Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
File: yBhKRQWwV2BY_TMwWb_xU65urVs.mft (raw, json)
Hash identifier: ThLJwuaIWl+45HLX3MEdZRuXSeUzqxa4cgqfjZA00Vg=
Subject key identifier: DA:D0:B1:5C:AF:86:85:80:A0:C2:9B:F5:C3:9F:6E:75:93:8C:78:2F
Authority key identifier: C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
Certificate issuer: /CN=c8184a4505b0576058fd333059bff153ae6ead5b
Certificate serial: 019D9A3EECE24DC70B745987623E092E38C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
Manifest number: 0FF7
Signing time: Fri 17 Apr 2026 07:01:48 +0000
Manifest this update: Fri 17 Apr 2026 07:01:48 +0000
Manifest next update: Sat 18 Apr 2026 07:01:48 +0000
Files and hashes: 1: WZPWcS6HaU2HzVdr7DRxZ-pjOJE.roa (hash: F58q4gWz10PJi3pePWbZTjvTAbHmgaZfqkLlGVghmM0=)
2: yBhKRQWwV2BY_TMwWb_xU65urVs.crl (hash: PNIZcU84PX7lYxRovuagDsC5djzW0q1a3u1M6SFqa3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ec:e2:4d:c7:0b:74:59:87:62:3e:09:2e:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8184a4505b0576058fd333059bff153ae6ead5b
Validity
Not Before: Apr 17 07:01:48 2026 GMT
Not After : Apr 18 07:01:48 2026 GMT
Subject: CN=dad0b15caf868580a0c29bf5c39f6e75938c782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:59:55:7e:4e:bf:05:ff:81:ac:64:d5:1a:
6a:b3:fc:18:d8:e9:3e:18:8b:d3:4c:53:47:4b:06:
80:2a:5d:4b:b1:dc:77:7f:0a:6e:03:90:b5:ce:f3:
12:2d:8c:e4:b8:3c:ee:65:19:d9:d6:88:bf:ac:4f:
62:39:b6:b8:15:5b:5b:d9:e0:e6:ca:f8:73:1d:26:
16:ad:13:19:d0:d3:1b:5b:eb:ef:e5:8e:5c:5a:12:
bb:86:51:eb:72:bb:b0:ec:4d:99:8a:76:82:a7:c0:
15:75:39:dc:95:d1:f3:af:e1:03:32:84:51:0b:84:
51:55:05:e6:53:b8:16:89:9b:2a:25:e8:82:bc:c2:
70:da:6d:b1:41:4d:13:2c:37:9a:35:ae:0d:4a:ea:
b3:c1:d0:67:1f:e1:9d:1e:bc:1c:de:ce:51:c6:4a:
a8:af:5e:08:1f:6f:e0:2e:d2:b7:90:d2:74:ef:9d:
b9:42:0a:f6:a9:b2:cd:7f:c0:10:cd:6e:de:55:47:
81:aa:f1:f3:60:42:b7:14:bf:99:92:a4:ce:a3:44:
5d:c0:8d:ca:c4:de:ec:0d:34:a6:a8:33:7f:34:87:
df:9a:fc:a0:90:f8:4e:6d:41:34:5c:dd:31:3b:35:
b7:84:04:f3:3e:7b:06:06:a1:68:9e:9f:77:29:c8:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D0:B1:5C:AF:86:85:80:A0:C2:9B:F5:C3:9F:6E:75:93:8C:78:2F
X509v3 Authority Key Identifier:
keyid:C8:18:4A:45:05:B0:57:60:58:FD:33:30:59:BF:F1:53:AE:6E:AD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBhKRQWwV2BY_TMwWb_xU65urVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eadad3-ced9-41fa-8e5f-5fbf33acd83e/1/yBhKRQWwV2BY_TMwWb_xU65urVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:18:ad:55:8f:3a:ce:dc:32:5c:ed:a7:57:09:1a:47:b2:
f7:8a:ba:76:9b:c4:91:7a:0c:0a:2f:e2:66:28:d4:40:80:3b:
18:37:c1:33:ce:7c:0a:58:92:59:09:f9:ea:5d:7e:30:a5:5f:
09:74:ac:b4:96:97:89:e7:5e:bb:44:43:2b:18:2b:7a:cc:fb:
66:af:4b:db:ff:73:89:72:2e:3d:cb:2b:68:71:6a:ca:53:36:
80:23:0d:50:b5:2f:1c:12:3d:02:86:27:3f:4c:6a:9e:a3:cb:
33:5e:7d:48:f0:1c:97:22:71:fc:3b:60:5b:ac:c3:7a:6c:ea:
55:82:df:2f:82:ac:2e:4c:c9:01:cf:05:08:90:d5:60:89:55:
ba:a1:7d:91:78:12:31:06:a1:c2:1e:68:e4:96:eb:52:97:3d:
8d:47:46:75:a2:95:55:9a:e6:d7:8b:8a:74:e7:c3:df:71:f8:
32:fe:63:b3:61:fc:53:92:ba:14:bf:02:13:94:b7:54:50:da:
ee:6e:b7:1b:7c:21:c5:44:4d:3d:87:d7:76:29:75:ba:e5:6e:
50:e3:e4:35:d0:0c:3a:ba:b4:d2:8c:a9:9c:84:0a:e9:5b:fd:
47:cf:c8:f8:16:d2:8f:54:02:29:4f:d7:38:a9:3a:2e:22:da:
72:4a:cb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:35:09 2026 by rpki-client