Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: rGs4+pl2jXVm1COLL+1vbD0nu5Hg3y31rgsPRP2Li9E=
Subject key identifier: E7:EC:FB:4B:A2:58:7A:4B:8D:7A:E7:73:75:C7:87:40:8F:2B:40:84
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 019D98865A05FD502F16E0E08847BE05FFE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:34 +0000
Manifest this update: Thu 16 Apr 2026 23:00:34 +0000
Manifest next update: Fri 17 Apr 2026 23:00:34 +0000
Files and hashes: 1: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: jagPS+kfMR/i7Rfh3quPt8CNld2/eGlX7aj5XCKSWQM=)
2: zk24Xibi_69XM4miradQH_-zfVo.roa (hash: 8vWhGhRcVD9hGye0zCP9w/L6uhcw5ZBizDAK5O4GtQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:5a:05:fd:50:2f:16:e0:e0:88:47:be:05:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Apr 16 23:00:34 2026 GMT
Not After : Apr 17 23:00:34 2026 GMT
Subject: CN=e7ecfb4ba2587a4b8d7ae77375c787408f2b4084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:c9:6f:39:41:5b:ad:6b:dd:c9:5d:ae:be:
62:94:88:b2:f6:b4:56:0a:0a:ac:89:d4:e4:2a:8d:
69:b4:5e:66:dd:9f:fa:80:0d:cc:9a:09:cc:45:fc:
e7:28:ab:42:f8:aa:6c:00:69:7d:99:bb:28:15:d2:
93:d3:4d:20:cf:67:3f:78:b9:d4:35:0a:65:87:66:
25:39:ba:2b:48:30:6b:88:02:0c:91:63:49:8e:56:
58:2b:f2:74:64:62:b9:c5:11:fb:bb:3a:68:1b:a5:
a6:34:d0:17:44:e5:ca:98:5c:3d:f7:82:92:f5:67:
ad:3f:7c:95:7e:30:18:fa:8d:87:aa:83:d7:db:72:
3c:bf:6e:a3:9f:16:b0:9c:8f:7d:7d:f7:f5:4f:6a:
e8:5c:33:cf:15:88:6a:66:bf:6c:40:de:14:9d:61:
6b:88:d0:41:b1:a0:fb:27:15:56:0a:e6:62:7a:29:
f1:f9:88:31:a0:ac:db:65:0b:cf:ed:30:9e:a1:41:
f9:e6:22:61:c1:46:bc:84:48:30:5d:7b:82:80:ae:
50:9a:47:d5:f9:ff:ce:95:c4:f7:9c:3c:67:b5:da:
17:ac:4d:cf:73:c9:4e:58:02:50:5e:4d:83:14:2a:
5c:72:a9:1c:f5:54:42:b1:75:b6:af:a9:f2:15:f0:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:FB:4B:A2:58:7A:4B:8D:7A:E7:73:75:C7:87:40:8F:2B:40:84
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3f:c0:e3:b1:06:18:e1:04:c3:d7:74:39:f9:8e:97:c2:96:
24:27:3f:b6:ee:c9:b9:64:0b:5d:b7:a0:da:07:83:1a:ff:a1:
ab:e4:ab:ea:e3:22:ba:0a:6b:b6:37:96:b9:c7:71:94:3c:da:
9b:f0:9c:76:8a:6d:43:e6:b5:73:a4:56:1c:9d:7c:96:ca:b0:
02:d9:b9:c6:b0:a5:32:58:d8:51:ab:e3:3f:27:43:3f:3c:b9:
41:da:25:79:89:0d:d2:5e:1a:32:b8:1c:15:17:be:9a:67:35:
b6:9d:f8:19:31:27:60:d1:71:af:d3:1a:89:b1:af:6c:bd:81:
e9:d9:2d:34:1d:e1:fc:b1:1b:8d:7b:b2:43:6d:fe:7e:35:2c:
c8:63:92:9d:1a:5c:1a:b1:8c:bf:97:ab:72:7e:2f:ec:59:83:
7a:0d:97:d4:4d:fa:ad:76:03:ef:ee:d3:d8:cf:7d:ff:7c:b5:
6d:66:d1:41:07:61:74:14:c5:71:c9:2e:eb:12:e7:aa:89:a5:
95:b8:a2:e1:02:c1:a6:2d:d6:46:73:8c:96:30:f5:b1:ba:93:
ec:b8:96:19:c6:f4:47:13:b5:f9:6a:6d:b3:e7:83:00:a2:9e:
f1:71:79:ef:1b:b0:3c:8d:97:5c:49:7a:40:ab:46:72:d3:4d:
fd:37:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:03:48 2026 by rpki-client