Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: 3++Erwz5vrbGtToO66o0UWbsEAGPioDCHZLBC4FekSk=
Subject key identifier: 8F:9C:DB:2D:25:DB:1A:8B:B7:97:1C:85:55:96:A7:AA:B2:34:9F:C4
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019D99D061BCF9C19D19FCA09AF7CD1ADAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 18CC
Signing time: Fri 17 Apr 2026 05:01:03 +0000
Manifest this update: Fri 17 Apr 2026 05:01:03 +0000
Manifest next update: Sat 18 Apr 2026 05:01:03 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: dHCyRVCziScfbXhZjerj5BbIINEQ2CdPbR0I50kzFOY=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:61:bc:f9:c1:9d:19:fc:a0:9a:f7:cd:1a:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Apr 17 05:01:03 2026 GMT
Not After : Apr 18 05:01:03 2026 GMT
Subject: CN=8f9cdb2d25db1a8bb7971c855596a7aab2349fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:87:69:57:c8:99:c5:25:95:8f:f7:b0:a8:
0a:99:da:3c:54:b0:37:56:1d:6e:d4:77:9e:69:e3:
5b:77:ae:ff:bc:73:5a:1b:3d:ee:db:4b:69:26:1b:
91:f8:78:c2:8c:76:97:cc:e5:66:a7:1c:ac:ac:27:
50:16:c0:5d:6b:6c:a8:5b:7f:ad:18:2f:0d:68:07:
e4:07:b8:b5:0e:03:2a:e1:03:b3:91:e0:c5:5b:cc:
06:9f:b6:f9:05:29:12:11:0a:c4:e7:fe:fc:c9:3c:
e5:5d:f8:58:ae:d3:7b:d6:90:28:cc:96:4f:f0:39:
3f:8c:41:5f:3f:01:48:43:28:41:d8:c9:95:a7:c4:
10:61:50:a8:48:4e:2f:79:56:7a:cb:c8:ab:c2:fe:
08:d5:9a:a3:e2:8e:71:85:43:7c:8f:52:84:d2:2d:
ad:99:d0:05:60:b5:60:a7:1b:4d:83:e3:76:c0:6f:
3b:c6:21:58:11:61:bf:06:84:db:17:7c:44:63:bb:
f5:ae:07:19:e5:39:7a:5d:fa:68:4e:eb:6d:a1:3a:
e3:a1:c5:78:cf:f7:c1:9a:bd:52:94:bf:fe:1b:90:
04:65:0f:df:24:b2:e1:cc:2d:b7:48:f0:3c:d0:27:
69:d0:35:5e:44:a2:64:7a:f6:dc:f3:32:0a:cf:23:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9C:DB:2D:25:DB:1A:8B:B7:97:1C:85:55:96:A7:AA:B2:34:9F:C4
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:31:d1:ff:64:03:2e:c6:d7:08:ae:77:a8:62:aa:a6:6d:85:
bf:88:8b:6e:f7:ef:98:d3:10:12:b3:63:55:0d:5e:f0:26:fe:
d1:f3:91:3d:29:5c:cb:fc:e8:51:69:e5:ac:37:ef:34:11:d8:
f0:0a:8c:cb:86:de:b4:3c:ac:b2:05:6b:e3:e1:7f:fe:6c:d0:
ff:ad:23:11:00:b7:01:52:4a:75:6b:e3:13:bb:18:84:13:aa:
40:f8:9c:91:7f:b9:5e:13:2c:c5:d5:ac:89:c2:ad:7f:da:1d:
b9:c9:68:1a:87:b7:6d:af:d5:fb:28:7c:15:09:0e:dc:cf:ca:
ce:5d:00:c4:5b:2f:0f:35:c4:fe:84:89:80:cb:80:32:18:5c:
b9:04:92:19:19:3d:48:52:89:5b:fc:f0:8a:45:04:4e:17:21:
29:09:c0:86:4d:f4:34:68:fa:b4:b0:e3:67:4a:6a:f2:2c:65:
06:58:5a:2c:8e:05:6d:d9:b2:a0:c0:71:53:d9:36:a8:fc:d4:
66:f3:c9:b6:c7:f9:2b:20:db:1f:cd:e2:6e:63:d1:b9:1e:5c:
d7:2b:2c:b7:37:17:8a:91:c8:da:79:b8:a5:34:c7:09:6e:cd:
4f:8d:98:fa:35:ad:3b:72:53:60:1b:49:e8:3b:31:82:c3:36:
de:9f:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:50 2026 by rpki-client