
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
File: yex331ntcqVFfezmpT0F7QrmAKo.mft (raw, json)
Hash identifier: uqCqgnSOEa5UPeySG0NPUHhW1EUUe+6EdOFaeLMQwo8=
Subject key identifier: 74:B4:74:75:DD:DB:CF:1C:0C:1B:02:2B:B5:32:1D:0F:49:95:B5:78
Authority key identifier: C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
Certificate issuer: /CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Certificate serial: 019D9886677AAD0F3D3170273B240D5A3770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:38 +0000
Manifest this update: Thu 16 Apr 2026 23:00:38 +0000
Manifest next update: Fri 17 Apr 2026 23:00:38 +0000
Files and hashes: 1: LgvbuVV_52WynAHYpwvRHpZVnNI.roa (hash: 2NYmdNRzlmlK0EtbozdXHwFXd15kCmUNnu2aelmVQRI=)
2: yex331ntcqVFfezmpT0F7QrmAKo.crl (hash: j7qe/JjREcN88FhblcvXi/FO+M5MpfPfw6AwEUNY97U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:67:7a:ad:0f:3d:31:70:27:3b:24:0d:5a:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ec77df59ed72a5457dece6a53d05ed0ae600aa
Validity
Not Before: Apr 16 23:00:38 2026 GMT
Not After : Apr 17 23:00:38 2026 GMT
Subject: CN=74b47475dddbcf1c0c1b022bb5321d0f4995b578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:24:f6:b7:74:30:b4:c4:64:e3:11:90:f7:
ca:f9:60:a1:e6:ee:81:02:ea:a7:3e:11:27:c0:6d:
aa:ed:ad:6a:51:c2:8a:93:49:d1:b9:27:cd:0e:94:
9b:5d:a1:c2:5e:1b:f9:9a:68:4f:cd:43:9e:eb:19:
1f:fa:8b:7f:5f:c7:71:db:ce:c5:2f:b6:8b:a2:20:
62:13:da:04:3c:aa:d8:b5:ea:2e:03:ae:cc:3e:b5:
01:3f:97:13:f4:ed:8d:de:5b:a2:e4:16:1f:21:18:
d6:43:8f:87:42:7b:ce:0f:cc:f0:70:ca:d1:a7:e4:
f2:05:38:6b:5d:dd:fe:c6:e0:31:de:ee:c5:93:fa:
16:31:13:3f:58:54:b2:05:fe:14:67:2b:39:39:22:
98:d2:8f:7e:3e:fa:08:13:48:de:27:3f:6f:fc:5e:
92:bb:a9:a5:af:b9:b6:5e:dd:5d:a2:5e:90:2b:9c:
7f:74:45:37:d8:c4:08:1f:ac:ad:6f:43:a3:2f:b4:
bf:57:a0:38:8f:5e:a7:f7:cc:c8:c5:78:cf:10:c9:
cc:9f:10:b6:3e:3a:1f:d3:f6:ae:75:17:aa:5b:e0:
a6:12:e0:b1:5f:8c:23:cb:01:92:73:1c:cd:86:f2:
8b:d4:23:aa:e4:78:2e:c8:02:a5:41:a7:9f:f4:e7:
79:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B4:74:75:DD:DB:CF:1C:0C:1B:02:2B:B5:32:1D:0F:49:95:B5:78
X509v3 Authority Key Identifier:
keyid:C9:EC:77:DF:59:ED:72:A5:45:7D:EC:E6:A5:3D:05:ED:0A:E6:00:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yex331ntcqVFfezmpT0F7QrmAKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f8ea84-c0db-4c5a-a3c6-3eb09ede3ed5/1/yex331ntcqVFfezmpT0F7QrmAKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ea:2e:d0:e5:b4:ef:87:ba:be:f5:f2:ff:97:04:6e:54:ea:
a6:54:47:4e:97:88:8a:31:08:d6:f2:6a:17:b0:15:28:34:15:
c4:81:05:61:54:44:4b:c9:46:ac:61:ce:33:d1:87:8a:3e:a6:
46:3a:d6:cf:18:ea:e4:80:9c:73:32:66:a7:f2:5c:8d:36:28:
67:2f:d7:db:cc:72:60:d1:d8:b4:d4:ba:3d:70:60:7a:89:52:
3d:74:df:9a:f5:58:cc:c3:b8:4d:88:89:40:76:33:f9:b0:aa:
31:4f:04:50:dc:c8:dd:ff:ba:fe:1a:97:9a:dc:5a:3e:6c:34:
81:0b:ae:aa:71:e4:ba:83:01:b5:e2:b0:a8:c0:3c:ea:e7:77:
a1:c1:6b:e4:21:26:01:29:c6:be:33:21:7b:76:6b:d9:ac:e4:
ff:a0:98:8a:d3:66:b0:e0:3b:74:b4:af:61:f1:a3:86:c8:e0:
28:13:2f:2e:15:de:e5:18:fc:e1:37:30:39:7e:12:9e:ed:49:
90:04:24:4f:fe:a6:78:10:8e:20:1b:91:3b:22:a5:ec:9e:5d:
1e:33:f4:fc:b0:5f:9b:fd:d2:a5:18:61:18:17:b9:52:e2:2d:
c1:92:4c:cb:92:e7:fe:ef:01:97:18:04:a4:fb:a2:3c:1f:57:
47:88:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:23 2026 by rpki-client