Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: xXh+FZ/kTBxtH0VcDYT2DWIQXyCTXFqhZfEVbdPoK+Y=
Subject key identifier: CC:50:78:AB:4E:7B:74:06:47:15:9B:B7:0F:4F:9B:55:FF:6E:A0:B7
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 019D9A3E4A3681885A45E28F5781AB8FD9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:01:06 +0000
Manifest this update: Fri 17 Apr 2026 07:01:06 +0000
Manifest next update: Sat 18 Apr 2026 07:01:06 +0000
Files and hashes: 1: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (hash: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y=)
2: EGoSQ-IvTDuR6KeRNIfT2U3LRKg.roa (hash: L6sNJPWIZpchbyuvO0NFOoU8EkTxoHjIUljX0hT8hYU=)
3: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: mHRp5s8MsdQLcvTqNcmovTA4shkAht/eGt3p+YyIg4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:4a:36:81:88:5a:45:e2:8f:57:81:ab:8f:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Apr 17 07:01:06 2026 GMT
Not After : Apr 18 07:01:06 2026 GMT
Subject: CN=cc5078ab4e7b740647159bb70f4f9b55ff6ea0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:8f:a2:4f:46:af:0d:a9:76:af:db:e4:29:
c4:68:7f:2d:54:11:c7:2f:79:ae:72:19:aa:a4:3b:
12:f2:f9:08:a7:40:6c:9e:88:e6:01:52:34:78:03:
9a:fd:1c:fe:73:24:0e:c8:46:e0:ec:1c:71:08:6a:
aa:1e:36:8c:7a:d7:fb:8f:3d:88:3c:24:68:5c:e9:
3a:71:14:31:b0:73:2e:21:5c:44:88:40:68:69:f2:
be:a1:83:3c:ce:b8:c0:36:87:2d:c5:f1:3e:12:96:
c3:a8:4c:0d:d5:94:ff:3f:8e:af:a9:c8:7c:fa:dd:
78:10:b4:4e:ea:f1:72:90:fc:5e:27:1b:73:79:40:
73:68:f6:0c:d5:72:46:86:4e:89:b6:3b:b8:a4:96:
04:28:7a:c9:5d:1f:3a:4a:32:07:46:a6:57:7f:8f:
35:bc:62:5b:99:6d:58:ed:ce:00:38:74:80:98:b3:
2f:e3:2f:e2:ed:3f:77:ba:1a:68:3c:0e:75:12:ce:
e7:9a:0a:de:ea:92:15:51:f9:ea:7d:44:a0:e4:1c:
bb:16:c2:d3:ba:a8:f3:16:91:98:66:8b:a1:65:03:
ed:ad:bb:70:f0:24:e1:5d:fb:3d:b2:ab:71:ba:ff:
1e:96:f2:bd:9d:b8:e6:f0:ed:af:65:49:7f:6d:fc:
e9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:50:78:AB:4E:7B:74:06:47:15:9B:B7:0F:4F:9B:55:FF:6E:A0:B7
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:6b:bc:61:ab:7a:60:4c:01:28:a0:6d:d7:10:b2:0c:88:
d1:9a:5d:d9:94:dd:3c:98:ee:68:3d:f1:9b:11:64:98:1e:19:
2d:c9:a4:15:6a:5b:4e:25:67:98:dd:5f:49:68:4d:18:33:c3:
e0:a5:33:d8:16:88:4c:3c:b7:d2:f4:08:60:af:91:88:47:08:
03:58:ba:a5:a6:2d:89:0b:ff:7d:10:be:21:b2:3b:5d:52:c7:
5d:5a:8b:d7:8a:16:9c:94:1c:74:fd:10:bf:8a:fa:c9:8e:73:
65:8c:e0:a1:9b:db:37:70:fb:a8:8e:f5:4e:2d:12:91:16:93:
c7:51:3a:62:ae:e8:84:83:ce:31:2e:ef:8e:f2:1b:3e:64:5f:
85:5e:23:28:02:ad:b4:31:61:bf:f9:d8:1e:1d:3b:78:01:a9:
41:51:f4:3f:60:64:6f:d3:bf:51:2a:94:15:8f:68:79:c8:eb:
e3:13:2f:96:e6:38:61:1a:3d:a0:19:4e:5f:96:06:03:fe:62:
2b:56:21:31:25:2d:98:0c:56:46:e7:35:0a:60:bd:af:d4:0e:
50:47:78:ad:30:d3:bd:28:6e:cb:00:34:60:a1:4b:d3:60:b3:
c5:ef:c8:17:bc:39:62:c3:f8:3d:12:1b:15:49:ff:9b:82:45:
95:33:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:16 2026 by rpki-client