Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File: RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier: sVL7TCsvQvYFAeSVf3mQGn8LEhgSntr0eXaI4wX1+2I=
Subject key identifier: 9F:C8:7F:B3:FD:5F:F9:B5:4C:53:D2:C5:3B:C8:E5:CB:CF:11:FA:14
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 019D99626D0C932135158B0AB23CC144661B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number: 18CD
Signing time: Fri 17 Apr 2026 03:00:57 +0000
Manifest this update: Fri 17 Apr 2026 03:00:57 +0000
Manifest next update: Sat 18 Apr 2026 03:00:57 +0000
Files and hashes: 1: 2iOxvtLJRmqeCCs6jsBCnhsmuMk.roa (hash: xSNUQ0HB9QKxYzPdIeyT3O6eENXbIaUd/nPbY1Wjb78=)
2: EfsvGGiWagU_0mzeylXRaksRn_8.roa (hash: KEPOuFM2LSKDwp8tR2Mp0dmeSc6fJlmHWiPoO6jvt04=)
3: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: +5X7AHdsaKUr/JNfe1yB5vO25vp2qezNeWYXwCypZk0=)
4: zT3qRTo_Bh_Y4PRUIgbcM4_OPhI.roa (hash: DLHVLGVEeEcowvlPfROsXYSKn9EL35p8lKZcaisVJ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6d:0c:93:21:35:15:8b:0a:b2:3c:c1:44:66:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Apr 17 03:00:57 2026 GMT
Not After : Apr 18 03:00:57 2026 GMT
Subject: CN=9fc87fb3fd5ff9b54c53d2c53bc8e5cbcf11fa14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:80:aa:a9:84:58:df:eb:d6:70:5f:90:f5:
8e:2a:f4:18:4a:18:80:12:4a:e7:08:2c:13:a1:da:
a6:05:4d:05:56:51:f4:15:55:a2:a3:a2:30:f6:2b:
df:e5:46:c9:34:1b:b9:01:8a:b0:57:75:74:54:ff:
dc:e4:f9:50:4b:17:7f:79:3c:bb:05:76:40:6e:61:
77:2d:4a:b0:17:e5:59:e8:2d:72:d2:9a:15:cf:10:
6b:d0:6b:b4:3c:17:48:34:ee:7b:42:9a:22:51:3e:
05:16:a0:dc:74:79:30:cb:43:45:4b:56:31:d0:02:
51:ff:91:8d:0e:71:7d:dc:01:a7:f0:5e:17:bd:f5:
4c:98:91:de:2c:28:f1:d6:cc:66:45:96:45:22:b6:
83:d6:e9:ae:85:e5:f9:d1:b6:b4:b9:35:b7:68:8e:
d1:a6:00:a8:7c:b0:50:80:06:6a:39:38:25:82:32:
46:33:5f:b3:04:be:c6:8d:26:87:4f:f2:ec:2c:24:
08:6d:f9:cb:df:23:56:96:34:d8:fe:90:b5:f1:08:
60:36:d2:4b:08:a7:d1:cd:fe:41:91:1f:2b:bc:0a:
16:c4:8d:3d:e0:13:6c:8f:53:95:39:13:be:84:43:
7d:75:6c:65:71:e4:19:68:b0:e4:6f:b3:4b:a0:f7:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:7F:B3:FD:5F:F9:B5:4C:53:D2:C5:3B:C8:E5:CB:CF:11:FA:14
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d3:7c:8b:d4:1b:71:74:a8:29:4c:91:22:3b:19:7a:b0:75:
b1:59:8c:4e:70:b4:39:cc:26:d2:a9:5c:72:4f:f2:11:2e:31:
ea:68:b9:61:98:2f:90:d9:c2:6c:63:cb:c2:35:74:45:49:d4:
a8:a1:d3:50:54:92:32:ed:f1:4a:1d:21:e0:0e:f2:fa:c1:18:
d7:5d:0d:1c:2a:a0:b2:b9:d3:2a:84:58:31:9d:4c:3b:93:fa:
34:6f:01:90:ea:ae:2e:fc:17:86:f7:75:c8:72:8d:2a:90:ad:
db:57:75:e2:1a:7d:7b:b0:4f:88:3c:4c:33:7a:f4:11:14:ae:
e1:2e:52:74:42:8d:1c:64:bd:bf:87:fc:e0:e4:87:17:cc:da:
ce:4a:9c:da:12:9d:8b:52:39:f7:b0:9d:66:c9:32:55:53:b7:
bf:42:0f:06:3e:d2:5b:75:24:50:65:22:34:46:05:e5:a3:15:
2c:c5:2f:5d:c8:f5:f9:3b:0c:3a:b0:18:5b:fd:8f:ac:08:ea:
2e:2d:02:f2:08:b2:a9:94:a6:49:b4:22:f1:1f:73:27:0e:5d:
50:ac:e1:94:07:61:8f:d5:90:09:6b:bd:6c:cf:9e:ae:b0:25:
a5:9f:5e:39:e7:36:82:27:75:9a:53:2e:5f:97:f3:e5:f2:4b:
ba:9e:a5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:59 2026 by rpki-client