Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
File: Y7gncq89YRuZsbpuPrbL_RaWU2M.mft (raw, json)
Hash identifier: TYUNExELITCS54F1ses2n2JTwuHYIZQccPdW8b+A4+o=
Subject key identifier: B4:C7:AE:1F:9B:3C:1F:1C:C1:ED:76:56:9E:47:2C:9F:59:BF:A0:8A
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Certificate issuer: /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial: 019D9999036484B01BB49536B374BE30DA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: 3B1_EUp7x7N1kARo16GQ1nuj9Is.roa (hash: aSJvJUBxwg2ZnRrO3zv+qRAM43Ox0HLnky8GrLpOBIA=)
2: NUUQjDeFWzC4FPVGBmAx-z5bJ0E.roa (hash: wnbRGeNLfXYztX1J3cZAfrSN12bQBDpo4cnmGFyaLCs=)
3: Y7gncq89YRuZsbpuPrbL_RaWU2M.crl (hash: VnHYSa2/+GuU2CtFCb8VsrI7S+ln6lDPe3epjZk9ako=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:03:64:84:b0:1b:b4:95:36:b3:74:be:30:da:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=b4c7ae1f9b3c1f1cc1ed76569e472c9f59bfa08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:22:ba:f8:c4:f2:fa:7f:5d:4e:82:dc:64:
7f:ce:ce:6e:c6:3d:c1:d2:87:4f:0e:2a:2f:9d:9e:
d7:a5:b1:66:bb:9a:6d:7b:c3:14:1b:2c:1d:ad:63:
97:b0:43:45:58:0b:aa:9d:af:d6:81:a1:b1:b3:85:
b7:0f:be:dd:29:7e:1b:49:c4:b9:52:1e:d5:1f:aa:
fa:1f:be:10:0f:f7:3f:66:de:a4:e4:1e:3d:37:30:
3c:dd:f2:b9:fe:30:53:68:e6:ac:68:03:c0:89:84:
42:c3:d5:32:94:88:89:cb:cd:7d:05:6e:2b:81:7d:
6d:29:b7:f1:70:2a:9e:16:03:2e:fe:76:42:0a:7c:
1c:13:ec:42:2e:47:d3:c3:89:59:d5:40:b0:60:d3:
fe:3d:f0:55:f8:c4:03:a5:29:8b:be:30:78:97:47:
32:c4:9c:d6:76:28:91:56:c2:81:e7:d8:b9:0c:2e:
b2:fb:63:9f:74:e4:8a:25:75:17:8c:3f:93:89:18:
e8:c5:9d:d4:45:55:bd:45:a3:95:4f:a6:60:b4:d2:
e2:c6:84:0e:97:00:51:8e:f0:05:7f:10:64:3c:01:
0e:1f:63:cb:79:cb:d6:0e:f0:39:ff:e2:4e:9b:73:
7b:63:e7:6a:bf:02:09:27:f3:a2:fe:f7:69:9b:46:
d1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:AE:1F:9B:3C:1F:1C:C1:ED:76:56:9E:47:2C:9F:59:BF:A0:8A
X509v3 Authority Key Identifier:
keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6c:bd:da:e0:c1:2a:45:a1:ab:0a:1e:87:c6:e1:a0:b9:56:
91:90:e4:d0:23:8d:55:fd:9f:91:8a:c2:95:e5:87:f3:13:3d:
3f:55:fe:01:56:ba:96:a0:f4:9f:f9:8e:90:bc:19:35:27:41:
41:2d:81:9e:e6:80:c1:45:ca:8b:5a:98:41:9d:f2:39:41:19:
89:bf:c0:87:f6:ec:fe:ae:68:38:5f:24:e1:ad:22:e4:bc:38:
92:ae:42:80:aa:3c:da:af:77:cd:3d:bd:a3:85:f5:0e:df:63:
5e:4b:98:86:52:f5:65:f7:d4:18:68:b8:29:46:0a:76:74:1f:
10:d5:ff:c9:58:85:79:70:5b:b4:43:82:b9:a3:04:d1:11:f9:
0e:3a:ff:48:a8:99:48:30:b6:8d:f0:36:6c:25:bd:6b:76:1f:
3b:47:b3:da:b0:27:67:9a:a4:db:bc:8f:c4:2c:76:5b:76:17:
10:58:d6:4c:0d:13:ea:28:53:06:14:6b:7f:03:e7:34:ce:ea:
c7:f5:d1:d1:ad:f9:de:5c:15:15:12:03:1e:6b:66:d0:2b:6f:
e5:5d:33:1f:62:8e:de:fe:58:77:a7:8c:37:e3:10:2e:f3:59:
61:5c:1a:e3:47:1a:06:1d:dc:1d:29:2f:a4:5c:ea:80:d1:a6:
c8:af:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:29 2026 by rpki-client