Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier: 9YkPYXU/3NdH/+t0zuDhqVZZM9SKotOf3HrN9RzsigM=
Subject key identifier: CD:FD:84:6E:18:3E:EE:2D:F0:3F:84:60:5D:62:BF:67:DB:F0:3C:79
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial: 019D99D0131CA5BB87733C7B71982197F554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 05:00:43 +0000
Manifest this update: Fri 17 Apr 2026 05:00:43 +0000
Manifest next update: Sat 18 Apr 2026 05:00:43 +0000
Files and hashes: 1: YKCft9HN6Pst9hK3MaLfhUqHma8.roa (hash: Iaq8AqqZdxk3lIXgrLTs4UJ8UF+Xl1Tj1di8fJpanws=)
2: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: Ooj3BNqvfVf08rx29qwASfnm6T4PPS07rQbavvKSgvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:13:1c:a5:bb:87:73:3c:7b:71:98:21:97:f5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Validity
Not Before: Apr 17 05:00:43 2026 GMT
Not After : Apr 18 05:00:43 2026 GMT
Subject: CN=cdfd846e183eee2df03f84605d62bf67dbf03c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:62:67:5c:f3:96:ea:01:2f:e5:63:41:3b:13:
83:89:12:d9:18:1f:cf:cd:8e:66:10:14:ca:a7:1e:
df:fe:d7:64:29:7d:d4:60:f3:5a:de:91:83:79:e1:
d7:80:fc:98:61:93:34:0d:95:76:36:83:03:5d:1d:
e7:b0:7c:a3:59:67:05:e7:2d:28:37:fd:ed:41:7e:
8c:44:88:3d:a5:71:08:a5:75:a2:29:c8:7c:90:52:
9f:57:29:14:d2:09:bd:ac:67:95:9f:76:e8:30:65:
b6:82:2e:9d:1b:d3:76:1a:cf:44:ea:3d:ba:0c:78:
dd:a1:6b:13:94:2a:39:3b:dd:3d:5c:80:5c:5c:67:
82:c3:b7:ec:df:e1:10:bf:95:1f:bb:b1:cd:c0:26:
82:44:90:e6:d1:41:17:45:2e:ac:0d:0a:7e:c0:18:
95:de:6d:c4:f4:43:2c:d5:69:7b:f3:ef:42:a5:38:
c4:05:f1:ac:3f:e1:fb:3c:63:f3:42:a6:3c:1f:dc:
e3:31:12:33:4b:16:0e:19:5b:dc:44:99:ae:21:5f:
dc:80:fa:58:dc:f0:90:d1:0f:af:ce:4a:08:40:74:
12:f5:bb:af:c2:cd:6e:f1:1b:66:14:f2:09:0e:6a:
3a:b0:34:e4:d3:a7:55:18:dd:a9:d0:a0:c8:a3:a0:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:84:6E:18:3E:EE:2D:F0:3F:84:60:5D:62:BF:67:DB:F0:3C:79
X509v3 Authority Key Identifier:
keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:42:cb:f2:96:80:53:d5:fc:16:36:be:06:c8:1e:2f:c1:
af:17:c5:31:0f:bc:cc:96:ac:46:17:ec:55:88:db:d2:4f:bb:
ce:c2:70:65:11:b1:7a:dc:04:9e:5a:cc:d6:a0:3f:bb:8a:59:
90:69:60:6c:a4:a8:f1:26:4f:bc:d3:f4:9d:17:47:a9:72:f9:
df:8c:77:89:8b:4b:13:4d:a5:bc:55:e3:6e:3f:29:a5:7b:13:
96:54:a4:8e:a4:f3:71:71:73:2e:b4:32:89:1c:07:84:c6:30:
e4:4a:5b:07:3c:74:32:3e:61:3f:96:d1:26:60:c4:b7:90:d1:
d9:f6:c4:5d:8c:f3:0e:c3:5d:9a:38:c9:31:da:7d:fc:67:86:
5b:51:56:63:b9:a7:e3:4b:99:44:77:e4:22:d7:32:e5:1c:c3:
b8:3c:53:75:8e:99:b5:a7:55:14:8e:cd:8a:e2:e6:35:a5:3f:
6e:3b:cf:fb:48:54:ab:97:54:05:5b:89:a2:96:7a:56:67:b6:
5b:df:db:f2:11:57:5d:88:da:f4:40:fd:b0:f3:d1:f5:5c:83:
be:f6:b9:f9:07:ec:6c:ce:27:2b:89:c3:36:25:37:87:d0:86:
55:9d:82:2b:d8:83:8f:bb:be:cc:77:64:d8:cd:5d:75:0d:52:
33:df:e6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:20 2026 by rpki-client