Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: IEr2f0ErHUM9mJ4vPQGhcNuSQUmvozFGYdEZl5CSBV4=
Subject key identifier: C8:95:8E:DB:88:01:A0:58:07:1B:F6:86:AC:69:63:73:87:19:FB:2A
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019D984FA02745BEDF26490BD1C85B3194E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:00:48 +0000
Manifest this update: Thu 16 Apr 2026 22:00:48 +0000
Manifest next update: Fri 17 Apr 2026 22:00:48 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: tD9vF0qkqxFdK297BC6u2LUSLk5iOB+NlfVRMBHa1/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:a0:27:45:be:df:26:49:0b:d1:c8:5b:31:94:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Apr 16 22:00:48 2026 GMT
Not After : Apr 17 22:00:48 2026 GMT
Subject: CN=c8958edb8801a058071bf686ac6963738719fb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b5:7d:c9:b4:2a:5f:b1:d9:f3:26:c8:1d:21:
f6:c1:22:37:31:54:b1:2b:58:e5:cb:df:66:a9:35:
1d:92:c6:21:b2:c8:94:c1:b6:ee:47:4c:5c:c8:99:
9d:dc:27:8a:b2:43:d5:36:22:57:85:bb:d6:1f:a4:
55:70:16:9c:c0:45:2f:04:18:23:73:21:50:de:1d:
28:4c:b0:8e:0f:8b:e1:15:ea:fe:71:b2:c9:c4:39:
26:7f:62:83:47:f4:19:66:98:a4:b2:9e:d6:e6:c2:
26:96:d2:6f:33:ac:fe:08:fe:9f:f2:75:92:6f:5a:
83:57:d8:a8:4e:82:ea:5a:b1:61:b7:62:13:a6:e6:
aa:1e:4a:56:b3:bb:9d:52:51:d9:e6:04:a9:f7:42:
6c:b9:4a:ce:a7:93:80:f7:2c:06:b1:63:3c:52:87:
1f:e3:59:3e:63:9f:61:56:11:70:d6:0a:45:f8:61:
25:95:f7:9c:84:d6:12:e4:06:e2:1a:23:3a:af:a6:
0a:b6:f2:93:b0:3b:a3:71:43:91:13:d2:91:dd:2f:
6a:0b:0f:80:f8:d0:70:e9:99:a3:0e:08:63:ac:3d:
46:82:6d:96:db:e3:6c:a6:cf:16:8a:95:dd:64:a1:
52:3a:14:ed:56:d6:92:f7:4a:9b:17:15:f0:e6:dc:
84:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:8E:DB:88:01:A0:58:07:1B:F6:86:AC:69:63:73:87:19:FB:2A
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:78:cf:76:60:91:00:f8:50:38:7d:79:50:a1:56:ad:d3:32:
95:08:b5:eb:9c:b1:e6:0f:11:f0:2e:9e:1e:d3:78:9a:1c:8f:
1f:7c:b9:1a:b2:3d:b2:0c:aa:18:71:a8:f6:ce:61:7b:8e:c3:
3a:66:73:4a:03:36:43:6b:fb:e9:e9:89:d7:16:d5:0a:dc:ce:
78:3f:93:d1:14:cb:89:ce:73:9f:a3:52:1a:a2:db:18:11:50:
b7:01:b2:3b:b0:8e:2c:5f:9b:5a:fe:60:ab:1a:db:13:bb:67:
94:1c:74:ef:04:c1:d0:57:e6:55:63:ed:17:36:2b:67:21:e9:
43:ce:34:de:bf:30:12:66:7f:9c:43:c8:92:aa:63:68:69:c3:
8f:3a:07:fa:81:05:f2:5f:a3:83:6c:94:d5:07:89:68:cf:8b:
17:23:3d:3f:39:dd:98:25:59:50:86:03:84:ea:4e:94:ab:ac:
90:d8:e3:5b:02:44:f9:fb:71:4f:17:e5:43:7a:ca:96:a8:25:
33:b3:23:e9:7f:70:9c:21:41:f9:d0:76:1a:6e:a1:0a:30:76:
10:91:22:ba:a2:4f:0e:bb:97:e6:01:b7:9b:9d:a0:9c:46:44:
c4:30:b4:59:45:08:f8:93:bb:12:be:b4:14:fc:77:b7:b8:3b:
a6:e3:51:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:16 2026 by rpki-client