:f5:ac:b7:8b:fb:3a:19:7c:a0:4f:78:84:d9:99:1c:
0d:a9:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 18:27:35 2026 by rpki-client