Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File: NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier: SeCLmjAENxf1aILTtjZTLtMcLYMwZPpgtycsSH/qL+U=
Subject key identifier: D0:F4:9E:DF:D6:A2:CC:57:E8:55:C3:23:97:5E:21:AB:0D:26:7C:52
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial: 019DA340CAD43A8D65B2D70864A536E125D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 01:00:25 +0000
Manifest this update: Sun 19 Apr 2026 01:00:25 +0000
Manifest next update: Mon 20 Apr 2026 01:00:25 +0000
Files and hashes: 1: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: Ny9m0U0FfTYfP8XT95T41UWEuctIC4Q68bUGINq3OR0=)
2: bJkqSEyBk_C06J1GLb3ybMWIphE.roa (hash: gpTzVN8vQmg0d/Krpn/tav8Ck304WJ5i9XjSQqIb4QQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:ca:d4:3a:8d:65:b2:d7:08:64:a5:36:e1:25:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Validity
Not Before: Apr 19 01:00:25 2026 GMT
Not After : Apr 20 01:00:25 2026 GMT
Subject: CN=d0f49edfd6a2cc57e855c323975e21ab0d267c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:3f:52:c3:d2:66:ab:29:a0:fd:8b:dc:a2:
a7:b6:38:69:5f:98:7e:6c:8b:b7:cb:21:5f:d1:f3:
dd:30:13:99:35:5d:eb:ab:d2:3b:bd:c1:5f:60:23:
b5:b1:d3:97:8b:75:df:be:73:27:ba:a6:eb:ff:f0:
b2:a7:26:af:d0:b3:27:8c:80:9f:cd:4f:01:da:6d:
6a:6a:30:63:8f:ff:92:6b:66:12:35:d2:5e:13:f0:
84:11:ac:b6:f5:e7:53:34:76:10:3b:d9:19:3a:00:
7c:51:5b:f3:13:43:7b:ee:75:29:fc:ee:36:00:9d:
fa:7a:dd:fa:61:1b:f6:15:57:42:cf:8c:06:76:a4:
64:21:b4:4f:3a:4b:55:c5:5f:57:2a:6d:f7:10:ba:
ee:8e:b7:4e:f7:6d:7d:e3:1b:ca:ef:16:be:dc:8f:
50:c2:a8:8c:6b:b6:1b:b9:dd:5b:d7:50:08:ec:57:
0e:15:39:c6:13:94:93:f0:00:26:ac:a0:7f:50:6b:
e6:9b:50:3f:f0:7a:0c:5d:40:79:08:df:67:36:77:
3b:0c:98:0e:f0:28:76:98:10:02:67:70:5c:db:45:
c0:3b:97:a6:14:f7:34:34:e9:9b:24:5e:7c:46:90:
ff:26:52:7f:33:93:c0:83:a9:09:be:ec:df:bd:f9:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:9E:DF:D6:A2:CC:57:E8:55:C3:23:97:5E:21:AB:0D:26:7C:52
X509v3 Authority Key Identifier:
keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:41:26:5d:e3:20:c4:b4:58:25:a2:e6:e9:1c:51:29:1f:b4:
f2:f9:57:f8:6a:18:4e:8e:75:43:e1:de:ae:b6:af:4a:93:2f:
ea:23:e7:eb:f6:b1:a3:2c:b8:65:b0:40:af:5b:51:01:d0:0a:
91:09:18:71:7a:6f:44:6a:47:97:bf:11:52:4d:9e:0a:2a:f6:
65:6a:a5:56:27:20:d9:19:ff:6c:62:a8:62:88:26:b7:d2:84:
5a:a8:9f:2a:26:9c:66:c0:ce:08:3a:05:8c:7e:09:0a:30:c6:
3b:bc:1e:8e:9b:52:9a:7a:3c:12:47:f4:13:f4:25:d7:f7:77:
f1:95:7c:f1:5c:54:26:3f:93:15:15:b5:bf:78:dc:6f:02:32:
cb:b7:6e:2f:2e:e6:3b:d4:5f:5e:7d:7d:41:e0:bb:2e:f6:b9:
3a:b1:0a:88:81:58:15:b4:3d:db:a9:08:f5:3d:bf:63:6a:1d:
34:d7:a4:f9:23:83:0d:ef:5c:9a:f5:1b:ad:a1:3c:3e:95:34:
75:15:54:dc:30:07:3e:7f:16:f5:d4:78:e2:af:f5:80:94:4b:
2d:0f:c8:15:ff:01:30:8f:3c:34:01:21:30:1a:6e:d5:8d:b0:
72:89:1e:3b:44:fd:36:2b:5c:c4:bb:92:19:05:1e:4f:27:6b:
44:a6:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:59 2026 by rpki-client