Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: JfM9Nbyzi5ZAV6Z5K10slQIk23yWmkiSSWh5mW7YsVw=
Subject key identifier: 8C:1C:E5:8B:46:E3:0F:95:37:7D:B4:CC:38:2A:50:7A:19:85:62:EF
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019D9C9A3F0AEBE136BB2104898845F456F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 18:00:47 +0000
Manifest this update: Fri 17 Apr 2026 18:00:47 +0000
Manifest next update: Sat 18 Apr 2026 18:00:47 +0000
Files and hashes: 1: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: oxqulKHCR4DK2xTj5OISHKgzkDJUXplkywRnWf6epH0=)
2: h4f1U0CpFFDSHXynxae3wWiZYnM.roa (hash: bjAME8b4hx8ihQ73euWcNmN5HY/fjR8Ib6ZPO1ecoaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:3f:0a:eb:e1:36:bb:21:04:89:88:45:f4:56:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Apr 17 18:00:47 2026 GMT
Not After : Apr 18 18:00:47 2026 GMT
Subject: CN=8c1ce58b46e30f95377db4cc382a507a198562ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:f8:1b:52:23:7f:c3:b4:1a:f0:5f:ad:db:
55:49:b4:df:6c:b5:fe:23:4e:9c:ea:13:a5:c9:95:
58:cc:c8:42:39:d0:f8:a3:02:35:b8:b9:1c:d0:81:
dd:f0:61:ae:21:09:4e:b8:ff:b0:2d:6d:ce:35:ec:
71:bd:12:ae:ae:e0:16:0e:53:23:b2:32:fb:1d:7c:
62:7f:92:9d:d0:f0:24:21:81:9f:1c:48:4c:9f:ff:
91:47:7b:dd:34:54:ee:a2:09:0c:2b:fc:26:bf:a6:
7b:7c:2c:96:4d:12:39:1b:32:e8:83:31:78:4f:cf:
4b:f2:f5:e6:e8:d1:3e:22:27:35:ba:b3:fc:33:64:
a7:7d:c8:5f:dc:0a:3e:2d:3d:4e:b1:94:51:a8:58:
8f:e9:1b:55:3e:3b:08:bb:60:5a:73:60:33:f7:24:
e2:d4:af:71:12:a7:fa:b3:bc:b4:b8:f2:3d:5e:73:
17:99:30:51:0f:50:60:ba:05:3c:4e:07:8b:3b:69:
e3:ba:56:9b:3d:7c:43:ad:47:64:5e:5e:2d:17:35:
ef:cb:1f:23:91:fe:d1:ae:83:2c:91:17:e0:97:65:
05:f6:9a:45:3c:c9:e1:25:2a:51:7c:a6:14:69:e2:
90:55:90:a7:4e:a5:ed:f2:c9:d4:a7:59:70:84:93:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1C:E5:8B:46:E3:0F:95:37:7D:B4:CC:38:2A:50:7A:19:85:62:EF
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2f:3c:05:53:85:c0:b4:53:40:1a:b8:27:3a:9d:45:9d:53:
63:af:8e:a6:1a:7c:90:36:f9:86:45:01:ef:81:52:d1:e3:0a:
ed:78:3a:28:cb:ee:a2:96:2d:33:bc:76:39:f6:8d:6c:3a:54:
d1:06:18:07:3d:db:66:03:18:99:b5:4f:06:28:8b:78:66:db:
ee:02:8f:dc:4d:5a:15:9e:a5:0d:a1:5e:8b:e1:70:6c:4e:8a:
68:c1:91:64:6b:47:29:b3:d7:75:66:c7:91:45:09:d7:38:32:
f7:8e:3a:26:69:e6:57:cf:f6:81:e4:2f:43:c5:85:bb:50:11:
1b:96:67:95:67:2f:d7:74:fc:26:2a:e3:d8:36:92:54:1e:06:
96:e8:83:ae:92:57:7f:d3:82:de:40:e9:b8:63:22:3a:62:53:
b4:bb:72:26:8e:5b:8f:f6:45:64:a1:59:6a:9d:5d:a5:3a:19:
94:33:c6:e8:aa:b2:cb:80:16:db:35:f1:97:08:79:36:4b:9a:
ae:bb:2c:6a:b1:27:81:e4:c2:4c:72:74:68:22:cf:00:35:e5:
85:bd:86:b1:4b:48:ae:77:cb:bd:98:7a:39:b5:ef:de:57:2a:
eb:eb:11:4d:6f:d3:81:f2:59:5b:78:6b:26:6b:94:3f:c2:d4:
30:fc:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:49 2026 by rpki-client