Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
File: YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft (raw, json)
Hash identifier: dy6oi7Cf3u9IZE1E8OyThMfa3FZdkzcgMiVoxbH/pV8=
Subject key identifier: C3:58:32:8C:BD:D8:E9:3C:63:20:40:23:57:82:3A:31:1F:45:29:4E
Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe
Certificate serial: 019E20C8243007DC29F0E18DCBDD8EB9D3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
Manifest number: 017D
Signing time: Wed 13 May 2026 10:00:47 +0000
Manifest this update: Wed 13 May 2026 10:00:47 +0000
Manifest next update: Thu 14 May 2026 10:00:47 +0000
Files and hashes: 1: 1WBi4O0mvLv4eBmlkjen331LEKc.roa (hash: na8Ngk5oUxgxLL20/k7/joU0dOOdxW3ksCrQTLpvfHc=)
2: YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl (hash: UIdusOxbCSGp2OBK0xP809P/fF272Lil1MyTwWnsbxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:24:30:07:dc:29:f0:e1:8d:cb:dd:8e:b9:d3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe
Validity
Not Before: May 13 10:00:47 2026 GMT
Not After : May 14 10:00:47 2026 GMT
Subject: CN=c358328cbdd8e93c6320402357823a311f45294e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:0f:c9:bf:99:16:61:73:f5:60:75:e3:a9:
31:c3:8f:1a:d2:25:94:6b:22:67:3c:02:09:b3:a9:
23:86:0e:78:1e:db:66:83:74:4e:a0:a3:8a:ad:97:
d2:82:72:a8:47:6f:2d:18:b0:da:b2:28:21:fc:b3:
0e:9c:af:4b:18:27:0d:ca:b2:63:8f:ce:da:98:ee:
c4:58:b1:89:85:20:37:e2:bf:86:21:9a:20:6c:53:
01:4d:af:0c:a8:ab:24:bf:c1:86:f6:1d:f1:95:01:
c6:b1:b7:d0:6f:81:0c:be:aa:c0:cb:9d:83:17:e4:
d8:49:4e:f1:99:2b:b7:a8:f5:10:50:3e:57:87:cb:
ec:4e:b4:35:05:6e:0a:3c:fb:df:00:48:10:78:5c:
e1:97:c8:33:9e:41:92:56:2e:cf:85:af:0f:10:f4:
50:11:ef:ac:a7:7c:e6:94:71:79:83:d6:1e:1b:f1:
8d:dc:8e:68:e5:5f:ca:33:62:89:ee:da:ab:1d:e3:
a4:86:d4:96:4d:cc:8a:9a:da:bf:ef:c6:df:1a:7a:
8c:a8:28:bb:70:a1:39:77:96:f8:97:d1:72:05:3e:
13:d8:42:4c:42:2b:20:1c:95:63:5e:dc:0f:0c:c4:
15:16:d2:db:9d:56:29:00:90:c6:0b:c4:8d:10:43:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:58:32:8C:BD:D8:E9:3C:63:20:40:23:57:82:3A:31:1F:45:29:4E
X509v3 Authority Key Identifier:
keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:31:48:46:4d:30:e7:5e:4c:64:93:53:16:dc:eb:a6:4b:83:
d5:09:55:de:d6:2f:6b:09:26:5e:d0:1a:ab:58:8b:8e:cd:05:
6f:b8:27:99:02:a0:18:0d:3a:bb:48:44:ed:61:44:d6:5e:65:
e1:54:7a:fb:0f:fa:cb:54:de:67:de:46:9f:3e:a3:ba:d1:87:
d4:03:0d:3d:3e:a8:49:99:f3:bb:f4:44:76:56:0e:c6:46:8a:
97:c8:75:3e:42:f9:46:da:b6:b4:83:91:54:13:45:07:79:48:
0b:9c:77:72:df:6f:a3:3e:10:5d:3c:b0:6f:e8:8f:17:ec:d0:
d6:9a:60:b2:eb:b7:31:3e:90:c2:8d:f7:8b:fc:42:ee:96:bd:
79:8c:d2:1a:54:21:26:4b:64:37:3b:c1:7a:65:e5:cf:8f:72:
cb:f9:19:7b:71:26:ec:e3:3e:85:76:c5:f6:97:1a:a5:bb:d5:
38:48:6f:4c:a9:f9:ca:34:45:8b:4d:57:fa:88:ca:9e:a2:68:
95:21:80:23:58:d5:2d:30:23:bc:97:e8:17:8d:f6:8c:29:41:
59:bc:10:85:58:cd:e6:13:98:ab:6c:19:36:69:f4:82:c4:e2:
db:72:3f:54:7d:bb:89:8b:61:81:2a:e3:b5:dd:d2:d6:bf:d1:
81:19:b5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:03 2026 by rpki-client