Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
File: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft (raw, json)
Hash identifier: cVgCc3iAuHit/zF7dxxKcUYTnUCp6DEzaC2SeUi2PFA=
Subject key identifier: 39:D0:C2:5C:BA:C4:C1:A9:31:25:42:8E:1D:E3:08:E9:68:6B:6C:CB
Authority key identifier: 63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
Certificate issuer: /CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Certificate serial: 019D981880B445935691C1AC7816EE1E9EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
Manifest number: 0F45
Signing time: Thu 16 Apr 2026 21:00:35 +0000
Manifest this update: Thu 16 Apr 2026 21:00:35 +0000
Manifest next update: Fri 17 Apr 2026 21:00:35 +0000
Files and hashes: 1: Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl (hash: 1LSV+8xMJZb7Qqs3TE7FhWi4mW1s2qIMR83604rq1zk=)
2: cIwuNOBQZVEAKmirlwvqGCKlAVA.roa (hash: MTQrQYMht/gMO7+xqgltPlCnk6FhdwKMEakt6nRw8pI=)
3: xTW_lD5hyFR2vQYBVeIQ8tHTVWU.roa (hash: +MCBleBXBQDx6fs7+ejDOMAZrsryKfTQT1EHgUrcOhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:80:b4:45:93:56:91:c1:ac:78:16:ee:1e:9e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c34455c0d4e4fc3ba2f1c46f08b475c8f6d980
Validity
Not Before: Apr 16 21:00:35 2026 GMT
Not After : Apr 17 21:00:35 2026 GMT
Subject: CN=39d0c25cbac4c1a93125428e1de308e9686b6ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b0:8f:d9:19:1a:3a:2c:b3:d0:77:4a:cc:74:
69:37:76:17:92:fc:4f:02:41:02:47:75:16:b6:a2:
6c:59:44:c5:46:7c:a9:6b:47:a8:d9:b6:ab:8b:18:
7e:f5:cb:30:49:21:ac:ba:0e:ee:ce:5c:57:c7:f4:
40:e4:33:59:c6:2e:1a:26:12:9f:85:60:ed:af:3c:
4b:db:30:e8:88:d5:50:f4:9e:49:0c:5d:ad:80:10:
14:1f:89:a6:17:5a:c4:0c:31:43:13:0a:b0:78:c4:
32:72:01:ad:69:c4:6f:bd:c3:73:8c:48:09:da:7b:
3f:12:57:46:0e:db:4f:16:d2:60:b6:21:8f:fc:61:
dc:05:62:45:80:47:45:a9:70:8f:d9:6a:4f:f0:af:
cc:9a:da:69:50:96:90:49:fe:f9:2c:4a:98:9b:7a:
f2:8e:16:63:89:27:97:df:ef:9f:5c:b0:3c:08:cc:
19:56:ff:43:97:4c:01:ce:27:8a:b2:8f:9e:15:2f:
31:64:da:e6:ac:fa:52:35:b0:51:8c:b1:c4:ea:3b:
37:20:12:6d:2a:d4:3f:af:8e:d7:f6:20:c2:da:40:
09:5b:3b:3f:a2:fd:15:4a:2c:bd:03:30:47:37:5f:
fb:4f:cb:d8:21:af:2a:67:bf:10:14:c3:be:3b:7b:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:C2:5C:BA:C4:C1:A9:31:25:42:8E:1D:E3:08:E9:68:6B:6C:CB
X509v3 Authority Key Identifier:
keyid:63:C3:44:55:C0:D4:E4:FC:3B:A2:F1:C4:6F:08:B4:75:C8:F6:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/35656a-066e-49df-b709-7bfcd7e94b9e/1/Y8NEVcDU5Pw7ovHEbwi0dcj22YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:39:8a:15:2a:5c:39:66:10:50:bf:c3:73:35:1f:4c:e0:7f:
73:45:2b:1f:18:55:5e:b2:2e:7e:c7:55:6e:88:a3:e7:8c:8b:
b8:85:fa:40:06:1d:d4:47:4a:0d:99:bc:4c:89:8b:9a:7a:04:
bf:6f:b6:dc:ab:c8:bf:31:a3:b9:6a:ad:b0:9b:64:28:71:ab:
32:cf:46:8e:07:d1:4e:e7:d5:3e:f5:11:8a:18:af:3a:e3:62:
64:c7:2f:8d:5a:a5:fa:02:5f:10:32:6c:28:04:40:2f:d2:8f:
83:a6:7f:4d:b3:1b:cd:50:84:66:72:aa:e5:5d:9d:f6:ed:90:
bb:72:b8:3e:2f:ea:84:1f:39:e1:37:80:e8:de:a9:8f:a2:18:
fa:66:83:82:74:3b:b1:d2:4c:0b:49:f9:59:31:d6:e3:0f:5b:
47:70:d1:10:d6:2f:55:24:17:6e:67:64:15:92:1c:29:a3:e7:
49:e0:c2:50:37:99:f6:84:17:6a:ea:c0:ef:92:32:3c:a9:f5:
51:7b:dd:43:73:55:85:ec:e1:c7:20:c8:ae:f4:7a:35:54:92:
10:55:c3:a3:05:e2:f0:c7:97:4b:c7:df:63:95:06:2a:a8:8e:
ad:47:24:da:26:98:6e:12:0a:ef:eb:06:a7:8e:08:7e:b2:99:
e8:37:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:26 2026 by rpki-client