Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
File: yJgrANxgA9zFz9fSe1WV0MrKXaE.mft (raw, json)
Hash identifier: w+bpN6WNnMZjUslz1Xvbn3g5ngk0fclCQxhwS6b+TUE=
Subject key identifier: A8:FC:75:D2:E9:59:F0:8A:AA:F7:40:B2:BA:F5:8E:B5:D5:0C:B1:4C
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 019D9B511C6E4143CF15AE33BB2726BE0A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:01:17 +0000
Manifest this update: Fri 17 Apr 2026 12:01:17 +0000
Manifest next update: Sat 18 Apr 2026 12:01:17 +0000
Files and hashes: 1: 1-DbHlApWvHSbpBcMnUYSNB33bx0.roa (hash: OBuf9H667a+ueEzKXN1f4R7v9DKwH4hbK0fjD7m4gDM=)
2: yJgrANxgA9zFz9fSe1WV0MrKXaE.crl (hash: cQ8uJsHqCewZLbS5XJmYDW0K9AQLL3tYDSpGdkp6IQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:1c:6e:41:43:cf:15:ae:33:bb:27:26:be:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Apr 17 12:01:17 2026 GMT
Not After : Apr 18 12:01:17 2026 GMT
Subject: CN=a8fc75d2e959f08aaaf740b2baf58eb5d50cb14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:41:55:0d:7d:f5:db:bd:6b:d9:57:c2:c7:
97:c5:63:08:8c:ed:5a:6a:b1:55:a4:40:61:83:a0:
b0:16:c7:f4:b5:6b:24:92:e9:11:30:08:d2:0d:61:
c3:e8:f7:9b:6d:1b:b9:b7:5c:79:81:69:d3:46:07:
1b:70:b8:86:1b:b4:0c:87:55:66:7e:a9:54:9a:d9:
a5:20:fe:d5:37:cb:33:bc:07:fd:ee:01:a8:86:75:
60:dd:4c:52:e3:32:c8:8c:f7:bf:0b:c4:75:23:32:
74:be:e0:c3:9c:b1:b1:99:7d:32:21:82:66:63:76:
9f:5a:d0:44:5c:9c:cf:25:55:75:dd:bf:10:b6:96:
33:da:a4:03:da:ea:39:80:4b:7d:61:5b:94:db:a1:
b8:72:0e:43:e8:7d:50:31:2a:1f:f0:b9:23:0c:18:
9e:84:8d:7c:36:43:f3:ae:58:12:73:2c:31:a6:3c:
82:e7:81:f9:38:7f:0e:d7:1c:b9:07:a9:2a:88:86:
63:e1:2c:10:0e:4c:79:4d:42:9f:15:83:1d:de:34:
21:c4:bf:8a:a2:90:db:1c:fe:f2:e3:20:d7:63:29:
4f:43:67:c4:92:53:2e:36:1f:e7:5a:83:10:04:4c:
cb:3f:e7:3a:d2:19:ef:8c:11:21:a0:10:9f:bf:9a:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:75:D2:E9:59:F0:8A:AA:F7:40:B2:BA:F5:8E:B5:D5:0C:B1:4C
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:d3:0e:d9:1e:e9:51:03:66:b7:a8:46:ce:82:08:2d:4c:d1:
c6:35:ad:63:bb:f3:5a:3f:69:8b:10:b2:dd:fc:47:1f:a4:e1:
0b:ea:13:7d:f3:29:8f:ed:d9:bb:8f:d3:e0:db:12:7d:fd:ce:
fd:a4:28:1d:a2:7a:bd:37:72:c8:f6:f9:0e:fc:d7:4a:a1:a1:
ef:b6:7c:9e:a5:0f:c7:d7:57:33:b2:25:57:ec:9d:a4:78:99:
54:84:cf:bf:34:5f:2e:4d:48:89:c9:05:5e:cf:f9:87:aa:45:
1f:21:13:64:57:ef:2a:a0:aa:10:ab:73:2b:ab:cb:c7:29:75:
65:f8:27:a3:16:ca:5b:29:55:f9:90:6e:4b:0b:5b:c6:86:87:
a9:1c:7f:c6:ba:72:0d:a8:8d:f1:40:56:08:5a:56:b6:04:7c:
da:b9:d8:71:b4:d3:e3:a4:85:b8:31:d8:7a:dd:57:2d:8c:22:
5f:2d:0e:0f:56:76:e1:7c:74:09:27:9e:14:4d:b1:99:8d:db:
d2:a5:05:83:03:d3:0f:7e:33:ad:f9:00:f6:17:dd:ef:85:30:
55:14:43:18:ce:08:e3:d8:7b:77:cb:53:fd:16:bb:da:28:53:
4e:0e:ee:10:bc:c1:36:b1:34:29:89:14:95:11:d7:b4:54:89:
07:64:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:49 2026 by rpki-client