Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json)
Hash identifier: 2v3BBT+dWR32urmd9ezietbzVnm5l3xrTHOm0d5xSS0=
Subject key identifier: AE:84:78:A9:A5:B7:9E:E9:25:39:F8:A9:78:E1:D6:3E:0E:54:4F:1A
Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Certificate serial: 019D9AAC3EEC4037C81CA52DA6EB24B1AF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: 1urLz8sI-D-U1DWR00K73cOQtJw.roa (hash: h9FTShSF6pUVjdu4OolKEkCN6zMb2Hm/ugBT1eJvw3M=)
2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: jdZ+j0DY+VXkNjpJ0N7A8+XEFAHrRF3ir5eok666jLw=)
3: cQXpdp-3wdqJlOzPKIgd4leRkno.roa (hash: voWCMVgfvUJ+YC+Z4yIk4orQRD3bQ3xmCc1/ZJDuxG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3e:ec:40:37:c8:1c:a5:2d:a6:eb:24:b1:af:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=ae8478a9a5b79ee92539f8a978e1d63e0e544f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:93:eb:ad:72:17:29:8b:3b:35:f4:55:d3:
80:6b:13:e0:5d:f6:ee:9a:32:7c:f0:fa:f6:48:ab:
d6:93:2c:fe:83:47:05:04:c5:25:3d:1a:dc:e1:3c:
33:63:d2:bd:6d:69:1c:92:dd:4e:44:9d:0a:83:21:
48:13:77:0a:47:58:b3:cf:52:9f:d7:83:bf:14:3e:
df:d0:9d:eb:cc:7b:d7:fe:7b:6a:a7:6f:70:53:a7:
8c:ba:3a:e3:f9:7b:23:26:b3:17:eb:43:5b:aa:03:
ef:70:db:8c:fa:64:d3:88:02:24:99:7d:5f:7b:fa:
c5:ed:93:d5:89:98:1e:72:28:3d:c6:f7:5c:4c:a8:
88:94:5a:b1:9b:81:fd:d6:c1:f4:5d:bc:6f:6f:78:
22:8e:aa:a2:c5:3e:0b:dc:24:5a:99:8f:bd:f0:88:
1d:a8:15:ed:fb:d9:31:91:5c:bb:8e:a0:f5:08:88:
79:8f:f1:0b:b1:db:13:6c:7c:7c:99:1d:07:ce:17:
80:d7:f2:9e:d8:ec:95:93:00:de:e6:ed:61:69:16:
a1:3f:71:79:02:16:62:7f:52:f5:ff:1c:a5:82:ff:
48:71:fe:2a:d9:59:7a:03:f4:79:a4:32:60:1a:1a:
43:c1:48:07:90:94:6d:7a:87:7c:e3:2d:ac:06:ae:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:78:A9:A5:B7:9E:E9:25:39:F8:A9:78:E1:D6:3E:0E:54:4F:1A
X509v3 Authority Key Identifier:
keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9e:da:82:80:a9:30:30:b6:3d:14:96:2e:35:9f:1b:96:0b:
16:9a:05:e0:33:ac:ea:9f:f0:33:61:af:73:18:5b:6f:9a:7a:
45:cd:47:83:40:b2:d2:e5:fa:7e:fc:c0:78:79:e1:ef:c4:d6:
0b:59:d0:d2:a4:a3:86:64:e4:5c:e6:dc:c7:f9:e5:5a:86:03:
34:b0:71:97:42:03:a0:36:c9:bb:a5:5d:77:da:86:92:ef:82:
f6:9a:f9:e1:23:a4:06:2f:7a:87:96:b6:60:fb:63:c0:c2:62:
22:d8:f7:2f:3f:ae:0c:c9:cd:eb:4f:f2:2b:0b:81:7c:b4:d1:
7f:c2:f0:b5:5d:e0:c1:98:55:88:a0:8e:b6:35:1f:a5:e8:0f:
5d:ba:10:b1:cd:da:c2:4c:5e:ba:b6:a1:78:99:88:18:bc:5c:
4c:94:e3:cf:94:65:4e:6d:8b:c5:bf:86:07:68:df:30:a5:39:
8f:58:08:5c:10:ba:ae:15:66:4a:3f:f3:12:5b:50:15:15:c9:
f9:10:99:d1:1f:c0:2e:b1:98:11:3e:53:39:c6:de:9e:84:ef:
3c:6d:d3:a8:67:5e:e1:5d:77:bb:d2:08:8c:20:d1:e6:7e:aa:
b3:74:df:df:61:02:27:56:4a:03:4a:b3:cb:68:e0:08:96:b9:
39:20:c0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:33 2026 by rpki-client