Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
File: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft (raw, json)
Hash identifier: tv/28Ik+lJ+gH3TlBht0y9gcUYOVMiYeZBWo3UXBVtA=
Subject key identifier: FF:34:52:C8:77:EC:BA:62:EC:D6:BC:0A:CB:BF:A8:8F:99:02:CD:F0
Authority key identifier: 71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
Certificate issuer: /CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Certificate serial: 019D992B140BCEE6E7E13FD4E4273AF89556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
Manifest number: 0B8C
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: 71mCI3KMqJb1fWbhA5VAOz_YwlY.roa (hash: Yhy9snU417VssGNDPJuFTqPzX5TH460OslWhtb60W/w=)
2: cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl (hash: kz9S5V41sZTe2FLSmbpaqlFx3yn7Jw8tz+j9bGn/V/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:14:0b:ce:e6:e7:e1:3f:d4:e4:27:3a:f8:95:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7184c805d4e53c2a132c739c4e3752afc35ae995
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=ff3452c877ecba62ecd6bc0acbbfa88f9902cdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:c1:ca:64:58:30:49:3f:c9:23:45:76:fe:
f2:b9:27:32:ba:ea:22:de:51:02:8c:6c:94:00:52:
8e:27:39:9b:e5:de:ee:2a:0a:b4:87:10:74:06:df:
d7:a8:f1:dd:b8:65:20:07:74:13:2c:5f:cc:07:bb:
e2:95:a8:b3:b2:76:45:2b:01:7b:2d:bc:ac:65:de:
26:66:cb:6d:42:0a:cb:6b:a6:4b:9b:78:4a:64:92:
42:32:e4:7e:51:56:d2:8a:89:09:4d:fe:1e:8a:03:
e9:54:4d:37:15:27:05:73:93:fc:88:6e:24:ef:8e:
1b:1a:19:b3:03:2b:3f:64:4f:fe:c0:a3:eb:59:26:
d4:bc:c6:14:05:50:45:1d:3e:e1:59:9f:86:bc:b4:
8f:fb:71:ac:4a:e4:2b:38:5e:c2:bd:8c:7d:f4:7a:
4b:92:48:f0:7e:96:a3:11:67:c3:87:e7:d4:11:ae:
94:13:23:be:13:f2:30:77:d1:6c:a9:29:45:f4:9f:
6e:0c:0f:17:c0:e6:f4:48:d3:3a:5f:43:20:18:b3:
ed:95:03:d5:93:12:8a:6f:e0:b5:98:97:f4:5f:e1:
5f:f8:d1:f6:a9:74:23:de:61:55:57:b9:57:14:45:
36:ea:e4:5e:be:aa:86:02:f0:8a:7b:fe:57:1e:fd:
85:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:34:52:C8:77:EC:BA:62:EC:D6:BC:0A:CB:BF:A8:8F:99:02:CD:F0
X509v3 Authority Key Identifier:
keyid:71:84:C8:05:D4:E5:3C:2A:13:2C:73:9C:4E:37:52:AF:C3:5A:E9:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/726a52-5c73-4905-a19d-9f72f8dec468/1/cYTIBdTlPCoTLHOcTjdSr8Na6ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b4:c6:fd:62:62:c1:ec:bd:a0:ae:c7:ed:dc:af:c9:ca:a7:
9f:48:14:0b:de:8e:5b:3a:f0:09:30:96:ba:05:29:1a:af:2d:
f0:07:ae:c5:15:ab:af:41:25:fc:0e:36:b4:2b:6d:db:20:17:
e2:73:e9:23:65:d8:5a:52:02:94:58:9a:33:40:09:25:8c:e5:
8a:0f:4c:1d:32:e7:5b:d7:fb:cb:43:6a:56:62:1d:db:45:08:
c1:45:a0:4c:92:51:9e:ca:bb:5b:4f:a7:10:9f:49:9e:c4:a2:
93:e9:51:7a:ff:67:f4:8e:80:9a:bb:78:70:01:35:80:b9:1b:
4b:31:26:17:4b:a7:d5:f2:af:18:e5:43:53:41:06:fd:9d:da:
b4:e2:c0:f8:62:52:a4:45:1c:88:a3:3f:68:71:58:5f:c2:b3:
86:fe:b3:a5:6e:df:a7:ec:a2:7d:6a:b3:50:bb:0a:87:c1:3b:
59:13:b6:8f:b1:15:50:95:e7:40:51:dc:2b:0c:cb:b5:df:5d:
12:6c:49:47:fe:b1:6c:80:f8:ff:6e:28:8c:8f:07:18:8b:aa:
99:f9:a6:69:01:df:dc:a1:27:e6:df:3c:4d:43:90:46:9d:cc:
42:e8:66:d5:5c:fc:c9:2a:60:ee:23:b6:d0:d4:42:95:55:e7:
cb:a0:01:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:34 2026 by rpki-client