Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: wc6ao6xwN9JmEc0RJIBP2k2X2LU4QIPYe74nj0niR1s=
Subject key identifier: F1:1E:EF:87:58:B1:9C:7C:A3:73:59:FD:B9:72:9A:F2:33:8D:8E:F9
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 019D9BBEA7B7E39C4D8AFEB1362022A57D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0EAD
Signing time: Fri 17 Apr 2026 14:00:56 +0000
Manifest this update: Fri 17 Apr 2026 14:00:56 +0000
Manifest next update: Sat 18 Apr 2026 14:00:56 +0000
Files and hashes: 1: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: i471iiwl/RYeD4B/WquaAiWWeir3yEs46yUB8zD1Jqo=)
2: uj43_HB0cbgfSBJ3pkw5WX0ctlA.roa (hash: Qg5heRt3GNKVhwS3i0/2Bg+iUo3g8NAjbX7YvfBxFzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a7:b7:e3:9c:4d:8a:fe:b1:36:20:22:a5:7d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Apr 17 14:00:56 2026 GMT
Not After : Apr 18 14:00:56 2026 GMT
Subject: CN=f11eef8758b19c7ca37359fdb9729af2338d8ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:69:99:1d:8d:df:89:c4:1b:86:f4:58:ee:
f5:39:65:3f:1e:0c:68:a9:75:91:1b:f2:59:21:4f:
54:5b:f3:b6:66:df:67:69:d5:59:05:8b:10:61:9b:
57:d4:a6:a6:90:57:55:9c:05:79:5c:6d:98:21:de:
a1:87:2e:4c:3d:60:5b:da:47:e9:cf:34:3f:9d:62:
ad:64:cd:02:ab:c2:e8:b4:66:3b:35:c7:1a:1d:8b:
8a:84:8b:88:5b:be:93:34:3d:08:97:2a:db:cd:d7:
5f:4a:9d:15:8f:fc:c7:32:2c:74:a9:d1:61:ee:66:
33:3d:60:a4:a5:eb:2a:d6:9b:1d:c9:7f:ea:f4:1c:
69:3d:0a:4c:30:74:95:ca:dc:2f:f8:c4:8d:50:a3:
d7:52:71:d5:a4:c4:d0:c5:e0:82:20:ee:01:00:52:
69:68:d1:9d:4f:52:07:41:a6:0d:aa:c6:68:64:c5:
6b:75:c2:91:b9:f6:c8:4b:31:c0:ee:af:d8:1a:bd:
6a:bb:11:56:ea:19:6f:43:78:37:b2:83:63:04:6e:
58:b1:11:ad:1d:30:49:da:a5:19:f5:33:76:26:57:
b8:ea:9f:58:38:26:13:1e:88:de:76:d7:70:73:0a:
99:4d:da:5c:08:cb:72:f8:a0:77:db:1b:12:2c:a7:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:EF:87:58:B1:9C:7C:A3:73:59:FD:B9:72:9A:F2:33:8D:8E:F9
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:59:99:da:6d:19:7e:72:0d:b2:6c:5e:f2:5c:8f:66:98:ee:
ad:e5:36:11:31:94:ca:62:55:19:4f:96:a3:d4:ff:c1:e2:05:
87:e7:36:de:7d:c9:18:47:b9:ad:29:ef:18:fd:2b:55:de:e6:
90:a3:fd:02:d5:e6:d3:e8:09:2e:4b:71:3a:fa:82:12:48:29:
80:5f:03:a0:8b:00:4e:e0:ee:4e:15:20:c8:44:de:30:39:b2:
c9:98:e8:cb:b3:a0:37:b4:34:c1:ad:d6:c3:3e:5c:4a:f5:eb:
6a:19:fa:31:c4:bc:ee:a9:89:7e:67:bc:32:ee:73:12:fd:05:
38:7b:5d:5c:ec:9d:c5:c4:ab:a1:3a:b5:de:2d:f8:9b:8f:90:
47:af:ee:ff:79:10:c4:54:df:a5:7a:92:80:2d:1a:d2:44:4f:
64:f9:9a:f8:6f:5b:df:37:2d:81:bb:84:ed:34:1e:c1:66:13:
0c:c6:be:05:22:b5:b9:d9:a8:72:0d:28:1d:58:b5:7e:e7:a8:
d3:7a:f3:e2:ab:77:6e:46:af:83:76:ad:e3:64:65:e8:4c:bc:
29:a8:94:21:cd:6a:00:58:c4:a6:0b:c0:ec:08:09:60:63:57:
2a:45:47:8a:05:44:82:37:70:cb:f9:84:fc:10:0f:74:b4:52:
1c:d7:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:52 2026 by rpki-client