Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File: rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier: oJcK6h9GGolrFoa6wO84piQlpl3H9Jc98nrNHZnFc4o=
Subject key identifier: DE:56:EB:58:CA:7F:41:FB:E3:4D:88:A1:BB:20:C6:00:97:4D:E0:F0
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer: /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial: 019D97AAA78C8F2B818763592A1CEEE50583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number: 153B
Signing time: Thu 16 Apr 2026 19:00:36 +0000
Manifest this update: Thu 16 Apr 2026 19:00:36 +0000
Manifest next update: Fri 17 Apr 2026 19:00:36 +0000
Files and hashes: 1: 6gA1OlRN1ocGTkJB84vRgcbm7yE.roa (hash: m0QRct0nDamOcIZ5SWxkfJtavcfbw7Z34cfgKRNCHWc=)
2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: y0rBBBNlcfoCjRz2LOf635+VKdY5nhO68Wd0fGgShoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:a7:8c:8f:2b:81:87:63:59:2a:1c:ee:e5:05:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Validity
Not Before: Apr 16 19:00:36 2026 GMT
Not After : Apr 17 19:00:36 2026 GMT
Subject: CN=de56eb58ca7f41fbe34d88a1bb20c600974de0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:22:e7:fd:d2:f8:95:69:f7:f5:90:b6:05:
73:8a:f6:0e:c2:b0:82:63:de:b8:52:5f:2f:6f:88:
40:09:71:2c:64:d2:f2:9c:70:29:e3:04:8b:f1:91:
da:d9:d8:56:e3:00:02:21:ee:7a:54:05:18:0c:5f:
14:23:04:1d:cb:7b:7e:55:c7:44:50:80:2b:8c:43:
f9:ed:47:9a:c0:2d:e3:c6:fa:d1:7b:94:3c:84:27:
fd:01:63:55:39:f4:ab:2a:63:ac:80:c5:2b:f3:5d:
54:ca:a0:4b:b8:2d:b4:75:77:05:99:83:6c:47:6f:
1d:63:8d:9b:8d:47:f8:cc:27:b4:75:ae:15:a2:d1:
54:a6:46:eb:b0:7b:02:32:a2:2a:45:a3:32:b4:7f:
eb:58:6e:bb:62:15:cd:20:56:bd:5b:58:e2:4f:f5:
b5:8a:2d:c3:7d:d7:fc:e2:5f:68:b3:6c:a8:90:c6:
4a:49:5a:99:b5:eb:e9:09:19:23:59:37:16:0e:8a:
d8:11:64:6b:69:cc:49:41:75:09:6e:6c:55:9c:f0:
9b:36:c3:f9:07:d6:ce:f7:1b:d1:fd:f7:cb:98:a0:
01:37:91:88:a5:10:cd:c3:9c:e6:f6:a1:0f:54:0f:
73:7e:fc:2d:e8:48:7c:18:7c:91:70:08:85:49:3b:
59:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:56:EB:58:CA:7F:41:FB:E3:4D:88:A1:BB:20:C6:00:97:4D:E0:F0
X509v3 Authority Key Identifier:
keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e5:0e:21:2b:42:95:89:3b:8f:a3:96:74:e6:aa:24:b4:35:
9a:69:46:2d:d8:ef:c3:4e:cc:62:16:89:38:a9:e8:37:be:80:
52:f1:88:88:d5:4d:30:a9:c7:35:12:4e:34:d0:0d:de:d1:23:
7f:18:f7:2b:67:58:02:c6:1f:30:12:9a:ef:8a:1c:00:ef:47:
db:14:81:85:36:1f:25:51:50:f3:b2:c9:95:ef:09:d6:49:d4:
6f:fb:88:eb:22:67:65:03:a0:89:85:0a:47:69:61:2f:d7:7d:
63:dc:66:d3:51:2d:bc:31:4e:7c:60:80:99:33:63:e9:0c:00:
ed:ee:aa:a6:38:3b:cd:ac:64:a1:ab:6a:2c:b6:19:ac:06:64:
90:83:ac:24:28:61:d7:62:63:df:21:f8:ea:be:ea:1c:c6:fb:
68:26:56:ad:6c:9d:18:6e:53:65:ce:9f:29:35:85:a3:2e:a5:
38:d0:a6:c9:ec:8a:07:64:46:31:1f:9f:64:82:1c:c2:14:53:
20:c2:71:39:f6:72:a3:4f:94:90:f8:0f:c7:c4:77:66:43:d4:
49:f2:f8:42:5e:32:83:36:0d:36:1a:45:d6:52:d2:cb:cd:5d:
11:ff:79:a0:c9:ac:c3:a8:ae:f1:4f:b7:f1:ba:08:e4:72:c5:
09:91:b2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:05 2026 by rpki-client