Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
File: ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft (raw, json)
Hash identifier: kLroFJFLHJwsSArZloWx5mQ2ql/NMCrFzBs0Ew+8gSA=
Subject key identifier: 27:35:9B:8B:EC:AC:08:CB:2C:05:D8:81:52:DA:8F:0A:46:F4:88:FA
Authority key identifier: C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
Certificate issuer: /CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Certificate serial: 019D984F822E7AA0CA35589EC7F9DAC73A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:00:40 +0000
Manifest this update: Thu 16 Apr 2026 22:00:40 +0000
Manifest next update: Fri 17 Apr 2026 22:00:40 +0000
Files and hashes: 1: RbXFao0zNfSbtJ3sUZUKCiS9_Sc.roa (hash: H36onPAZgGkM8Gj/4vPHfKYw673MWHLo+rCT27hgkEo=)
2: hDlDQXPia_LVcBGYXeJfZh4MgHc.roa (hash: MtZoYfBZrAxoqrM2ef+MiwlnVce8K6//q+/J8AqG4MA=)
3: ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl (hash: W1p/XWpV2f2BbddVoK2tQu3uiclDyoYs4f3iffrgLrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:82:2e:7a:a0:ca:35:58:9e:c7:f9:da:c7:3a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9265b8ba9e6190f2609787cd9d92efd48efbd9d
Validity
Not Before: Apr 16 22:00:40 2026 GMT
Not After : Apr 17 22:00:40 2026 GMT
Subject: CN=27359b8becac08cb2c05d88152da8f0a46f488fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:4d:42:07:b4:22:73:86:f0:9d:8a:af:ff:
4a:0a:b4:a8:1b:4a:cc:51:19:ff:6d:0b:ef:dd:60:
ec:8a:fc:8b:ca:e6:60:2c:5f:5b:cc:b6:33:28:90:
f5:26:f9:91:b1:96:9a:36:48:4f:d6:02:b8:ad:9f:
bf:6e:60:97:cb:a9:de:c0:a4:e1:a3:e0:4e:ff:fa:
9b:7b:08:7a:da:96:6d:16:94:62:26:c8:27:62:6b:
b6:59:0b:ef:78:6f:6e:95:69:8d:69:1e:b1:8f:b8:
ac:40:74:57:b2:6d:21:e2:67:2e:e2:f1:74:5f:38:
65:bf:99:5d:fe:9c:cb:f4:7c:b1:32:90:52:c7:2f:
85:2e:64:ef:7e:1e:79:0f:2b:cf:c7:fc:80:99:2e:
b2:6b:e3:2d:77:80:53:3a:2c:fb:b5:bf:ce:ac:0e:
90:23:fe:db:a8:4f:7c:04:e8:f6:ed:8f:ce:c8:a2:
b8:e4:41:34:58:38:ef:f4:97:10:f9:73:98:f6:6d:
74:a7:fa:11:66:42:ab:b8:e9:0f:29:5d:61:54:16:
b7:15:ab:d9:45:55:79:1e:6b:ff:a6:f6:ec:74:79:
e3:a8:be:c0:50:7c:ae:fa:3e:54:58:e2:c0:ca:2a:
b7:d8:44:ea:33:03:bf:88:b3:73:7e:c6:11:9f:80:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:9B:8B:EC:AC:08:CB:2C:05:D8:81:52:DA:8F:0A:46:F4:88:FA
X509v3 Authority Key Identifier:
keyid:C9:26:5B:8B:A9:E6:19:0F:26:09:78:7C:D9:D9:2E:FD:48:EF:BD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ySZbi6nmGQ8mCXh82dku_UjvvZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e27d9b-cad6-4e1d-9d07-b7a6608a8fbc/1/ySZbi6nmGQ8mCXh82dku_UjvvZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:39:68:73:da:fe:bd:c4:e1:89:21:7e:36:f3:1a:83:ee:b9:
7e:c9:4a:e6:f8:45:d1:47:ab:06:58:79:6f:ea:fa:f0:ab:0a:
cd:2d:16:c0:88:3e:28:d8:5b:a4:fa:ad:c0:81:17:db:cd:3a:
25:b2:97:0d:9e:78:c7:13:ea:b0:bb:0c:d1:4b:6d:f8:9c:19:
3c:da:14:1b:f4:60:4e:da:01:cf:b6:07:25:1c:d9:39:0b:34:
f4:ac:fd:ed:a4:08:7e:c1:b1:a3:48:d2:0d:c6:ff:f6:62:2d:
6a:e7:85:f8:5c:7b:b3:db:8b:7b:3c:95:94:6f:d8:ee:04:03:
b8:00:14:d8:ec:b2:9c:ff:03:dc:6c:bd:e0:6f:6c:1f:cf:e9:
c1:6f:e2:da:65:9c:8f:d2:a5:03:c8:c1:07:a2:f9:f6:cb:9b:
2e:8d:1e:df:0c:0a:80:22:4c:12:6a:63:c1:c3:eb:f8:d1:79:
06:d7:d5:e8:ca:46:7f:51:ee:d1:64:2c:7f:01:5a:df:22:5b:
df:91:79:49:20:bd:9d:46:6c:88:4b:79:dd:33:9f:9c:62:05:
9a:06:6b:33:86:76:72:71:00:e3:cd:a0:5a:d6:db:0d:a4:1b:
93:1b:be:fa:00:01:dc:f2:da:a9:3f:8f:9b:1d:6b:9c:b4:cd:
ca:00:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:26 2026 by rpki-client