Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: NG+wB8vc/x8dgbF3pVDTGGrgSdzepCbqtWyqRnjTW9A=
Subject key identifier: A2:5F:28:B3:B5:F1:0E:74:00:8B:0F:F9:30:BE:94:EA:76:3F:9C:12
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019D9BBF09CA5CB294B32BED2BD8B0F73B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 13A3
Signing time: Fri 17 Apr 2026 14:01:21 +0000
Manifest this update: Fri 17 Apr 2026 14:01:21 +0000
Manifest next update: Sat 18 Apr 2026 14:01:21 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: WiVDcjPhg7qFQz5o94zIXqWtxR3tvIAayW9xSNh2yWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:09:ca:5c:b2:94:b3:2b:ed:2b:d8:b0:f7:3b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Apr 17 14:01:21 2026 GMT
Not After : Apr 18 14:01:21 2026 GMT
Subject: CN=a25f28b3b5f10e74008b0ff930be94ea763f9c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3b:2a:dd:58:9a:0a:4c:8e:34:d4:ae:a3:75:
53:8c:4b:de:20:be:e6:fe:29:f0:33:f4:f8:b6:8a:
99:3d:d5:2e:d2:37:4b:6b:f8:ab:3e:41:2d:71:9c:
14:d6:bb:2f:d0:0d:cc:ec:6d:c9:ce:82:43:8c:7e:
c1:2b:f8:42:08:92:64:9b:bf:2b:8b:18:30:b0:3d:
6b:a4:59:cc:11:f4:ea:8a:72:0b:96:85:ab:e3:a3:
06:99:04:5e:42:76:15:9e:a8:fc:34:96:df:99:81:
74:70:0c:43:bd:04:96:e5:e2:76:7a:06:73:25:13:
d0:ee:f6:a4:f3:ca:65:a6:23:31:d8:e8:83:43:bc:
f1:be:5a:62:52:ae:a5:ff:a5:13:6c:5f:b5:22:14:
e0:e8:33:08:16:86:38:99:38:d8:2b:00:5c:1e:ac:
b2:e7:f1:47:38:e2:96:b1:93:76:b8:ed:fe:5d:9a:
76:4d:d4:d9:3f:f5:e4:c6:29:f7:02:e6:60:a0:04:
16:fa:eb:fb:9d:8b:12:73:18:74:b1:42:93:19:b9:
58:77:bb:ae:a9:5f:c1:6e:ec:31:44:80:c4:23:43:
01:86:b5:1e:25:51:3c:1d:52:32:3e:a3:73:16:b9:
03:13:0a:8e:ef:71:ac:b2:74:fb:19:1e:3a:5d:02:
48:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:28:B3:B5:F1:0E:74:00:8B:0F:F9:30:BE:94:EA:76:3F:9C:12
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:63:9b:2e:b3:eb:da:49:e9:dd:1a:6d:db:0c:45:81:05:da:
ff:e5:2c:89:c0:ed:b8:3f:8f:30:ba:1e:dd:e4:0a:d8:77:69:
e6:71:5f:80:d7:82:65:66:c1:75:fe:61:6b:8a:09:a4:79:e8:
7a:27:31:c3:76:c2:1c:41:bf:01:d5:b7:e1:2f:38:99:b4:a3:
96:bb:c0:b5:60:5b:10:31:a3:60:b1:e5:66:34:ce:2e:4b:49:
2a:04:e8:66:37:54:b9:72:67:83:9c:7d:11:32:50:1b:8c:12:
be:2a:0e:dd:da:4c:d3:b3:8a:7b:9e:2a:0e:79:08:77:18:4c:
2b:b1:b8:05:33:f2:0b:45:9a:f0:e9:48:0d:15:e8:75:5f:88:
35:8a:ae:17:41:d1:53:1e:fe:2f:65:01:ef:05:06:70:07:94:
f8:6e:88:d2:71:c4:13:08:c2:8e:c7:14:1a:d9:76:9f:35:85:
34:34:d9:53:8e:d6:28:f3:d9:3a:d9:65:ec:61:c9:4f:a6:cd:
c5:64:f5:56:83:8a:07:a5:0c:4d:5b:b8:60:e0:cc:e4:6c:2b:
ed:e2:e1:64:f1:2f:7d:2e:e0:30:92:ae:d4:ba:36:a9:c1:cf:
45:e3:72:35:86:e3:d1:53:de:11:8d:28:8e:41:28:d1:41:41:
81:e4:48:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:00:53 2026 by rpki-client