Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json)
Hash identifier: WkzxgcayjOsjOfK40vy+0l5O8rIT1iCLhEtVPND2viQ=
Subject key identifier: E3:F8:8D:55:84:06:30:DD:9C:A2:0B:63:5A:9C:1A:F5:80:85:98:09
Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf
Certificate serial: 019D99D04D4C56AC7397BF16ADD7DB9075DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: GUkWGU-5YSSWyPrOwq-ARQkvPxM.roa (hash: zDxdPWOaOyVyBd2CSMyYPVbN3CHQHLMBOzpB+fsTOpQ=)
2: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: vilL3zGXoyFMgg8eEOC/EfUiB3hkAxpn8Q2eyu+/Dfg=)
3: u599xzfE-EX9olnz8cBJD6oZ2j8.roa (hash: rUizvq/CWTmc6UMWj8ItfZ7+jtqd5XX0DhV70/3vEUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4d:4c:56:ac:73:97:bf:16:ad:d7:db:90:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=e3f88d55840630dd9ca20b635a9c1af580859809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:44:c8:f1:1d:f2:35:35:39:52:ab:60:49:
29:03:0d:33:c2:01:f4:09:d2:d6:e8:b8:9e:ea:7e:
21:18:59:11:bc:df:d5:b1:1a:ed:b4:6a:a3:6b:94:
8c:a5:fe:f4:0c:49:a4:7c:21:ea:62:28:8a:0f:63:
71:7f:06:f7:08:4c:1b:33:fb:c0:93:f0:63:72:10:
d0:ed:c5:5e:17:0f:d4:a5:3f:6f:2a:ef:81:ce:9e:
5e:4e:8f:91:86:de:90:2a:4b:34:b5:42:fe:59:af:
f5:2b:0d:16:ed:de:8c:f1:bb:e0:2f:09:68:ae:0f:
e3:8b:17:06:8c:82:c1:a0:43:86:f0:68:8f:50:90:
dd:aa:ba:76:a9:22:b2:18:d6:55:9e:15:85:33:86:
32:c6:31:96:a6:7c:0e:e2:c2:38:90:46:fb:0c:e3:
19:13:aa:56:a9:fc:7a:d7:34:6d:df:d3:c8:3b:ea:
00:a1:c5:17:c9:dd:26:5c:d7:79:7d:7a:c8:7d:02:
51:56:d6:16:e1:a0:4e:89:37:5f:82:13:03:b3:1f:
c4:a9:eb:37:48:2e:3b:f0:20:1a:27:f4:dd:8d:d6:
cd:a7:0c:bb:dc:2b:bf:44:e2:9f:12:e9:c6:6a:ee:
74:36:11:57:68:e9:dc:24:d4:1d:a8:98:ab:68:ae:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F8:8D:55:84:06:30:DD:9C:A2:0B:63:5A:9C:1A:F5:80:85:98:09
X509v3 Authority Key Identifier:
keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:4c:54:7b:88:9b:5d:45:1a:e0:62:0b:ee:51:b7:fe:84:
45:71:af:0d:b1:8e:a2:4d:7a:bd:72:3e:40:04:5d:2f:b6:0d:
dd:18:48:a4:b8:6b:53:df:52:c3:31:86:4b:b7:fc:ee:a4:74:
c4:2e:11:42:9c:11:71:0a:75:96:0e:9f:ed:f8:70:15:b6:86:
e0:41:31:d8:b9:40:eb:96:ed:f5:7f:06:28:a6:25:10:66:10:
cf:dc:0a:5f:1e:3a:d6:fc:1a:04:01:13:7e:61:c3:2a:0d:7a:
b3:ba:fb:31:94:01:49:00:9b:f4:da:5a:36:14:0b:d1:08:8d:
68:30:75:25:92:31:57:70:91:a9:4c:04:c7:51:5f:ed:b9:8e:
7f:23:12:39:40:c7:f8:8d:5d:aa:09:f7:4f:0f:69:70:d9:8d:
ba:26:0e:a0:29:30:2b:07:35:d5:00:c2:94:95:fd:dc:47:07:
44:0b:08:47:ba:8d:6d:2d:a3:78:34:b5:ad:37:08:a5:77:75:
91:77:0d:aa:c6:c5:1c:ed:73:0c:39:eb:2f:43:c5:c5:69:82:
0e:48:46:e3:b9:e1:dd:34:1f:9c:16:b4:77:59:cf:e2:09:63:
e6:01:49:9f:75:59:1c:5c:d9:56:ab:c4:7d:6a:e0:29:36:bb:
cd:09:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:05 2026 by rpki-client