Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File: CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier: RXuNektQXKe4uvL9tyF346q05GaHWdzkBUaZsv3zPB4=
Subject key identifier: 9E:A2:F2:24:04:75:B8:F7:F4:B8:ED:BB:0E:23:72:2B:C6:98:47:FB
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer: /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial: 019DA378BE194B72556FF0FBAD96FDA14071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:32 +0000
Manifest this update: Sun 19 Apr 2026 02:01:32 +0000
Manifest next update: Mon 20 Apr 2026 02:01:32 +0000
Files and hashes: 1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: 68BXYvJKKuQOMqE5r2At8m697zM9O0VJHhmBgqOXK9E=)
2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:be:19:4b:72:55:6f:f0:fb:ad:96:fd:a1:40:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Validity
Not Before: Apr 19 02:01:32 2026 GMT
Not After : Apr 20 02:01:32 2026 GMT
Subject: CN=9ea2f2240475b8f7f4b8edbb0e23722bc69847fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:b3:cb:be:9d:68:45:be:0a:a4:84:01:bb:
34:8d:14:66:ad:e1:7e:dc:f6:64:ad:9b:3c:97:6e:
86:04:80:55:fd:c7:a4:c6:86:4e:42:48:70:c3:9a:
c7:29:3d:b3:f2:e0:97:65:7c:d6:00:85:32:5d:d2:
db:3d:b6:b8:fb:c1:7e:d2:96:92:6e:22:29:bd:53:
00:04:7c:83:c0:51:3a:3c:de:c2:91:15:33:b9:b3:
29:89:73:d0:8e:d5:4f:2e:b3:a8:6b:54:cc:47:d4:
6d:1b:1b:db:90:5f:59:cf:b6:45:6c:57:ce:3e:1b:
0a:68:91:3f:35:b4:87:e7:05:b8:60:94:8e:e9:b7:
c0:42:4b:63:d0:e9:69:d2:5b:cd:d4:18:c1:f4:27:
7e:84:5a:cc:9d:02:41:b0:22:55:89:a4:04:ad:3d:
bd:54:1e:e0:82:fa:67:76:0b:59:3f:1e:0e:d2:82:
82:0b:e1:02:9b:bd:82:0d:bd:d3:56:64:25:32:72:
6c:19:3d:0a:e5:16:e9:e0:b2:37:12:c8:d6:e7:56:
12:e0:b1:e1:63:43:d2:5a:38:6d:ca:71:8e:07:f5:
90:bb:1b:62:88:9a:b2:bc:01:10:0d:d8:b6:4a:2a:
5e:ba:bb:6b:c7:73:9d:5c:b4:31:9b:23:9e:41:26:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A2:F2:24:04:75:B8:F7:F4:B8:ED:BB:0E:23:72:2B:C6:98:47:FB
X509v3 Authority Key Identifier:
keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:20:93:b8:ad:0b:de:90:e2:9f:ad:30:ed:9f:f7:19:86:de:
1d:11:4a:45:e1:be:5c:a1:0c:28:d6:65:87:ee:7a:a4:c0:36:
49:48:31:01:f6:88:85:5a:8f:2e:3a:ad:cc:4d:1b:05:64:3e:
00:2a:a7:c2:52:cc:06:dd:51:9e:2c:b0:60:29:41:9e:ac:c4:
8d:48:0e:8a:ff:52:eb:dd:ea:74:9a:16:1e:d1:9c:76:b1:01:
81:4a:22:65:c5:10:d1:c3:37:b3:50:67:89:01:17:c1:17:ef:
7a:2d:0b:0e:ed:3f:13:36:3e:49:80:c8:69:6d:84:57:53:db:
5c:fb:d4:a8:f1:2f:b8:71:a6:c4:6e:e5:b3:1c:d1:d6:28:17:
fe:41:f1:66:94:3e:d4:97:e6:ba:ff:73:80:68:ec:7f:18:12:
66:bb:58:0b:13:a4:37:2e:a0:ef:d7:ef:c1:a6:75:3f:a8:d7:
a2:37:af:26:15:e5:f5:8b:4b:d8:32:2c:d2:d6:e9:90:73:aa:
95:7c:ee:3d:a8:b7:33:0d:95:d1:fe:d0:f0:02:36:43:85:79:
f8:f4:3d:3d:a4:f6:a4:22:f0:db:83:20:9b:96:cd:c4:6d:ca:
be:b0:1f:68:7b:76:21:3e:c8:f0:01:0f:6a:d9:8c:da:eb:c0:
56:d7:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:35 2026 by rpki-client