Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: exbh8WxV2mG7ntGP/g++6Nr4yD91lEbsSk70YSiNC/0=
Subject key identifier: 8C:36:C2:EA:D3:BB:3A:6A:09:55:46:28:93:1A:F8:DC:86:C2:DC:FF
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019DA3780118410828D1350AED381071786F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 18D1
Signing time: Sun 19 Apr 2026 02:00:43 +0000
Manifest this update: Sun 19 Apr 2026 02:00:43 +0000
Manifest next update: Mon 20 Apr 2026 02:00:43 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: OvrZAPpbma2Az48M+JFkrLhTcot17AKM0ONf3vCNqZg=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:01:18:41:08:28:d1:35:0a:ed:38:10:71:78:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Apr 19 02:00:43 2026 GMT
Not After : Apr 20 02:00:43 2026 GMT
Subject: CN=8c36c2ead3bb3a6a09554628931af8dc86c2dcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:b8:69:13:23:10:4d:34:e9:bd:bc:5d:2b:
f8:65:e3:69:52:72:56:1c:b1:52:09:f7:8b:fc:21:
e4:56:0e:2c:86:b2:c5:b3:1a:8b:2e:3e:49:55:2c:
ae:d8:5b:94:b9:24:1a:30:bf:78:58:ed:13:fc:91:
b8:b9:23:1e:2b:a1:dd:75:f9:ab:9f:1b:7c:c6:7c:
1f:63:06:31:13:44:f6:3a:8d:38:5c:98:81:1a:c3:
55:32:be:8d:85:6e:8a:22:90:30:69:e4:a5:9e:61:
35:10:a9:97:6a:d5:31:fa:b7:7f:a9:69:93:ae:d1:
c7:e3:fd:21:fd:4c:45:e3:2b:9a:e2:38:41:12:44:
d4:ca:50:e3:23:f4:6b:9c:7a:52:96:cb:f0:73:fd:
81:96:42:08:dd:b0:dd:a1:2e:f0:ce:84:9f:f7:7d:
3d:c3:cf:af:67:43:e9:3d:99:d5:cf:ca:7b:62:17:
a2:0a:37:fd:b9:90:3c:96:84:95:30:48:12:c1:7f:
8a:ae:52:76:b4:d5:94:b4:cc:70:42:89:2f:01:e9:
09:ed:66:c2:14:fb:14:a5:0b:7d:c4:56:25:a0:b3:
d2:b6:01:61:37:0c:e8:cf:ae:ef:8f:8b:6c:75:08:
2f:e4:08:ab:4e:26:2d:92:7a:49:ba:f2:f9:05:6c:
39:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:C2:EA:D3:BB:3A:6A:09:55:46:28:93:1A:F8:DC:86:C2:DC:FF
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c4:d4:49:ad:f1:c8:cb:66:8c:16:97:2e:02:d9:47:39:d3:
5b:33:f2:49:dc:69:c7:6a:54:83:74:53:b7:97:8c:6c:cb:49:
06:af:73:cc:55:ab:d3:96:5b:7f:de:be:8c:81:dc:b1:a5:d8:
8c:7c:a6:35:fc:61:de:b5:99:5c:28:69:cc:e5:8a:33:07:47:
3e:07:f8:c7:aa:03:d3:a1:28:79:c3:ac:c0:28:6c:fe:fd:f1:
59:fc:03:75:77:20:81:1b:1f:ba:f6:31:d8:6c:ff:90:58:08:
66:ca:48:f8:80:50:3c:27:98:62:4b:c6:0b:94:4f:4f:68:64:
ee:49:b0:89:ab:59:30:fa:58:cb:07:a0:74:fe:7c:64:01:b0:
46:98:27:61:5f:ae:bd:be:73:49:5b:a8:f1:d7:83:e4:89:62:
1a:07:56:9c:30:4f:2a:1e:7c:63:16:cf:23:50:b2:66:d9:4f:
51:e4:d9:17:e6:2e:78:de:b2:70:0f:85:f0:4e:5a:d2:49:9f:
de:79:00:5d:9e:48:9c:43:ba:a1:92:1c:cf:ae:cc:41:c4:79:
01:a2:04:de:0c:de:a1:71:3c:53:ac:26:97:47:a2:1c:6e:75:
aa:5b:33:6e:ad:56:15:d5:ed:4a:78:6f:63:35:4b:6c:c2:cf:
fb:ea:d8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:49 2026 by rpki-client