Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
File: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft (raw, json)
Hash identifier: EDMRBpvTzKqeLi6mfC5ugZTgLf00/wTRQlNDqWuDdEg=
Subject key identifier: DB:F3:0E:3A:83:EA:CC:28:14:73:BF:44:7E:C6:33:06:56:A2:DD:08
Authority key identifier: C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
Certificate issuer: /CN=c8e50ca17134837a50d3063d43d443385abe6f49
Certificate serial: 019DA453BF77C4EF0E87AA58B8573A1011BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
Manifest number: 183C
Signing time: Sun 19 Apr 2026 06:00:45 +0000
Manifest this update: Sun 19 Apr 2026 06:00:45 +0000
Manifest next update: Mon 20 Apr 2026 06:00:45 +0000
Files and hashes: 1: KruYfdwnUNYxfXkcEK0pRrgHkqg.roa (hash: UrG6tcE8plAV8A8NaRxXB6Nz6rhzF4jRdCMcfNiMj5Q=)
2: yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl (hash: HV3zXwkZqRQXjmfVQBEwZXnW8pKdzdJmBjtw0EHf1pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:bf:77:c4:ef:0e:87:aa:58:b8:57:3a:10:11:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8e50ca17134837a50d3063d43d443385abe6f49
Validity
Not Before: Apr 19 06:00:45 2026 GMT
Not After : Apr 20 06:00:45 2026 GMT
Subject: CN=dbf30e3a83eacc281473bf447ec6330656a2dd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:87:a7:7e:d6:2e:86:0e:1e:03:f5:78:46:
a2:e8:c2:a1:74:18:bb:26:0f:d9:d8:c5:fb:bc:e0:
92:3e:1e:86:8c:4a:1f:c0:2d:73:5b:90:7e:cb:36:
17:7e:a4:38:0c:ec:9d:31:a9:93:c1:2b:b0:20:2f:
7c:3b:68:f1:40:60:3e:c9:1a:30:13:d8:69:f8:33:
41:87:e7:f6:ad:b8:f6:b2:64:cd:f1:7f:6c:32:4a:
9c:92:73:e1:9d:7e:b7:1d:e8:6b:e8:2f:61:c9:13:
89:a4:d0:61:4e:f5:f9:31:35:8b:1e:a8:47:ca:0e:
1e:4c:d5:0e:24:63:16:9d:31:1d:ef:96:d3:31:6e:
1f:14:61:f1:d2:50:29:dc:ce:7a:3c:66:80:fe:8d:
f4:b8:3b:99:22:5d:d5:13:57:ef:48:59:c1:5e:2d:
16:9b:a0:af:45:3a:e2:64:8f:db:a9:c5:b9:9d:8f:
a8:38:45:08:44:9a:3c:8e:0a:3d:e0:ff:34:18:1e:
f0:1f:7f:b2:4f:f3:a5:41:0e:6a:45:90:15:2d:a6:
a6:f0:ec:97:7f:f6:24:64:e0:68:5e:5c:8f:8d:67:
7a:26:85:45:30:1a:0a:82:31:ab:19:41:b5:46:51:
7b:02:7a:3e:97:e6:4b:57:70:65:94:3f:d0:e2:e4:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F3:0E:3A:83:EA:CC:28:14:73:BF:44:7E:C6:33:06:56:A2:DD:08
X509v3 Authority Key Identifier:
keyid:C8:E5:0C:A1:71:34:83:7A:50:D3:06:3D:43:D4:43:38:5A:BE:6F:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b130b5-5fcc-4196-9075-5eff73e89fbb/1/yOUMoXE0g3pQ0wY9Q9RDOFq-b0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1c:93:51:1c:8f:d0:ce:9f:34:1f:99:ea:41:f8:24:51:15:
64:bb:0a:e2:7b:50:d4:82:52:da:e8:87:2b:18:24:e2:47:45:
e8:c1:e4:78:30:bc:01:7a:b1:01:a2:c2:2c:48:4d:7d:f8:1b:
7d:a9:b5:68:30:9c:2e:8a:8a:a0:8a:de:fe:ad:5b:c1:41:fd:
3d:b0:93:dc:1f:c9:03:49:c1:f0:94:02:f9:9a:57:e1:f2:06:
2f:7c:7f:e5:c3:d1:18:74:97:86:15:e0:a8:8d:3f:7b:b1:82:
d3:6d:a4:d0:f8:61:81:d9:f1:2b:5d:79:67:1a:45:94:85:3a:
1d:d5:65:92:d4:35:14:c6:7f:a2:fa:0e:65:32:82:dc:e5:ff:
cc:a7:c3:a7:7a:62:08:0e:10:72:5b:2b:4c:82:d2:6a:c3:1b:
87:cd:37:33:b7:53:2e:cb:f2:66:70:ff:2d:e9:85:83:f6:4b:
03:10:6d:00:6e:e5:8b:7a:ce:1d:ea:bd:f4:02:8e:3d:b5:c4:
ae:4a:03:26:8a:2c:dc:6b:f2:d1:b9:64:f5:be:6c:57:b3:21:
46:79:43:e4:3d:99:1a:97:54:8f:bc:48:d7:53:7d:48:48:78:
12:40:a7:04:68:f6:89:c6:fe:09:8e:2a:25:59:72:74:94:c4:
5a:2e:6d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:46 2026 by rpki-client