Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
File: yciBJHytvL9SqirXYsx0VKeocm4.mft (raw, json)
Hash identifier: r7t7qfHQ5Ye44zoGRVPJh3Xt+njIRWcsRRonnlzGKGk=
Subject key identifier: 9F:37:B7:93:0B:BF:8D:E3:12:06:B3:52:A5:5B:56:90:9E:F4:83:3B
Authority key identifier: C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
Certificate issuer: /CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Certificate serial: 019D9C2CB60547A4603054545D864960AEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
Manifest number: 178A
Signing time: Fri 17 Apr 2026 16:01:09 +0000
Manifest this update: Fri 17 Apr 2026 16:01:09 +0000
Manifest next update: Sat 18 Apr 2026 16:01:09 +0000
Files and hashes: 1: JsdL78tRGAWeb9S9iMdRfRQLDXk.roa (hash: lV6DbCoLT2AIp73UdWBqM+s8hS1sGFViY9AJ+gxGCI8=)
2: yciBJHytvL9SqirXYsx0VKeocm4.crl (hash: l1IPOhdhhi4q1DJa6YUzsdNKoJMJfTBVbBMgnDPHFmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:b6:05:47:a4:60:30:54:54:5d:86:49:60:ae:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c881247cadbcbf52aa2ad762cc7454a7a8726e
Validity
Not Before: Apr 17 16:01:09 2026 GMT
Not After : Apr 18 16:01:09 2026 GMT
Subject: CN=9f37b7930bbf8de31206b352a55b56909ef4833b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1d:02:45:d7:a8:b0:a2:05:0b:16:ae:1f:85:
b4:aa:11:0b:eb:7e:68:d9:82:ce:82:7e:1e:f3:53:
d0:f3:75:a7:a4:e9:37:29:5e:04:a3:0f:ff:f2:dd:
7c:f2:5c:0d:88:de:9e:b1:18:75:d8:9d:10:18:66:
b8:e0:94:b4:1c:4c:cb:c6:82:12:5b:a8:98:eb:91:
31:b2:97:08:ce:91:4a:6c:5f:63:ab:aa:e5:12:fc:
70:9a:5d:7c:09:25:47:53:4c:ef:7b:d7:fb:74:4c:
e6:20:ed:f6:54:65:63:15:cd:01:6c:ab:61:2f:44:
a9:38:e5:75:e1:50:a6:9c:ee:3a:d0:2f:2d:3e:34:
b8:e5:94:36:2d:30:37:a4:ca:ae:ac:19:28:97:4c:
4c:45:04:3a:a9:0d:3d:28:db:b0:d5:6e:71:78:d1:
e4:25:6f:47:2c:09:f4:58:92:bb:03:89:41:bd:70:
a9:cf:da:e8:58:39:a9:17:bd:5a:fc:bd:2e:7b:89:
92:30:81:16:e7:b1:c3:68:ba:57:bb:36:31:18:f0:
0e:59:3a:da:22:4b:e7:ab:04:39:37:0b:d5:8d:fe:
de:46:95:53:2a:ee:29:f4:c0:ab:83:ec:7c:0f:5f:
50:9b:0a:15:a3:65:d4:6e:92:c8:75:85:f0:b4:64:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:37:B7:93:0B:BF:8D:E3:12:06:B3:52:A5:5B:56:90:9E:F4:83:3B
X509v3 Authority Key Identifier:
keyid:C9:C8:81:24:7C:AD:BC:BF:52:AA:2A:D7:62:CC:74:54:A7:A8:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yciBJHytvL9SqirXYsx0VKeocm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6d6b53-95a9-4d60-b46d-7efe905ff291/1/yciBJHytvL9SqirXYsx0VKeocm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c6:c4:1d:af:94:da:66:55:18:45:32:9a:e7:4f:8b:1e:0e:
0b:1d:29:83:66:59:0d:4a:28:75:e5:38:78:e9:b0:e3:29:ea:
b3:6e:a0:50:ef:86:32:d7:6f:c9:16:61:eb:f7:5b:c7:35:66:
18:a3:65:3c:41:ea:8d:c8:6a:a6:23:dc:2c:d2:59:52:17:89:
18:03:ac:f1:d0:62:46:03:cf:f8:e1:14:21:46:b9:59:a6:12:
ce:4b:e9:f1:39:e9:ab:d2:ea:22:a0:a3:2d:07:39:98:ea:2f:
d7:09:3d:1b:c1:76:c0:6b:cc:73:0f:72:ef:f1:fc:25:57:8e:
45:dd:b7:10:2b:10:75:69:e8:dc:ab:8a:32:02:43:3f:47:4e:
4c:d6:f1:5f:e2:e2:d7:11:ec:ac:90:7a:e8:a0:a9:62:4f:9f:
40:0a:b1:cc:b1:95:d0:ff:4d:0f:88:0c:43:da:b7:30:ca:2d:
78:2d:ae:07:8c:0b:a8:3e:06:67:70:b7:36:99:9f:24:2c:c3:
22:85:3e:15:f4:4d:2d:ce:e9:01:01:d3:73:7f:78:fc:c4:57:
78:15:22:49:ae:8e:a4:e0:9a:6f:ec:6c:75:74:98:c3:c2:dc:
8f:b6:95:91:b7:e1:71:7e:c8:f0:6a:4b:b6:eb:00:37:ab:e0:
94:59:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:45:59 2026 by rpki-client