Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: faSpXJhR+xm9IOUHRERidrOKCvqBuZH0u4eeyF/mRlo=
Subject key identifier: 5B:66:64:40:E5:BD:A5:DA:77:8E:30:12:A7:D3:B6:C3:C1:1D:96:70
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019D9C9AC899025EB8D24FCDCFE632CB2BFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 18:01:22 +0000
Manifest this update: Fri 17 Apr 2026 18:01:22 +0000
Manifest next update: Sat 18 Apr 2026 18:01:22 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: NwVKyVT2lgjz4+keEbXbQib5KC8xIjiMq7elt8hnz8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:c8:99:02:5e:b8:d2:4f:cd:cf:e6:32:cb:2b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Apr 17 18:01:22 2026 GMT
Not After : Apr 18 18:01:22 2026 GMT
Subject: CN=5b666440e5bda5da778e3012a7d3b6c3c11d9670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:55:78:96:66:c9:70:20:83:27:d9:2d:8c:
b8:61:a6:7a:31:60:50:a9:23:3b:32:b9:c5:b0:2b:
bd:71:25:df:96:62:79:f1:85:4f:bf:16:8c:9f:45:
c2:8e:ea:0f:1e:f4:7b:af:68:4a:91:00:20:93:d9:
2d:8b:26:9c:30:7f:6c:4a:97:31:a7:8f:0f:ed:81:
25:de:e5:d5:70:23:0d:68:87:f6:3e:a3:09:66:9a:
bf:18:2f:ac:6f:b7:00:92:58:46:fa:67:21:09:b9:
d0:17:07:7f:cb:ff:09:3f:21:2e:7d:5d:04:c6:44:
56:1f:16:24:00:36:06:ab:1d:6b:f8:ba:fb:6e:e2:
8d:a9:fd:15:da:b2:fc:b7:50:88:7b:64:10:d7:c0:
dd:21:61:fa:42:7e:f7:80:66:7f:19:03:98:10:32:
dd:2e:37:48:3b:33:36:0f:c3:cf:c0:ee:4e:5b:5d:
b4:a4:58:0e:2f:4a:2e:38:34:49:2d:1f:66:26:4f:
1c:9e:cb:51:76:35:88:27:8b:b4:0d:0f:f2:fd:1f:
58:8c:8e:39:bb:7a:8a:25:38:3b:25:be:d1:4c:d8:
fe:02:71:a8:6a:74:a4:b1:30:37:82:7c:5b:81:72:
68:9b:9c:78:83:b1:b8:47:36:c6:85:96:51:78:dd:
21:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:66:64:40:E5:BD:A5:DA:77:8E:30:12:A7:D3:B6:C3:C1:1D:96:70
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:88:b3:b0:bc:15:a6:fc:14:41:d0:1d:49:5f:e2:7c:01:08:
89:90:22:dc:37:65:25:2c:3c:17:97:5f:ba:f3:62:6e:eb:24:
26:a2:cd:fe:1a:e7:7f:ee:84:37:54:af:42:aa:d3:8e:02:3a:
6d:c6:0b:cd:40:10:16:1c:70:3f:5e:c3:76:5b:75:db:17:16:
e7:cc:61:70:7e:7f:35:c3:10:0e:ef:17:a3:ac:ce:f6:ff:17:
8b:b0:02:64:4d:3f:51:8c:2f:2f:b0:fa:1b:e4:06:b1:a3:fb:
d1:a0:e1:1e:24:00:41:04:55:08:1e:d0:63:be:ee:05:d3:3b:
99:b1:1a:f7:1a:1c:0a:5a:0e:7a:d5:f8:20:60:af:3f:64:86:
58:5c:3d:d4:12:b4:a1:f8:ea:e7:62:00:52:be:49:30:b2:f5:
00:19:35:ba:19:dc:f4:2b:bb:91:3d:17:c1:90:88:1e:2b:a3:
d9:5b:5e:d9:f8:d2:c9:a1:fe:db:c9:2f:38:5a:ae:7b:19:94:
21:c1:27:66:36:60:f4:2d:c9:fa:4d:5e:f6:6a:d4:0c:87:76:
ac:01:c0:23:38:7c:1b:08:93:b5:8e:b4:32:5e:d4:0b:03:cd:
69:de:35:f0:98:bd:de:f2:ab:3b:88:4a:31:5a:a2:23:32:6d:
47:df:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:11 2026 by rpki-client