
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
File: RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json)
Hash identifier: qkulo/nzDVJUVkhqf1deil7oQBfJyYoZ4FSm9zIaiys=
Subject key identifier: 8F:D9:EC:40:EC:6B:C7:8E:C0:F3:0C:A3:87:5B:C1:53:BC:8F:B1:AF
Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
Certificate issuer: /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Certificate serial: 019D9A3E6D3994C8920D820D5772F38C0075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:15 +0000
Manifest this update: Fri 17 Apr 2026 07:01:15 +0000
Manifest next update: Sat 18 Apr 2026 07:01:15 +0000
Files and hashes: 1: AT3AwmCGx61Hj5hqdELyQ8fLrSA.roa (hash: XVaOA+4kP/jBW0Nd2clUNIpHrMJJdCt1C6268n4aPw0=)
2: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: bWE8j8TfqdIfsIwTKlOBHOonULfl+yE3tiOQ2vWAvDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:6d:39:94:c8:92:0d:82:0d:57:72:f3:8c:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a
Validity
Not Before: Apr 17 07:01:15 2026 GMT
Not After : Apr 18 07:01:15 2026 GMT
Subject: CN=8fd9ec40ec6bc78ec0f30ca3875bc153bc8fb1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:24:fb:7d:90:e8:c9:33:57:56:4a:11:e9:
e9:6c:8e:09:2a:6a:56:2b:4b:5b:b4:a9:86:e8:69:
5e:e8:df:6d:37:c5:30:1b:0e:fa:cf:48:f4:4c:ef:
c1:41:23:03:28:b2:8f:6b:3d:f7:0d:08:03:ba:9d:
34:ed:1d:b2:6b:f7:66:5a:36:a9:cf:06:5b:fd:23:
c1:31:37:fc:7a:f5:7d:ab:92:a2:2d:82:1c:ff:cd:
f2:73:73:f4:f5:0d:3f:4b:81:7e:49:2b:45:14:84:
71:66:fa:e2:c2:92:a4:58:08:68:5e:3f:91:12:38:
93:9c:b5:2f:29:3c:69:bc:98:3d:32:0a:f1:d5:56:
4c:35:7d:7e:08:a2:14:e5:da:60:15:31:a2:06:59:
03:4a:c3:ba:4e:93:06:50:bb:3d:96:84:e7:06:86:
47:b9:b6:65:ef:20:62:33:e4:8f:94:4a:74:75:36:
e0:69:22:b6:c9:10:5f:ce:25:de:4e:c2:bd:21:9d:
02:1a:9e:98:13:04:66:6d:70:ef:dc:72:2d:4a:56:
a6:ab:3f:c5:1c:46:c6:34:55:51:2c:e1:9f:ee:91:
f8:99:5e:00:32:44:c6:d7:b3:6c:df:b0:ae:fa:e8:
dd:14:6b:28:bf:64:50:68:45:ea:ad:83:43:cd:09:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D9:EC:40:EC:6B:C7:8E:C0:F3:0C:A3:87:5B:C1:53:BC:8F:B1:AF
X509v3 Authority Key Identifier:
keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:79:43:ec:ef:c4:18:f7:74:4d:2b:31:c2:98:1d:e6:27:20:
b6:b2:15:0d:b0:6c:7a:d4:14:57:37:f5:bb:98:fb:16:7c:3e:
b2:84:92:e1:9f:a1:ea:ba:36:61:9f:19:ef:aa:bc:fe:82:08:
31:38:74:90:d0:c3:37:86:c9:67:8f:33:ff:fd:87:7b:16:b9:
16:56:52:01:75:41:40:25:50:97:5f:c3:13:f0:da:fe:96:e5:
2b:e7:a8:9d:94:9b:57:3a:90:73:eb:cd:69:e3:23:9b:d8:b4:
a6:cf:0e:06:f5:94:a1:56:23:78:82:92:a2:0b:32:49:26:ff:
82:d2:d7:61:45:cb:a3:fa:86:3d:e5:36:a9:79:f9:1b:c5:f5:
0f:f2:41:db:ba:0e:d4:10:fc:7f:30:a3:90:5b:f5:e2:93:b0:
dc:fe:7c:ab:f2:6b:45:24:fb:08:4c:5f:a3:01:e3:f9:e4:ec:
29:b3:de:01:51:65:81:d2:93:08:c9:37:02:4f:c2:86:0b:52:
ac:ae:7b:01:55:32:89:1e:86:4e:eb:55:62:4b:7c:a1:7b:a5:
17:61:82:2a:38:f8:c6:d2:c3:0f:1e:ab:3e:5b:0a:24:5a:dd:
f5:1e:f9:af:7c:9d:50:c8:37:e7:5a:cd:ab:2b:b3:b0:bd:c3:
d3:87:44:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:10 2026 by rpki-client