Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
File: YWeZlkXhW2Umig2TuxTE9RckRRs.mft (raw, json)
Hash identifier: 7DcXpTEQjsKBOHjweYKMxnMLXpwfhJp7KRRcDcmGKLQ=
Subject key identifier: 01:D8:D3:10:B7:EE:61:52:DA:D4:F2:E0:64:56:54:89:21:BF:3C:56
Authority key identifier: 61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
Certificate issuer: /CN=6167999645e15b65268a0d93bb14c4f51724451b
Certificate serial: 019D9AABF9C69BFBA4243FA1A079FDC66523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: Xz1YPhwlgcFJn9H6zKCHQE9OZMs.roa (hash: E23r1ViDJSDDunuaw4r4shrNSmLJDRKbQsrvll9ROpQ=)
2: Y6uXwuSAMDltrgK47G1JT4Ly1MU.roa (hash: kINCl8tG1shq70mte4iuRzZgEl60hKLBpRpKxfDa3dE=)
3: YWeZlkXhW2Umig2TuxTE9RckRRs.crl (hash: 0reYyJTr6TXvFwRtAkFrH9HPUk+PbDFf+0S4bqVNEFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f9:c6:9b:fb:a4:24:3f:a1:a0:79:fd:c6:65:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6167999645e15b65268a0d93bb14c4f51724451b
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=01d8d310b7ee6152dad4f2e06456548921bf3c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:90:3e:f8:43:b2:c0:99:c4:f0:99:21:c8:
cf:a5:59:c3:a7:53:85:d0:18:27:e3:b5:40:f5:f5:
6b:22:78:77:3a:c4:d4:c7:6f:35:56:ee:df:c1:16:
7f:cd:99:bc:84:35:1c:fc:c4:8f:5c:31:a7:e0:a8:
61:22:92:29:24:28:94:ed:0d:1c:ee:4e:13:22:69:
53:89:7f:a7:88:bc:9a:ae:91:7e:8e:87:9a:d7:12:
e6:05:e1:e1:ae:75:57:f7:c0:5a:a2:f3:a1:7e:da:
3e:70:0c:78:d6:c5:a2:9c:65:de:c2:24:5f:a8:38:
6c:a8:9a:47:ef:8c:4a:3b:92:83:2b:e4:63:0b:dc:
a1:c5:2c:d6:05:6d:d6:01:d5:24:cc:9d:71:87:0c:
9c:a9:89:9c:43:ec:48:a5:a8:91:83:9d:11:f4:95:
4b:fd:a8:cc:0d:8d:7e:fa:3b:11:a3:dd:d9:d3:db:
33:dd:48:9f:d6:30:1e:b9:ca:6c:e1:88:eb:29:c3:
0b:ae:de:8e:13:6b:03:f1:60:5a:b8:be:9e:79:a5:
b0:51:3a:44:0d:09:c9:f6:f5:cf:14:ba:be:e3:2a:
66:61:2f:f2:ea:c8:b3:64:e3:4d:ea:93:f1:8b:23:
5e:49:dd:db:7c:21:ca:e4:66:a3:5f:cc:43:00:2b:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:D3:10:B7:EE:61:52:DA:D4:F2:E0:64:56:54:89:21:BF:3C:56
X509v3 Authority Key Identifier:
keyid:61:67:99:96:45:E1:5B:65:26:8A:0D:93:BB:14:C4:F5:17:24:45:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWeZlkXhW2Umig2TuxTE9RckRRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d31a25-2507-471d-adc7-8807f95ae75d/1/YWeZlkXhW2Umig2TuxTE9RckRRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6b:d7:0e:36:b8:54:fb:33:1b:28:81:93:d2:79:fd:50:25:
45:e4:d3:60:d3:d8:ed:b6:44:7b:20:43:68:f6:08:1f:0a:a8:
fd:41:a4:72:32:db:a4:c9:6f:db:5b:80:f3:9b:4e:5c:d8:8d:
25:ce:20:6a:ef:37:08:a0:31:fa:61:d4:34:68:1d:3e:60:74:
e0:79:92:49:48:09:a1:c4:72:31:7c:31:3a:ce:66:5f:79:dc:
57:3e:b9:06:2f:37:17:d9:37:60:f2:53:9c:fd:ee:48:02:62:
f0:57:3a:ff:3d:ef:cf:e7:1e:a0:e1:cc:0e:b6:db:aa:f5:8d:
99:d1:69:2e:db:a0:09:b3:b1:de:23:ca:af:1b:13:52:0c:b4:
76:de:b6:16:af:ff:69:04:c3:c7:5a:5d:f6:6d:0a:ba:81:ca:
cd:3e:ca:5d:5e:b9:29:b5:e0:b4:79:c0:b3:b0:d5:a2:30:71:
a5:05:72:4b:2f:63:12:3f:7d:3c:60:27:26:5c:20:fd:a4:0f:
17:24:89:60:96:c0:a6:ea:43:0a:ee:53:e2:ea:ec:c2:4f:42:
65:96:4f:8e:7b:70:3a:fc:e6:3d:bb:01:dd:9c:bb:cf:0d:84:
fb:19:5f:aa:57:db:c5:c4:24:9f:40:ab:91:58:76:3f:6f:c7:
2c:66:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:47 2026 by rpki-client