Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
File: yDOgOJWSdW5BXN40irvCQxKwLfY.mft (raw, json)
Hash identifier: 0CIc81hp056cbetSZNYTuh93cX9gb3ZprHUIdOl2rMU=
Subject key identifier: 49:6D:AD:CD:29:CD:46:7B:88:79:DA:A5:99:F7:70:1E:37:7D:D2:50
Authority key identifier: C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
Certificate issuer: /CN=c833a0389592756e415cde348abbc24312b02df6
Certificate serial: 019D99990F7AF6CE0A731A211F2B545B0A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:38 +0000
Manifest this update: Fri 17 Apr 2026 04:00:38 +0000
Manifest next update: Sat 18 Apr 2026 04:00:38 +0000
Files and hashes: 1: 3TtBL0qA5kisjEdyIAiW0RrkR5Y.roa (hash: IIwZ4eNX/TnLbTOdzNJ7spbedu7ExR/vuLghC48r7Rc=)
2: yDOgOJWSdW5BXN40irvCQxKwLfY.crl (hash: fJWh6+V3d1xO/i0rjBCbqwXxx/ID4qrFZpOU/LHzT54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:0f:7a:f6:ce:0a:73:1a:21:1f:2b:54:5b:0a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c833a0389592756e415cde348abbc24312b02df6
Validity
Not Before: Apr 17 04:00:38 2026 GMT
Not After : Apr 18 04:00:38 2026 GMT
Subject: CN=496dadcd29cd467b8879daa599f7701e377dd250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:1e:38:af:46:5f:d0:76:a6:68:59:1d:00:
3b:05:b5:08:b4:4e:d0:74:dd:77:5c:e8:71:39:50:
38:16:55:f8:be:14:1e:d4:d9:38:e2:85:60:5a:3c:
3d:98:e6:58:85:c2:6a:ff:08:1f:ad:bc:1f:37:7e:
5e:f2:f8:ae:12:6f:40:10:6d:a3:9f:4a:bc:af:8c:
5d:2a:d1:46:6e:57:51:4c:90:52:a7:f0:0c:40:fb:
ab:dc:6c:61:9e:9d:ee:3e:f4:9d:38:ed:da:13:8b:
07:f0:e3:3a:ff:67:04:bd:08:99:d4:0e:42:6c:5d:
ff:88:f4:76:74:a8:55:8c:95:1a:b3:96:e1:43:f0:
b0:3e:82:1f:34:16:e6:fe:f7:16:ce:28:86:04:1d:
5d:a4:6f:2d:38:33:68:28:f2:e5:dc:3c:45:22:ca:
cf:b2:94:3a:82:a7:68:c6:4a:d9:76:4b:9d:b2:84:
0b:96:41:9a:26:93:c2:8c:5f:63:57:f4:5b:2a:b0:
bc:9a:b6:cd:86:4c:9c:ab:40:ca:04:16:52:c7:6f:
cc:93:7e:f5:f2:14:de:4e:7e:1a:0b:0c:69:d3:82:
69:3b:a8:c9:20:af:86:7d:2a:01:01:1f:98:dc:40:
4e:af:31:c8:84:2c:9c:f0:49:3a:d5:f6:97:52:9d:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:AD:CD:29:CD:46:7B:88:79:DA:A5:99:F7:70:1E:37:7D:D2:50
X509v3 Authority Key Identifier:
keyid:C8:33:A0:38:95:92:75:6E:41:5C:DE:34:8A:BB:C2:43:12:B0:2D:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDOgOJWSdW5BXN40irvCQxKwLfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cecd3a-e92a-4509-b590-9f307574051e/1/yDOgOJWSdW5BXN40irvCQxKwLfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:47:49:d4:ad:a9:5a:18:7f:a4:52:8c:9f:34:d2:51:92:45:
9d:55:c4:88:f1:3c:94:01:72:d7:c4:87:7d:60:0e:c1:7b:68:
9a:98:d3:19:f0:7c:30:8a:46:0a:00:fb:d9:47:9a:62:dd:03:
c0:40:87:92:68:09:06:94:ce:3e:b9:71:67:fa:b7:49:0d:05:
f4:d7:47:9c:23:ec:6b:33:9e:89:61:5a:05:3f:5c:b8:dd:ae:
c5:f2:19:49:f7:07:b6:02:ea:e1:16:81:51:d8:94:86:10:53:
ff:31:01:e1:9a:68:f0:09:f3:8b:ea:bb:95:7d:01:a9:89:1a:
23:bd:cd:07:aa:8d:8d:98:5e:e9:ee:aa:26:4e:55:a6:83:41:
50:f1:1b:22:2e:5a:b7:a8:82:8c:d4:9c:4d:d9:37:24:90:ef:
bd:27:1c:17:4c:77:3c:40:d0:48:f8:27:a3:43:5b:d2:58:a6:
32:d8:10:c6:fe:f6:e6:0e:4c:8b:d1:a9:d7:54:ee:78:2a:f8:
a3:a6:8b:7f:2b:18:ed:ee:e7:d8:66:5d:74:1f:23:e4:93:ea:
f0:ed:42:47:c4:6d:93:46:52:ca:c7:6e:c1:99:dd:f1:ee:46:
1a:4d:2a:a6:5c:58:ce:ea:54:a1:78:c2:89:31:be:8c:82:78:
29:f0:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:18 2026 by rpki-client