Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
File: yND8glkHXNZ18xnXr0-nEwSKUVw.mft (raw, json)
Hash identifier: I5T4IdGNORDS4fSBhDEQI1EMAF7/Ejh/adJT7xdl6aE=
Subject key identifier: BB:09:19:D4:CB:93:6B:A8:DF:C7:D5:64:28:D2:FD:40:65:D6:41:D1
Authority key identifier: C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
Certificate issuer: /CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Certificate serial: 019D9B87AE9C748393FA11E719151D44FDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:00:53 +0000
Manifest this update: Fri 17 Apr 2026 13:00:53 +0000
Manifest next update: Sat 18 Apr 2026 13:00:53 +0000
Files and hashes: 1: aROMX3nhLZqryNRJXwP1ZsS073k.roa (hash: g+wD5MW4jZTbZvYAo4VBlWyrm2dqeMZiBJUsm2vjVD8=)
2: yND8glkHXNZ18xnXr0-nEwSKUVw.crl (hash: K0hFqPH3wkYbgbzMN3zeV/SjZ8+B5WP8m8VTNbFEJ2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ae:9c:74:83:93:fa:11:e7:19:15:1d:44:fd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d0fc8259075cd675f319d7af4fa713048a515c
Validity
Not Before: Apr 17 13:00:53 2026 GMT
Not After : Apr 18 13:00:53 2026 GMT
Subject: CN=bb0919d4cb936ba8dfc7d56428d2fd4065d641d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:73:a0:91:a2:b3:e2:8a:f8:b7:e5:1e:34:
5d:f0:9d:90:d2:56:3f:14:08:29:bc:dd:c8:87:db:
10:7c:30:9e:cd:56:c0:9c:da:98:f7:85:96:48:aa:
e0:33:1b:75:c0:c9:c2:53:da:c5:2b:70:d4:95:ba:
63:95:2a:d4:cf:1a:cf:eb:6a:34:d3:19:2c:a5:72:
b8:38:2b:30:c6:da:85:d1:54:b0:97:51:e7:56:bd:
b5:2c:c1:c3:8b:76:e1:a2:c5:3a:f3:07:50:87:31:
4b:e0:2c:27:32:aa:fc:d3:43:c1:aa:87:31:ea:e1:
29:49:cd:aa:0f:7f:55:48:6b:68:1b:32:f4:ae:35:
17:57:d5:17:bf:56:cd:61:83:ba:f0:86:d1:19:88:
ff:1d:16:39:9f:e3:91:a3:ed:c5:36:a7:36:4b:47:
63:87:d0:d4:6e:d2:03:52:05:67:44:1d:af:06:68:
c5:1c:28:59:ba:69:5f:ca:ba:b2:63:74:c5:e7:43:
eb:aa:e0:71:3f:d7:81:62:b3:e8:80:dd:e8:8e:4c:
a8:35:40:b6:ae:cd:ed:68:8a:74:9f:5b:f9:69:fe:
ca:c0:ce:2e:36:90:a8:2a:d7:89:35:8e:19:b2:2a:
df:ee:7b:2d:0a:f3:bc:e8:79:5f:19:1e:d7:87:be:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:19:D4:CB:93:6B:A8:DF:C7:D5:64:28:D2:FD:40:65:D6:41:D1
X509v3 Authority Key Identifier:
keyid:C8:D0:FC:82:59:07:5C:D6:75:F3:19:D7:AF:4F:A7:13:04:8A:51:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yND8glkHXNZ18xnXr0-nEwSKUVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45c862-9e33-45c8-a728-7a2fd10269be/1/yND8glkHXNZ18xnXr0-nEwSKUVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:aa:42:be:20:d5:1f:33:e1:64:61:82:a5:90:5c:97:cc:56:
13:68:14:0e:53:8d:a7:e3:1b:80:ef:78:1d:f3:31:c3:08:76:
e8:cd:4b:6b:07:ed:45:58:bc:06:a3:5d:d4:7f:a7:06:d6:7e:
29:9c:d8:ec:b9:8e:5c:73:31:c9:a5:50:76:ed:d2:93:40:d9:
26:49:aa:4a:19:40:3a:9c:c0:1e:d2:57:5c:37:47:75:6c:70:
65:b6:61:f0:41:91:2a:c1:2e:d3:f4:df:b3:1c:b8:3e:0d:13:
31:e1:3a:a6:34:5a:0b:f3:4d:27:d0:db:e5:0d:ed:a5:01:7b:
32:3c:d5:5f:73:19:3e:cf:ee:b8:58:cf:d7:40:fd:eb:e0:e5:
76:52:47:76:9e:38:5b:35:b2:a7:dd:12:e1:b7:2e:ee:67:5c:
16:d4:a2:67:6d:47:aa:b2:a5:cc:9f:80:a3:b8:55:29:ed:5e:
6b:b5:3d:f5:0e:d5:0e:f2:91:34:93:f2:e1:a5:1c:e8:3b:e8:
82:5a:6e:bc:9b:30:30:a2:04:02:f1:8d:14:3f:f1:91:81:00:
16:b5:92:2b:5e:d6:e9:d5:d4:79:1e:2a:ee:58:80:81:a9:66:
de:71:28:e4:cf:4c:ee:2d:f6:ea:d5:86:18:d5:9c:60:50:f1:
80:c2:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:37 2026 by rpki-client