Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
File: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft (raw, json)
Hash identifier: I6beYSB84OWWlaX4gP6gOqHiXU+1zdusmPo6YeHeCzo=
Subject key identifier: C8:3C:21:43:2C:FC:3F:5A:55:AF:77:35:4F:79:F8:77:8F:82:45:77
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019D28842E07DFB296D7082AC5C6ACB2FF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
Manifest number: 18F5
Signing time: Thu 26 Mar 2026 05:00:44 +0000
Manifest this update: Thu 26 Mar 2026 05:00:44 +0000
Manifest next update: Fri 27 Mar 2026 05:00:44 +0000
Files and hashes: 1: 1ZMsVQGAWg2it-JAEuC_i_hCIyc.roa (hash: ZLAKov/0hadhlGoY/KwpJKZ7o/B0xm108yvYfzR8PiE=)
2: ThpyK7T3T5Urd0gQp4EkSzgmEB0.roa (hash: drk6qrOhljg5/CDI9FQXdFU1YNYaPplLqtldYNHdpKY=)
3: WhS9iKVaUFg38uZaHtFMBX5xGXA.roa (hash: AUcEJ+4tf05fJdicnZl50BMdPlLmWRqkiu+wHdC3Q9g=)
4: YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl (hash: l0RrGAZRrpZqtOvNLbIr44pDB4GmHnp6EzHB0it1ygQ=)
5: hxC2jpRlaIaM98LvLVjeqhOV9cw.roa (hash: TgtubXCf93hQu/hiX0qxTtjIPY7Fb9Uk/YixVE2mPWw=)
6: lFA8TCmOsUwcRT-IH5-xMnLIn9g.roa (hash: rLmZAKicjwEflAKkEb3bhMZ1sp7aW6UtUzE6SYNtwFo=)
7: y3D_6T7LItZVGNAAIM2oiQLXK4k.roa (hash: wbaR1iGKJRGc1NnOpfqCm7AMxI+gqPXjh0axv9TvfKE=)
8: yM-BRopjf51qtduhIy15MptpHyA.roa (hash: cYXBlJN/z+ptyvUxLCa1zDp3B5VQu0MKslmhphO0gbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:2e:07:df:b2:96:d7:08:2a:c5:c6:ac:b2:ff:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Mar 26 05:00:44 2026 GMT
Not After : Mar 27 05:00:44 2026 GMT
Subject: CN=c83c21432cfc3f5a55af77354f79f8778f824577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:bc:7b:67:70:5d:06:24:7e:fc:12:0e:d3:
ff:47:bd:e3:62:cb:81:be:2d:48:57:dd:aa:ab:58:
c8:0a:6a:87:a7:82:0a:5e:60:c7:52:4c:a1:2f:30:
38:ac:13:d7:62:e6:21:5f:8e:94:de:f5:7f:b4:fd:
b6:d2:73:4b:5f:f6:ab:2f:f7:73:e5:29:c2:75:78:
30:fd:3b:db:9e:a5:82:bf:61:06:85:23:11:81:2f:
b9:a3:06:c5:f4:27:c1:21:b5:c4:b5:b1:bc:78:d8:
13:ec:3a:27:6f:54:02:bd:5c:91:cd:2f:60:e2:f6:
d4:99:33:97:01:14:f4:c6:7a:d3:57:0f:77:60:45:
8b:1b:b9:f8:c5:50:b4:5f:9b:fc:32:f4:10:d9:45:
2b:53:31:df:ce:59:e3:13:ef:f7:a5:a7:96:2e:ff:
f5:2a:1c:41:e0:11:05:72:a5:91:8a:43:e6:1f:da:
69:6a:0a:ec:bd:a9:0a:a2:b4:14:e7:e4:f7:74:aa:
3e:df:4a:a1:f7:0e:51:71:c1:b7:ab:64:f4:98:ff:
7d:94:46:47:e6:c9:54:90:d7:a9:ea:c9:48:d2:c6:
bb:cc:a2:87:c6:47:41:8d:e5:fc:28:6a:94:59:f8:
bf:ff:90:e9:ee:1b:4c:e3:f9:b4:40:fa:7d:3c:d8:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3C:21:43:2C:FC:3F:5A:55:AF:77:35:4F:79:F8:77:8F:82:45:77
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e2:14:3a:b7:06:e1:99:af:d6:99:4d:b4:d0:83:40:a3:3c:
63:fa:4a:53:84:9e:17:ec:21:eb:85:49:9e:04:d2:04:6f:0c:
43:9e:7b:7a:51:b8:b3:ad:29:da:42:b1:b5:d0:bb:4b:b6:52:
08:ab:45:e0:25:7f:b5:2d:ff:72:60:c5:e1:a2:ed:34:52:26:
40:8e:2a:57:44:1a:21:74:37:31:b4:72:3b:97:5a:eb:b6:c6:
30:56:a7:1b:56:ab:b5:74:ee:f6:c5:d2:fe:e8:d8:37:06:c4:
ff:cc:76:d9:e3:f5:cc:60:e2:46:7f:c0:ff:9c:53:82:da:41:
f5:63:36:ca:d9:8a:6c:43:ee:1f:85:2f:11:28:12:b6:73:8f:
d9:a5:93:7b:20:7f:0a:06:e2:b0:78:b6:e7:0f:1b:5f:4d:26:
b2:57:15:2e:f5:1b:96:2c:c2:a2:dc:78:8d:17:9c:68:dc:f4:
fe:40:49:13:d2:e3:7a:c9:32:49:44:ef:68:90:d3:64:52:d7:
c8:2b:d0:c3:ca:c5:ec:75:9f:c9:bd:a6:9c:94:cc:e4:f9:14:
db:45:fa:89:4c:13:0e:54:5b:9c:2b:c6:09:36:3c:ca:59:0f:
b5:f4:40:e0:58:bd:42:b4:c0:6e:b3:7a:71:26:55:b8:b6:08:
d1:a7:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:41:09 2026 by rpki-client