Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
File: y4muY2SP0cie1Wo2G9jB4RlWv7o.mft (raw, json)
Hash identifier: 1GHTbjk1vsCv6oSbIaq4Ujo3hKXDVPHCHaS1hbWekbI=
Subject key identifier: 90:4B:C2:6F:8D:49:D7:64:E7:82:33:A6:CD:C6:2C:C0:C8:00:49:F5
Authority key identifier: CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
Certificate issuer: /CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Certificate serial: 019D9A74E7AF35507A971785C44154A62421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
Manifest number: 15C3
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: oOe43u0rDz6F_hHXzn-flvvUaKU.roa (hash: w4KlXnKVNrmrMIj8p2+E6Qm85PcdsOMyZs6adtK9znE=)
2: y4muY2SP0cie1Wo2G9jB4RlWv7o.crl (hash: ZvQ1Cx/dzIxgZOsZZhAqod8uWml4xpfd32FtGD+XyLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e7:af:35:50:7a:97:17:85:c4:41:54:a6:24:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb89ae63648fd1c89ed56a361bd8c1e11956bfba
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=904bc26f8d49d764e78233a6cdc62cc0c80049f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:80:15:b1:56:be:f4:93:83:21:72:25:72:
6f:5f:58:09:1e:c7:cf:7e:47:3e:e5:4a:3f:fe:30:
c3:eb:69:57:16:44:0c:c1:e3:ea:4a:35:c6:2a:ec:
6d:71:ab:15:5b:70:d8:e0:ce:61:70:1f:80:0e:a3:
3e:a4:1f:53:b5:cc:11:e4:64:a1:ce:e3:e6:1c:77:
8d:a0:b8:56:95:8d:29:eb:fc:35:44:53:95:85:04:
5c:37:33:a5:12:a8:d2:95:8d:0e:d2:3c:fa:5b:51:
42:b2:d8:5d:d8:d8:34:1b:71:25:3d:ab:bb:58:64:
b8:e7:23:68:91:5c:7c:14:83:29:27:99:bf:bc:82:
ea:52:1d:38:33:a9:82:0b:8f:0f:ed:7c:a2:5c:5e:
86:23:5b:72:0e:11:20:50:d8:c3:45:ed:c7:5f:0c:
1e:22:7a:43:24:a1:28:15:38:94:2b:2f:b2:11:f9:
e4:41:63:af:45:2a:ce:6c:f0:83:19:21:1b:75:3d:
10:64:45:64:62:58:ae:2b:53:f3:d9:3c:e5:a0:ce:
15:df:bd:5b:80:c7:22:ae:14:6e:01:73:cf:f2:15:
e2:04:5a:d7:a8:11:39:27:ed:59:62:a1:da:72:1d:
00:45:52:13:49:01:4b:2f:6e:8c:8b:a9:fa:a8:e3:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4B:C2:6F:8D:49:D7:64:E7:82:33:A6:CD:C6:2C:C0:C8:00:49:F5
X509v3 Authority Key Identifier:
keyid:CB:89:AE:63:64:8F:D1:C8:9E:D5:6A:36:1B:D8:C1:E1:19:56:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4muY2SP0cie1Wo2G9jB4RlWv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ba6df-548c-44ea-b1d5-f4eb0ff5bb73/1/y4muY2SP0cie1Wo2G9jB4RlWv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:88:03:03:55:ef:d5:cb:da:3f:5a:24:a3:d8:fb:4f:57:ab:
ad:40:88:f6:3e:3c:19:30:dd:52:05:20:c8:e7:92:4d:6b:11:
bf:be:4b:52:8a:7f:dd:70:4c:59:9e:35:c0:06:76:bf:58:17:
a9:00:68:54:e8:9e:e6:ec:a9:8b:88:03:b9:50:42:55:30:b1:
8c:e4:0c:88:10:b3:1b:88:db:e7:9d:c9:fd:e9:97:64:8e:43:
39:c7:69:fe:48:1d:9b:58:89:a6:64:19:2f:2f:5e:b2:56:84:
e3:a6:88:ba:ed:9e:29:9d:4f:cd:e5:69:b3:94:89:0e:d7:c7:
77:f7:4e:da:d4:fc:a5:ba:0e:63:d6:8c:59:6d:09:05:d7:6e:
b2:d0:5f:61:5c:f9:70:93:1a:f7:aa:34:a1:5d:8e:8e:8f:c5:
8c:5f:74:ff:84:fd:3c:54:25:40:09:aa:20:15:99:76:8e:fc:
29:a7:35:22:44:1d:31:98:8e:14:cc:40:c7:ae:4b:8a:f0:d1:
4f:23:7b:83:aa:17:5c:86:3a:e7:f8:4d:a5:75:dc:c7:53:e7:
db:ba:e4:a2:58:76:bd:45:5f:b9:39:f5:63:bc:23:54:81:0b:
52:42:e7:15:b1:6c:13:96:88:61:67:25:88:2c:46:f3:07:25:
d3:37:7f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:43 2026 by rpki-client