Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: J7tMnwxmsfZXvskPzw85sX4xzzXSY15QzT+35ai04IU=
Subject key identifier: B8:78:8A:8A:68:E8:99:70:73:F0:3A:1A:E1:EC:6E:BC:BA:58:44:79
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019DB87FDBA9C8BD18320BCFED3D095B8825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 0147
Signing time: Thu 23 Apr 2026 04:01:20 +0000
Manifest this update: Thu 23 Apr 2026 04:01:20 +0000
Manifest next update: Fri 24 Apr 2026 04:01:20 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: 6bLXKiEKcy+VGgAMV2LWKUT1bT2+IAuwJlEH0VogfaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Apr 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b8:7f:db:a9:c8:bd:18:32:0b:cf:ed:3d:09:5b:88:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: Apr 23 04:01:20 2026 GMT
Not After : Apr 24 04:01:20 2026 GMT
Subject: CN=b8788a8a68e8997073f03a1ae1ec6ebcba584479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2c:9b:80:b6:69:be:c5:b5:2c:71:42:26:c7:
7b:9f:0c:15:5e:00:6a:23:e5:f3:1f:89:b0:b8:c4:
7f:e6:26:cc:11:87:7d:4e:a9:0c:e1:bf:8d:c8:76:
11:4c:9c:ac:2a:e9:6a:2d:80:32:9c:cd:e6:1a:d9:
b9:cc:8f:f7:0f:ef:98:74:53:e0:7e:72:08:99:2f:
f7:ec:6f:98:f9:66:1e:62:d9:b3:c8:8b:28:ff:55:
e3:8f:68:3f:6d:26:dd:a0:e8:b8:51:54:e5:d8:09:
ae:d4:6b:41:24:04:c8:1c:b5:c0:dc:2a:bc:27:ba:
2e:79:bf:5e:90:3a:85:68:04:6b:10:f6:e8:52:ba:
93:3e:74:e8:8b:fa:0f:a5:bc:e6:10:c5:a1:bc:ac:
18:2b:48:ea:d6:38:08:d0:2b:8d:45:9d:d1:81:09:
0e:0a:04:6d:bb:4d:15:be:3f:d3:c3:53:13:38:d0:
0b:d7:03:06:f6:83:20:5a:e6:e8:6b:c4:53:2f:28:
76:52:df:4c:2d:54:67:c4:cc:40:ca:3b:ba:d4:09:
16:c8:91:16:73:6d:87:d3:5a:1e:10:bd:0e:cf:e6:
cd:d3:29:8e:bf:0c:fa:3a:30:f4:1f:d1:9d:6b:fe:
09:63:27:ae:f2:65:a5:45:76:41:57:d8:a3:99:2b:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:78:8A:8A:68:E8:99:70:73:F0:3A:1A:E1:EC:6E:BC:BA:58:44:79
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:db:21:aa:c4:89:39:9d:01:b1:16:2e:85:6a:19:77:a3:cd:
c8:8f:37:23:e6:21:43:74:d8:8a:b1:4c:d6:9e:18:05:7c:3c:
fa:6b:1d:84:d7:03:91:e3:df:d3:44:3d:38:0d:e0:34:72:22:
c9:cc:0f:19:da:55:a6:44:e6:56:9f:62:59:07:48:50:f0:7a:
ce:73:bf:44:e6:64:d6:57:ad:bc:82:3b:ed:62:34:71:23:dd:
ff:e1:de:f0:3c:83:a6:e8:81:d7:2b:c4:fc:cd:0a:87:c2:91:
d6:01:60:08:56:3e:52:ab:c4:28:8f:12:8c:94:7d:2f:d0:60:
8d:0a:51:5e:2d:c9:f7:ff:64:3a:8d:ec:7e:cc:0c:07:98:51:
fb:b8:5e:85:20:76:83:64:51:04:35:78:ab:9c:1f:89:58:71:
fc:00:80:4b:70:b3:d4:44:c4:1a:92:42:ff:fe:a0:71:60:67:
a4:f8:2c:a1:0b:91:72:bf:a6:ce:e7:fc:7c:32:63:11:52:98:
f2:9d:83:42:7c:72:81:52:26:fa:b9:5e:0e:50:83:22:fd:0a:
87:f2:e6:81:f8:cc:fb:62:a7:53:04:36:ad:ac:e6:98:08:24:
57:3e:e7:e7:04:ad:2b:87:f6:72:a7:e6:25:eb:d3:d0:4b:5f:
a2:9e:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 12:19:51 2026 by rpki-client