Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: qAE2YhT/+bsetA0tGya3A1nve/4mYcV72An+PAd17vI=
Subject key identifier: D9:C1:5B:87:55:FE:1F:1A:B8:D6:BB:0B:4C:EB:0F:3F:26:F6:09:FD
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 019D97AAAFC1F110234FBF44998BCB4FF199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 0845
Signing time: Thu 16 Apr 2026 19:00:38 +0000
Manifest this update: Thu 16 Apr 2026 19:00:38 +0000
Manifest next update: Fri 17 Apr 2026 19:00:38 +0000
Files and hashes: 1: LRUYfg6USsKj2QtL2hsG4I_Xo-c.roa (hash: 2GklllL0UBZh20Fr2fNv23BY6CPenyVwkECk1lNGsHo=)
2: S83M800fbELdZQf9hRfrhc7ekM0.roa (hash: t/V/LOUUpNTS7J4UMag24vHAzDu0bcjylpu2q8pupgk=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: A4CjTSkZQtOgUqa0GHiP7bxoUVJ+/v5SXbbBI7obFNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:af:c1:f1:10:23:4f:bf:44:99:8b:cb:4f:f1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Apr 16 19:00:38 2026 GMT
Not After : Apr 17 19:00:38 2026 GMT
Subject: CN=d9c15b8755fe1f1ab8d6bb0b4ceb0f3f26f609fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:cf:15:a9:01:bd:eb:f9:7f:84:61:0b:06:
32:d4:66:82:43:3a:48:ba:db:49:e4:7b:fb:10:52:
b1:a3:ae:6c:de:33:4a:73:71:76:bb:9f:5f:8e:d6:
a7:18:65:5f:6e:0c:14:82:6a:68:ed:c1:4f:95:c7:
ad:10:4a:1d:45:a6:57:15:66:f2:12:49:5a:c7:28:
50:db:5b:42:f9:e9:c8:0d:d9:0b:90:b7:06:11:72:
a4:7d:96:d5:a2:f5:e8:0a:ce:6e:c0:07:a7:ed:a3:
c8:66:4e:a0:3a:9b:7e:92:e3:19:a1:17:c1:c3:26:
ed:59:82:a7:7f:5e:f3:1f:7f:5d:ca:b6:69:f5:d3:
fc:49:fd:e7:37:f0:7d:38:8b:cb:f9:74:90:7e:52:
4b:2e:4c:48:00:0d:0a:a1:c5:91:e2:f9:60:e8:d5:
2e:da:51:cb:f3:05:d9:81:32:83:e0:d0:a8:86:ef:
29:50:1a:e8:db:46:fb:03:42:da:35:41:5f:97:8b:
5c:f4:4b:cc:d7:1b:f6:fb:40:1b:db:eb:e3:12:1c:
d4:3a:f8:9f:66:44:d4:ad:9d:55:6e:74:1c:cc:f8:
2a:f8:7b:2a:2c:cd:26:1b:f3:16:92:ff:9c:3e:38:
4f:08:91:96:d7:d3:28:ef:7c:c7:84:43:6c:0a:4b:
7e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:5B:87:55:FE:1F:1A:B8:D6:BB:0B:4C:EB:0F:3F:26:F6:09:FD
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d1:ce:37:79:1d:a3:3d:74:49:b1:c8:49:74:ac:e2:53:68:
3a:09:6b:98:2f:61:9a:c1:ab:80:d4:8d:dc:1b:9a:2f:4d:61:
fb:de:64:cb:95:b4:48:f9:07:42:57:ef:7f:5e:76:76:0b:a0:
d8:0b:4a:35:83:0b:9d:58:a9:8e:82:88:80:84:67:49:71:97:
18:f7:31:ef:1b:fd:0d:9b:ab:69:0f:2a:e6:0c:80:0f:80:67:
dc:75:55:86:cf:71:8e:61:7c:fa:44:b4:9e:8f:8b:0f:a4:6a:
34:b0:d8:93:17:94:b6:a5:6a:47:9a:cb:5e:ef:75:12:a9:26:
6a:66:a7:52:0a:74:69:66:62:cf:28:52:d6:58:b0:43:4e:2e:
bb:6a:0e:8d:a0:ed:0f:27:96:af:51:9e:49:4c:6f:e7:a0:d8:
7b:04:ee:0d:ac:7b:84:6c:1b:b5:37:33:ef:f7:3e:2c:a6:a6:
af:ed:c6:19:2e:b6:c0:0b:6e:57:9e:45:55:7e:c2:38:73:55:
08:7c:6d:f9:53:c5:6d:04:49:fa:eb:b1:df:65:ce:44:20:f9:
d5:67:75:1d:95:3b:2a:67:ea:01:bc:8a:d9:26:bb:1a:dd:83:
23:93:53:fd:45:d3:4f:85:51:f5:71:ff:9d:66:3e:98:f3:e5:
45:ab:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:06 2026 by rpki-client