
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
File: cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft (raw, json)
Hash identifier: R6uvBZcoVZ8mon6LqIRjErtafGnZyxVUWnVhoGazPOc=
Subject key identifier: B6:1F:0C:2F:D2:D0:D4:29:8F:5C:73:EB:6F:3C:D5:E8:D0:AE:EE:C4
Authority key identifier: 71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
Certificate issuer: /CN=718b138ba935234f11ca1025d667f133f07d55fd
Certificate serial: 019D98F4758EB2215B4B0E39903A992CDD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:00:50 +0000
Manifest this update: Fri 17 Apr 2026 01:00:50 +0000
Manifest next update: Sat 18 Apr 2026 01:00:50 +0000
Files and hashes: 1: 9GyPy5VxmA8Grjp6KPGlBXEzQEs.roa (hash: cZRk0f4ULOIcvr4Kq3jJj23UFievd5ZXiHt0/5E2LwY=)
2: cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl (hash: H/PtiozvSAH9N41X/ZtZuOLIcck68Knwc8JRsCEfWpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:75:8e:b2:21:5b:4b:0e:39:90:3a:99:2c:dd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=718b138ba935234f11ca1025d667f133f07d55fd
Validity
Not Before: Apr 17 01:00:50 2026 GMT
Not After : Apr 18 01:00:50 2026 GMT
Subject: CN=b61f0c2fd2d0d4298f5c73eb6f3cd5e8d0aeeec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:50:92:f7:f4:53:c3:47:7a:1e:cc:a0:e2:
90:a6:9e:6d:91:ff:be:6b:a7:9f:fe:10:e4:7c:fb:
bd:2f:ef:72:b3:6d:f9:cd:00:2b:56:0d:72:fe:aa:
2f:76:48:74:d7:55:14:f5:b0:bd:05:16:19:d2:d0:
24:a1:e5:29:bd:a7:f4:4c:65:5c:ed:a4:47:8d:a5:
69:9d:c1:d7:bd:59:d0:4a:af:bb:e1:af:52:1b:ac:
44:35:c7:fa:30:c2:ce:9f:46:25:1e:d4:06:fd:50:
1f:c0:0a:1a:63:7e:ca:22:4d:e0:44:ff:fc:84:d6:
ed:7a:06:56:9e:36:a2:54:8f:c3:84:04:c5:b7:d8:
60:08:d2:f3:41:1e:0a:2f:15:fe:f6:f6:d5:0c:4d:
07:b2:29:80:bf:a4:f5:78:4f:9b:a2:db:53:56:b3:
35:86:72:b2:59:6f:f1:a8:0c:b7:9f:6c:47:4d:04:
5b:e6:fe:ab:65:51:24:6b:3f:54:ee:c3:eb:79:c7:
33:f5:67:58:82:40:1f:e9:03:b3:65:4b:a8:2a:56:
29:69:ea:8b:57:b4:38:ef:71:30:0f:4c:6b:26:e8:
dc:4b:4d:62:ad:65:04:26:0c:12:d8:0b:4a:7a:65:
ba:51:c2:63:8e:38:29:40:3f:81:58:2e:e6:fb:cb:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:0C:2F:D2:D0:D4:29:8F:5C:73:EB:6F:3C:D5:E8:D0:AE:EE:C4
X509v3 Authority Key Identifier:
keyid:71:8B:13:8B:A9:35:23:4F:11:CA:10:25:D6:67:F1:33:F0:7D:55:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYsTi6k1I08RyhAl1mfxM_B9Vf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d43085-d94e-469d-9778-3b8ec1a65880/1/cYsTi6k1I08RyhAl1mfxM_B9Vf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fa:ea:31:c9:d1:d7:ce:4b:2a:5f:16:59:a3:e8:9c:a5:e0:
73:2f:3a:8e:78:a6:75:1c:75:1e:1b:53:7b:24:9a:cf:e1:71:
30:95:69:cf:ed:bd:b7:20:96:59:ee:1d:ac:35:84:a4:b5:ea:
26:49:92:ff:12:5c:fd:0c:8e:74:6a:07:c2:bb:f1:3d:ea:27:
c5:e5:49:a6:66:1b:70:b0:83:bd:9b:aa:41:67:f7:a3:66:8f:
b5:e5:0f:cf:05:fb:6b:4b:c8:5d:aa:0e:43:a7:6e:6f:6b:6f:
a1:a6:7c:d5:af:70:4b:a9:55:6b:ee:3f:39:86:01:5e:a6:a8:
cf:8c:e6:c3:c7:51:1b:e1:2e:31:49:bd:37:d4:20:80:d1:4e:
e7:79:27:8e:b6:0a:33:10:0c:bd:19:bd:64:73:84:07:9c:10:
01:f5:74:1f:28:b6:07:e5:12:e1:22:39:67:c5:49:dd:5a:b0:
cc:ff:a9:29:25:fa:c7:7c:58:7b:f6:1f:af:63:68:29:0e:dd:
03:4a:73:14:e6:cc:a8:f5:dd:52:7c:10:0d:6a:50:9c:fa:f9:
47:e1:1d:1e:d6:81:5e:50:4d:e0:64:72:2a:ea:cd:a9:ba:35:
60:88:1c:0f:96:38:b9:a1:ad:9f:12:eb:1a:1c:4e:4a:a4:b6:
a8:5a:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:30 2026 by rpki-client