Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: wwQz9R0kkkI9FE1rYC/N8mGZtTzndrt4twK2/qEr0no=
Subject key identifier: B7:A2:6B:E4:00:2A:12:34:94:BF:58:64:F3:6F:F1:60:F3:EF:22:7F
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 019D9B87D9F94C6AEDC3EE3F5D88084F3B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 1536
Signing time: Fri 17 Apr 2026 13:01:04 +0000
Manifest this update: Fri 17 Apr 2026 13:01:04 +0000
Manifest next update: Sat 18 Apr 2026 13:01:04 +0000
Files and hashes: 1: Q9Bl2Y8XynFhwHzSJcPaVyeQxvU.roa (hash: PqOxTXkE1hZGBT5c4H4bbRh8w/mimKAW3aD/Vceb+Hg=)
2: SHeQcX4koxBQRv_Fnf7btNJU99g.roa (hash: 8unaGmLOmfi1pzpYrPstmZfA+HzBWFpq+VVnPVsq10I=)
3: gpyVlC0l_arGjmVVCGk8FwUeXCo.roa (hash: atjXbXi2DUOCPxkI2GIM/Oz+gbwXdF8QQwJzid/42jw=)
4: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: EdPTLYlxCZVDsaWrAygREYC3gToLV4XD7LZ3/webg0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d9:f9:4c:6a:ed:c3:ee:3f:5d:88:08:4f:3b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Apr 17 13:01:04 2026 GMT
Not After : Apr 18 13:01:04 2026 GMT
Subject: CN=b7a26be4002a123494bf5864f36ff160f3ef227f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a6:19:c9:0b:e7:42:f9:80:18:1a:02:2e:d6:
cd:08:66:d5:52:94:27:d8:a7:0c:1a:0f:e6:a2:a6:
ac:9a:69:9c:4b:66:cc:8c:80:75:36:ef:38:69:05:
30:6f:e7:21:e5:42:18:e2:9b:1f:af:ce:10:c6:7d:
27:e1:53:a8:f7:85:ea:53:ec:dd:9f:08:91:27:b1:
c5:31:6a:c0:6c:ae:e3:b4:5e:6f:94:3f:d5:d4:be:
10:80:31:10:01:9e:bb:23:7a:e1:9d:15:43:d0:24:
31:71:6f:3d:1e:c5:52:fe:32:e0:77:1b:95:f8:4f:
4d:78:cd:d8:3f:c0:db:f0:7d:e9:9c:1c:cf:a0:16:
ff:14:fe:89:36:31:b7:79:1d:39:39:3e:c6:93:8a:
94:99:1b:d7:e6:dc:b8:12:d9:92:6e:25:e5:2d:46:
6f:23:fc:bf:b8:96:28:fb:aa:56:af:5b:39:11:39:
6a:04:26:da:39:a0:3e:c8:74:b3:90:eb:8a:da:77:
6d:2d:29:92:20:a1:cd:7c:df:b4:03:c6:0b:0e:08:
b1:08:96:10:c2:81:64:f0:3c:e8:81:f2:f5:2a:f5:
3d:d0:55:03:9d:17:ef:6f:9e:08:ed:93:15:90:1f:
43:57:8d:ce:b2:87:b6:8b:f1:c9:c2:2b:04:c4:32:
38:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:6B:E4:00:2A:12:34:94:BF:58:64:F3:6F:F1:60:F3:EF:22:7F
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:9b:53:bd:78:4e:6b:82:41:5a:fe:4d:32:11:ad:29:d0:43:
56:76:d1:e8:10:55:55:75:cb:d1:31:2d:c4:e8:2b:93:34:c4:
c7:26:40:85:9f:60:d9:e7:a4:6b:99:20:d3:25:91:b5:a1:19:
38:16:88:d4:80:a6:99:16:9e:a2:a6:a0:79:80:2b:15:ce:30:
7b:cd:15:1a:e2:38:4a:5c:8a:b8:7b:67:56:04:b8:2a:f5:83:
65:24:c3:53:9b:c8:bf:7c:b7:d6:6e:55:46:cd:0e:a4:18:f7:
d1:55:25:93:c3:ea:1d:8d:ce:f8:64:e3:82:f6:bd:cb:f0:d9:
4b:73:89:c2:08:59:c8:fe:c5:7b:f9:cb:f3:0e:09:57:dd:b2:
52:d2:68:79:77:86:da:09:d0:ee:ab:f6:91:8e:a5:21:01:56:
44:e7:d3:c8:ce:cd:b1:f1:84:8c:df:82:29:2c:37:6a:d6:4c:
8f:9b:5f:55:bd:b7:4e:54:4d:78:1f:61:de:8f:e4:02:3d:01:
35:10:8c:06:5d:1c:40:03:13:23:b4:b7:3b:4c:b5:da:4f:db:
c2:61:33:f6:3c:38:64:0b:e8:e0:0e:b4:0c:58:9d:06:56:7d:
ae:90:4d:d1:9a:6c:91:5e:68:c9:7d:07:b9:2c:ad:ad:97:31:
66:01:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:48 2026 by rpki-client