Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
File: ypJvljURiT-k2fvV5k4PikODfkA.mft (raw, json)
Hash identifier: fh8rlHGrQdxLvC6kkUmktoafetXpLITgvruMFYQNo80=
Subject key identifier: EC:32:C7:C0:EB:38:A2:0C:21:EF:83:E7:32:EE:A7:6C:24:D3:DE:E9
Authority key identifier: CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
Certificate issuer: /CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Certificate serial: 019D9AE34B058E04FC8A15F10D3029B03F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 10:01:20 +0000
Manifest this update: Fri 17 Apr 2026 10:01:20 +0000
Manifest next update: Sat 18 Apr 2026 10:01:20 +0000
Files and hashes: 1: 8qyFq0Jw2vV5jElWSS9BdEiMHZI.roa (hash: v/1+49rt+1xmD87nJbTdyd9Pwk6XUeag3Zc7Vhx+XuE=)
2: ENuqnzA3ruRTEDO8nV_unXXFG3s.roa (hash: jqM94Qjxb5BwlTK0O468kBtFYUuLS+gQcO3XoaFwmmI=)
3: roAOVMvnNsfrpVkf2GW7F0kGBAc.roa (hash: IkSo7h5qyB5UPtAZ0suaOuHLsEp0jVopR3VGK0uOiaE=)
4: ypJvljURiT-k2fvV5k4PikODfkA.crl (hash: 1BLP9uMXqqqjNHVDKc5bt3ih5zV3GI2jyfw16b4VPno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4b:05:8e:04:fc:8a:15:f1:0d:30:29:b0:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca926f963511893fa4d9fbd5e64e0f8a43837e40
Validity
Not Before: Apr 17 10:01:20 2026 GMT
Not After : Apr 18 10:01:20 2026 GMT
Subject: CN=ec32c7c0eb38a20c21ef83e732eea76c24d3dee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:d9:ab:85:5d:6a:fe:9d:d5:3c:6c:e1:cb:
ce:01:32:17:27:01:29:3c:b7:3d:da:35:14:01:c5:
79:69:c4:49:3f:fb:72:71:54:38:59:0a:55:4f:a8:
ef:1c:16:ab:93:7e:6c:3d:32:5a:95:06:f0:97:b8:
af:88:f2:a0:20:1c:79:0a:42:05:1f:99:fa:40:0c:
39:61:fe:78:59:e1:76:36:97:e0:af:db:c8:ed:55:
f9:ab:89:4e:f7:ff:29:ed:55:2f:52:8b:9e:66:48:
61:19:d4:bc:5c:6e:c7:f4:0e:26:69:67:63:bd:23:
37:a4:ee:98:4c:8e:f7:4a:e1:90:d4:e8:9d:03:d2:
3f:2f:4a:6e:dc:13:36:da:ae:dc:1a:ce:64:96:99:
0f:2f:ef:35:b3:f7:4b:bb:b3:85:c3:33:f2:e6:4e:
42:c7:a8:17:94:8f:0a:7c:17:d2:2f:04:bb:bc:e2:
43:06:89:48:c1:8d:d2:b6:bf:4b:2f:27:b7:cd:e4:
1a:23:7d:28:2f:09:4a:4d:ec:91:d3:8e:a4:45:8d:
79:13:e6:13:61:7e:23:4a:e0:cc:3c:95:ca:54:b8:
11:7a:26:d4:5d:f7:dc:99:f7:eb:b7:1e:5b:79:d7:
ca:74:dd:70:bd:df:6d:a0:1e:f8:47:a4:43:ec:c9:
7c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:32:C7:C0:EB:38:A2:0C:21:EF:83:E7:32:EE:A7:6C:24:D3:DE:E9
X509v3 Authority Key Identifier:
keyid:CA:92:6F:96:35:11:89:3F:A4:D9:FB:D5:E6:4E:0F:8A:43:83:7E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypJvljURiT-k2fvV5k4PikODfkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/44b7bb-2605-425b-b341-14605db543d0/1/ypJvljURiT-k2fvV5k4PikODfkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e5:04:87:05:fc:bc:c8:82:31:a3:ba:89:54:6f:e6:b1:ad:
8c:91:91:a8:0f:35:96:ac:ef:03:46:81:a7:55:2c:a3:1f:2a:
35:4f:7c:be:49:08:25:cf:14:ff:61:64:5c:cd:07:08:95:9c:
e9:78:db:e7:f0:f3:b3:db:68:06:24:fa:01:e2:d3:df:cf:17:
73:66:6e:59:ce:67:60:a8:5f:b5:d0:43:68:90:92:cd:06:80:
ef:b8:bc:38:83:52:a1:fa:b4:41:e3:c7:21:53:03:e7:fc:a8:
22:16:0f:84:39:bb:50:5d:22:ad:d3:86:03:c3:54:0a:0e:1c:
09:88:62:25:88:87:ba:4d:1b:a2:cd:0e:cf:b5:c0:b1:1e:be:
24:f6:86:9c:4d:f9:55:22:06:ce:41:cf:8e:89:82:cf:07:3f:
66:c9:1f:58:55:b5:1c:ab:63:0d:89:02:5b:9c:d2:f7:71:e6:
20:cc:ce:3f:53:80:44:7e:6b:b0:01:9e:c0:76:79:4b:21:02:
81:ef:7b:dd:d7:e6:95:34:6d:7e:5a:13:d4:29:41:ca:30:77:
40:80:89:b6:6f:72:78:f6:f2:60:0e:4b:39:bb:2f:90:82:de:
4a:1c:de:ef:7f:ee:80:52:17:e2:b1:b5:9c:46:53:42:0e:8f:
1f:f1:d2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:19 2026 by rpki-client