Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
File: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft (raw, json)
Hash identifier: cUgPf5d04gRzEq1ofoNErWHbELpssYpSY8XW7+AX/mc=
Subject key identifier: 6C:66:B0:CE:EC:5D:AE:8A:FC:34:3A:CC:C2:09:F3:34:B7:79:4F:13
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 019D992B458FE0BFBA69EAB65BCAF2870EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:43 +0000
Manifest this update: Fri 17 Apr 2026 02:00:43 +0000
Manifest next update: Sat 18 Apr 2026 02:00:43 +0000
Files and hashes: 1: 9BzFpLnLB1lQperfgmv4qrzYH0o.roa (hash: SqfjtbEZOdrWLg54xvBk/hWboyrJmqo9/XjbAhZrvws=)
2: Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl (hash: 6kY0G4y+t4Ip6+mX4zIrvapZiS7zc9sHoAyb4oHGDGg=)
3: yxoCaKfgeTweKDIo2zxWc2jeH10.roa (hash: iUYOXpm89oJ723QbmJPdvxscW5Vo8+6ZFKBfX+z5wi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:45:8f:e0:bf:ba:69:ea:b6:5b:ca:f2:87:0e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Apr 17 02:00:43 2026 GMT
Not After : Apr 18 02:00:43 2026 GMT
Subject: CN=6c66b0ceec5dae8afc343accc209f334b7794f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:45:3a:65:f4:b0:b6:20:1e:8f:38:ce:cd:
b8:f8:49:5e:bb:bb:c4:77:57:7d:54:67:29:8f:27:
1a:7a:de:a2:58:04:63:41:d8:b1:8b:ea:00:df:8a:
ad:6b:99:8c:65:17:28:a2:e0:e0:ef:5b:b7:f9:ca:
56:22:10:ac:05:d3:c3:fc:fb:73:f7:8e:0b:16:f1:
2c:52:0f:bd:d7:02:10:a2:e1:83:b3:6c:49:8d:23:
55:28:3d:18:75:03:a0:b3:b8:62:7d:d0:d2:9b:fc:
63:66:33:df:07:7f:23:60:a8:94:4c:e0:a4:14:ce:
6b:aa:17:65:ea:e2:e0:e5:4f:ed:96:65:6b:6a:da:
d4:62:45:aa:70:18:32:48:ff:be:05:93:2e:ff:56:
8f:79:49:0b:77:6d:d7:80:e5:2d:83:63:5a:8a:17:
9a:b0:07:87:bf:b5:52:11:10:a8:4e:ae:ab:6c:46:
11:91:82:0b:dd:d9:cc:53:7d:8e:92:c3:ea:48:51:
6d:93:26:b0:39:e7:69:db:b4:50:37:3b:81:46:a1:
ca:2e:39:2a:33:4e:cf:4a:81:da:59:d0:f8:65:23:
e4:87:2c:c9:7d:4e:53:56:82:18:39:2b:bb:9a:71:
cb:04:29:38:48:51:e3:4c:f5:29:4e:f8:5b:72:dd:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:66:B0:CE:EC:5D:AE:8A:FC:34:3A:CC:C2:09:F3:34:B7:79:4F:13
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:35:e7:63:aa:85:d0:49:c8:8c:82:2d:8b:a1:cd:a1:5c:0c:
02:3f:70:48:0b:70:cc:be:27:7c:21:72:3b:ac:e5:8e:7a:eb:
6c:43:61:27:88:8b:d0:1b:e4:52:ee:63:61:88:5e:0d:8f:d3:
69:fd:8c:8e:eb:9b:c7:af:a3:f4:1d:16:3a:e6:0b:42:5c:6a:
6c:b7:4a:49:55:e4:87:c4:d0:6f:dd:a8:60:a8:b4:80:9f:3a:
37:d5:b3:cd:af:8e:29:82:20:6e:d6:02:2b:b2:c2:f4:1b:b5:
d9:dd:b2:f1:8e:b5:dc:28:dd:8e:8b:af:12:03:7d:3c:30:8b:
d6:9e:95:ed:e2:fb:71:04:f7:bb:60:a9:3c:86:a8:ff:f2:f2:
cb:7e:70:68:73:4d:07:00:fa:92:cb:14:da:ea:06:18:7e:c2:
a3:d5:5e:ad:ec:fb:1c:dc:00:97:de:a2:ca:2c:1b:cc:68:6d:
7b:b4:08:a0:77:c5:1c:a6:8d:ff:83:24:b7:7f:57:c6:14:41:
7a:b6:ce:02:fc:6b:5d:f6:e0:2b:0e:81:e8:b5:d3:31:3a:72:
ce:ed:31:68:71:85:15:19:1c:e1:1c:93:11:b9:11:37:dc:f5:
57:cb:d6:eb:9f:00:dd:f1:77:8c:df:b3:70:5b:c8:72:f3:26:
73:9b:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:42 2026 by rpki-client