Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
File: YxrKX5odz6GXBNHwN38bn-kUXgg.mft (raw, json)
Hash identifier: 0E2A+fiayTBZG34EZIPe/N/0kzqUGZu2eAOC8b+GenU=
Subject key identifier: 73:87:A5:1B:FB:AD:FA:F8:A3:43:E8:01:98:D9:BA:D7:B7:29:2E:D0
Authority key identifier: 63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
Certificate issuer: /CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Certificate serial: 019DCE629D6F206EF563EBEB9D5751F6C3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 10:01:02 +0000
Manifest this update: Mon 27 Apr 2026 10:01:02 +0000
Manifest next update: Tue 28 Apr 2026 10:01:02 +0000
Files and hashes: 1: Awm_DabV6b5aFzZjoL4IRRaHXvI.roa (hash: 8OukxgZtrCYr2IAiBPp1+KwaQD8XPdUdi2hA8JM9baM=)
2: YxrKX5odz6GXBNHwN38bn-kUXgg.crl (hash: MMbokgx794pYvGVajj9eF+seUkyLyxOfLsuAr9g/uMw=)
3: llfMrhUWfSkRK5hK0AzdhqQLJv8.roa (hash: hJA3pZdghhHwfd7bRm3Ls7VwTVf1TOxJacXNTFZzVPI=)
4: nFnwvZn2y6J_tUGewNTO4fY9C0k.asa (hash: zDo5Ms/ybgPRllQhXvdgQws7ZsKZj1TDWdYoEliu338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:9d:6f:20:6e:f5:63:eb:eb:9d:57:51:f6:c3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=631aca5f9a1dcfa19704d1f0377f1b9fe9145e08
Validity
Not Before: Apr 27 10:01:02 2026 GMT
Not After : Apr 28 10:01:02 2026 GMT
Subject: CN=7387a51bfbadfaf8a343e80198d9bad7b7292ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7b:b3:03:40:5c:2c:b2:d2:57:04:42:d1:75:
0d:36:fd:ff:82:7e:e6:3e:a9:1b:e8:7d:6f:0b:45:
d7:26:87:e6:92:1e:a1:74:1a:8e:99:d3:1a:91:fb:
88:d3:57:9c:e9:e7:95:fd:75:cf:ea:1e:f4:90:b5:
5b:93:63:5d:d2:55:fe:d8:4c:27:7f:5a:14:4f:8c:
7a:21:2e:05:14:b4:2b:ff:cd:4d:76:8a:93:d8:03:
7d:16:c4:02:20:4d:07:6f:45:48:0c:49:0c:19:35:
04:5d:bb:f6:6d:01:89:9f:41:36:89:29:41:45:14:
83:78:a6:78:a9:38:31:e0:80:cd:07:65:ed:de:fa:
53:15:22:fd:fe:b2:44:83:fa:a6:27:4a:e7:3e:79:
e6:78:17:e7:77:c9:54:0b:85:44:4f:2a:18:4d:48:
d2:12:4c:d6:ab:3a:95:48:ac:db:73:76:2c:a4:0b:
a9:4d:55:f9:7d:7a:04:42:45:a5:fa:c8:cd:8f:be:
34:99:39:81:d9:ef:98:05:df:49:3b:ca:e9:44:a5:
5e:b4:bc:b4:43:ad:49:e7:ce:d6:35:dd:bd:2e:85:
db:3c:1f:6e:fe:41:e3:00:70:d2:ff:24:3b:92:a9:
fa:af:50:3c:d7:62:1b:2f:72:f6:21:1d:04:f5:9f:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:A5:1B:FB:AD:FA:F8:A3:43:E8:01:98:D9:BA:D7:B7:29:2E:D0
X509v3 Authority Key Identifier:
keyid:63:1A:CA:5F:9A:1D:CF:A1:97:04:D1:F0:37:7F:1B:9F:E9:14:5E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxrKX5odz6GXBNHwN38bn-kUXgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0775c-da2e-4d7d-8019-d2b02a403c7b/1/YxrKX5odz6GXBNHwN38bn-kUXgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:57:5b:66:69:c9:f4:42:d6:82:f2:eb:5a:d5:c1:1d:0f:5e:
dd:5a:35:a0:f0:d9:57:fc:24:e5:ec:19:71:5a:5a:f5:6a:f7:
e5:26:af:8f:4d:1d:54:fe:3f:2c:98:2d:27:d6:37:00:6e:4a:
8a:80:b8:86:4b:c9:65:29:f3:eb:c1:f7:49:44:f6:c1:b0:36:
ac:93:98:e9:f0:ec:2c:b9:a8:86:b3:12:87:ad:b6:30:89:4a:
99:eb:e4:60:37:05:1f:cb:66:6a:d8:ea:68:37:a9:7a:45:a7:
cc:f2:36:4e:20:8d:fd:fd:f6:a6:52:05:aa:bd:d1:5e:e9:81:
c0:3a:b7:8e:32:22:d3:3d:06:7b:22:99:7f:b8:02:4f:a9:b6:
b1:d6:12:15:6e:9e:d0:2b:86:fd:96:a9:11:9b:db:dc:42:72:
60:7d:21:1b:1f:78:51:d1:fe:f6:c9:0a:84:3f:3b:80:1a:d2:
b9:0b:1e:5b:a9:04:6f:e2:e0:37:1b:41:57:90:61:00:7b:e4:
01:4b:19:ef:c3:1c:d0:48:37:db:f3:59:bf:4b:a7:ff:50:01:
2e:19:e5:b7:5e:51:04:78:19:9e:64:0c:dc:d7:2d:dd:39:75:
c4:6c:22:c1:20:42:92:65:27:27:97:91:e5:40:1c:4c:6f:4e:
1d:17:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:27:15 2026 by rpki-client