Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
File: yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft (raw, json)
Hash identifier: lF/CkCbf+Uv1qPXlr8J8AQC0Yy0G3eci6gD2xWPPRF0=
Subject key identifier: 0B:2A:F8:89:0F:42:20:BD:6F:D7:79:58:F5:FB:48:B0:2A:68:62:A8
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Certificate issuer: /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial: 019D9AABBD71556621DBF9F551703AF00FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 09:00:39 +0000
Manifest this update: Fri 17 Apr 2026 09:00:39 +0000
Manifest next update: Sat 18 Apr 2026 09:00:39 +0000
Files and hashes: 1: YNrng7LuWkCZkAtvO0FUnnpdapY.roa (hash: LVcYH4intwAxq/uJ9kNbCKuqV5DBz8cARMAEmR1qWHM=)
2: jB3wCiu-AvDKO3DTXUCgLV9LXBA.roa (hash: 1qE+PeKCdqwLTMKhlG/DvcYz45q96dHEsGiuDU6+/bM=)
3: yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl (hash: 72kkcPWePIbCSOQrVlAf3vYSDRZhBXTVBBch2TVYTM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:bd:71:55:66:21:db:f9:f5:51:70:3a:f0:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Validity
Not Before: Apr 17 09:00:39 2026 GMT
Not After : Apr 18 09:00:39 2026 GMT
Subject: CN=0b2af8890f4220bd6fd77958f5fb48b02a6862a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:77:96:c2:1e:24:d0:18:8b:dc:9a:02:11:
c9:eb:15:3c:2c:1f:b4:1d:48:01:7e:e6:96:37:4e:
2a:63:9f:b8:f5:e5:cb:64:32:24:a0:14:4b:ab:af:
71:3e:cb:19:35:fc:e4:1a:00:1b:dd:91:d1:c0:a7:
d6:1e:5e:15:d7:45:11:99:e2:7b:29:a8:61:6f:19:
5b:b6:e3:37:d3:48:5e:09:76:7c:ef:04:7a:81:fd:
40:e7:fb:ec:59:7e:09:71:3f:90:29:18:af:3d:75:
cd:d2:05:b5:c9:e8:36:5e:b3:22:26:6d:e0:04:99:
34:a1:d0:1a:d1:8b:66:7f:c7:39:f9:11:f6:e3:ba:
cc:80:66:97:68:2c:c7:26:83:ca:93:86:06:83:3c:
9d:44:63:18:82:75:3e:92:9f:05:ec:8e:d6:e1:8c:
d0:0e:c6:23:49:db:bc:5e:e9:8c:48:0c:cf:31:bc:
8b:20:ca:1b:53:88:30:d6:c5:70:5c:b9:4d:09:72:
88:ab:92:39:35:0e:dd:a7:ae:df:ec:d0:b5:bd:3b:
6f:78:5c:20:8e:e6:3f:d9:dc:9e:b2:93:0f:72:7c:
f2:27:10:29:f1:21:e4:d6:62:9f:87:a3:06:4f:7f:
3a:56:de:5c:ac:da:d8:6a:ee:d4:40:e9:76:ff:62:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2A:F8:89:0F:42:20:BD:6F:D7:79:58:F5:FB:48:B0:2A:68:62:A8
X509v3 Authority Key Identifier:
keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:de:0d:71:e9:09:8e:51:d1:d7:26:ee:67:23:d9:d3:73:4b:
5d:72:e2:0e:6b:6b:44:eb:3d:8b:03:69:a7:11:bd:cd:d2:34:
b3:cc:eb:15:36:8e:2c:02:8f:23:c0:2f:5b:81:09:66:b0:2c:
51:ac:9d:a9:b3:a7:a3:3e:53:90:2c:e3:5d:11:24:d5:b1:e3:
bf:0a:d1:23:2c:10:9e:01:4c:6a:34:c0:3f:fa:c4:b1:d7:a7:
ba:49:3b:85:09:3f:83:03:07:ef:39:2c:5f:69:05:ee:c5:c6:
19:03:bf:f6:1b:5f:1c:6d:74:8b:8d:fb:9e:09:47:d9:db:bb:
e9:c3:b6:54:fe:e1:f2:bf:9e:cc:01:b0:84:7a:65:08:91:6d:
bf:c1:33:5a:00:91:f7:2d:03:69:98:d2:10:43:20:eb:be:72:
59:b9:da:3f:44:86:ad:f4:fd:73:31:28:90:72:40:dd:ec:d2:
ca:32:ba:7a:84:a7:0b:a7:e9:39:1f:2f:29:60:9c:92:ad:e4:
4c:5c:30:0f:94:91:c2:9e:ca:c8:ae:49:29:2e:90:1c:e0:6e:
b3:bc:34:ab:aa:f5:0d:44:5c:5a:1b:86:9b:43:5e:c8:a7:3b:
10:40:a6:8b:32:dc:ad:d3:38:cc:0a:21:ca:98:6c:00:07:61:
fc:37:ee:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:03 2026 by rpki-client