Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: 50G2w23pCoCohHORHuY1fmoVU/N7eO7uJPHUPvGmdY8=
Subject key identifier: 1B:C2:96:60:D6:F5:B1:30:A6:96:68:7C:E0:48:F7:F6:61:74:B6:15
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019D9B196901D8A0AE5276AD90E907154875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 11:00:26 +0000
Manifest this update: Fri 17 Apr 2026 11:00:26 +0000
Manifest next update: Sat 18 Apr 2026 11:00:26 +0000
Files and hashes: 1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: 7P6wWVWfE/HVwenFKRO6ntWCEoxAGh9/9VWbb58H6BU=)
6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:69:01:d8:a0:ae:52:76:ad:90:e9:07:15:48:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Apr 17 11:00:26 2026 GMT
Not After : Apr 18 11:00:26 2026 GMT
Subject: CN=1bc29660d6f5b130a696687ce048f7f66174b615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c8:c4:eb:c3:6d:bb:93:af:a8:6d:69:31:58:
70:ae:f5:5f:5a:30:c3:29:e2:b9:d5:d3:8f:82:6b:
1d:a7:4b:77:c8:37:f0:ea:7e:b2:c7:2e:d0:76:99:
13:8e:32:9d:bf:f0:eb:db:88:8e:87:28:39:da:5e:
0f:03:67:06:6c:83:37:ac:38:6e:b5:49:11:ed:df:
30:3d:c1:dd:33:ba:1d:ca:c3:00:3b:3b:d5:76:37:
90:f4:dd:9d:63:73:76:67:f4:c7:fb:9a:21:e5:81:
83:e0:f0:fe:78:33:9e:15:2d:b1:1b:3b:13:01:45:
be:cf:8e:ce:a0:eb:be:dc:29:c7:ab:90:d1:1e:64:
44:8a:fe:f4:a3:a9:16:53:20:06:1a:81:98:bb:c0:
4b:d8:87:7e:ca:ef:55:f9:c2:a9:b5:6a:1c:3e:a7:
27:04:c0:59:8a:16:06:36:2a:5d:4e:12:1c:17:76:
5e:48:e9:02:8f:61:83:8c:a6:0d:c4:52:9f:7e:f7:
be:1c:12:77:2f:f0:69:ec:ba:95:f3:98:78:11:03:
ed:ff:58:8a:73:45:84:3e:d6:f2:e3:25:34:13:27:
78:46:e3:e9:00:29:6b:77:6b:30:38:d2:e7:81:d0:
7a:92:89:73:cb:50:0d:d0:f0:c3:89:d8:30:c3:7a:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:96:60:D6:F5:B1:30:A6:96:68:7C:E0:48:F7:F6:61:74:B6:15
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d2:1a:d1:bc:86:1f:4c:ee:60:a3:b6:e8:4e:27:cb:c2:4f:
71:1b:53:ba:81:cc:97:a7:47:38:85:74:0b:0d:7f:27:92:73:
5d:16:ff:22:d4:3e:4f:ca:c9:0b:8e:ef:ad:3f:df:2f:16:b0:
57:88:8e:92:64:09:5c:fd:a4:57:af:38:16:dc:28:6c:2c:ba:
ae:d5:16:38:11:c8:a4:3e:1a:75:7e:2c:92:35:b3:a1:3f:6b:
89:24:ab:f1:ac:d1:e2:b2:b7:75:c0:6e:db:46:15:95:32:e8:
32:b6:15:d9:be:ce:88:13:e5:aa:b7:1f:23:96:a5:07:55:0a:
a0:6e:ad:14:3c:b7:f9:a0:f9:ff:76:5a:84:63:44:1d:23:12:
3d:0f:98:84:02:d3:cf:f5:e9:da:ce:0e:d3:d5:f7:35:9d:f8:
55:fa:dc:b0:55:fa:18:2d:3e:dd:cb:bf:a3:1c:fb:0d:40:49:
49:ba:69:57:de:4b:ea:a1:7a:06:87:b8:1c:fd:19:03:c2:4b:
67:49:d5:e5:2b:7c:8c:bb:86:1e:10:5f:49:58:6a:d5:54:62:
b8:84:58:96:50:4f:1d:da:36:a9:3d:c2:3f:7b:4c:0d:b7:ec:
b5:55:61:ac:10:51:3a:b4:2a:52:6d:84:19:86:8c:d0:70:e2:
0d:36:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:06 2026 by rpki-client