Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
File: cNySeAi5pn58uhunTvtb9sEsiVs.mft (raw, json)
Hash identifier: nM1AysInQDzov3bg0XEHIdnwB4nfFg9tJl5Qve1VGHo=
Subject key identifier: 31:33:F6:B3:7F:17:FA:3C:36:ED:18:7D:00:5A:FB:8B:B9:CC:01:80
Authority key identifier: 70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
Certificate issuer: /CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Certificate serial: 019D9998DF8C9BFF5EBD2EE771274DA556E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 04:00:25 +0000
Manifest this update: Fri 17 Apr 2026 04:00:25 +0000
Manifest next update: Sat 18 Apr 2026 04:00:25 +0000
Files and hashes: 1: CGASqwsZcGaWA7KhgQteEYO55EY.roa (hash: wP8KXOiWGgF6XyMWqWY5eIrUa40yWygDD4xGf13foh4=)
2: cNySeAi5pn58uhunTvtb9sEsiVs.crl (hash: h3jM0DObmfJSmNINS2P0HvlcvumBjPhDsVRGvPZueJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:df:8c:9b:ff:5e:bd:2e:e7:71:27:4d:a5:56:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dc927808b9a67e7cba1ba74efb5bf6c12c895b
Validity
Not Before: Apr 17 04:00:25 2026 GMT
Not After : Apr 18 04:00:25 2026 GMT
Subject: CN=3133f6b37f17fa3c36ed187d005afb8bb9cc0180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:d9:f1:f3:d7:35:4a:88:fc:01:47:65:e2:
79:56:8d:f4:97:08:9a:bc:3a:59:61:5c:75:09:60:
a9:43:cd:9a:0b:1b:e7:1a:61:e6:4b:4d:8d:48:41:
bd:a6:66:bf:f9:ca:90:22:04:f4:d4:2b:07:f6:21:
bd:9b:83:38:e4:37:16:b2:88:4f:68:26:2f:ec:e9:
95:cd:d5:3a:1e:41:f9:d5:c1:b6:ac:0f:85:5d:d5:
6e:1d:48:8a:2d:b8:9a:19:e8:1a:3d:83:da:f1:fb:
63:f5:84:be:58:62:54:0b:86:f2:da:9f:b4:92:83:
b1:17:1f:9c:d3:20:86:e1:95:e0:ae:a2:5a:07:6f:
bd:40:d4:c8:53:02:6f:35:58:af:75:90:7f:11:f6:
2f:93:e5:5f:b7:16:c1:d8:80:a1:8e:ca:60:87:48:
3b:c1:4a:ce:2b:19:8c:07:3a:db:d4:f3:3c:37:c6:
e3:69:aa:8a:c1:ec:de:b3:63:62:44:d4:16:2b:5e:
46:3c:4b:87:45:53:c0:5c:e3:37:29:19:6b:70:85:
05:4f:29:e9:41:a8:2e:4f:df:a7:b1:73:b8:19:aa:
f3:75:d5:f0:e6:26:c3:c0:06:93:e8:14:e0:53:bb:
97:6b:92:e2:01:63:e5:3a:f4:0a:46:dc:41:b2:d3:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:33:F6:B3:7F:17:FA:3C:36:ED:18:7D:00:5A:FB:8B:B9:CC:01:80
X509v3 Authority Key Identifier:
keyid:70:DC:92:78:08:B9:A6:7E:7C:BA:1B:A7:4E:FB:5B:F6:C1:2C:89:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNySeAi5pn58uhunTvtb9sEsiVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88a580-5dc1-4c86-92c5-5eebb1259dc9/1/cNySeAi5pn58uhunTvtb9sEsiVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c8:11:77:ff:41:bb:ed:4d:41:b4:81:25:bd:cd:42:17:39:
6e:8c:6e:56:40:09:16:23:97:e0:2d:6e:b4:58:37:e6:5a:0f:
f8:2e:98:a6:79:eb:c9:08:a0:22:da:5a:a6:c9:68:db:ea:2a:
3d:12:60:8f:a7:2e:dd:f4:47:2a:bb:71:38:07:f6:77:8e:cc:
f1:51:ab:4f:2d:1a:9b:77:53:f9:d0:1f:24:87:4e:f0:b8:12:
ea:f4:c7:6e:7b:f5:6e:d6:1e:48:f6:65:8d:dd:7f:10:0a:2c:
04:0e:df:1d:88:16:48:f3:ba:df:cc:90:ce:d2:96:9b:c3:9e:
5d:f4:3e:bb:45:3f:51:a6:a0:d9:a3:a6:78:9a:07:fd:fd:a8:
03:2d:57:94:3c:bf:a8:5f:91:da:cf:35:55:72:72:2a:0e:2e:
87:38:84:28:14:59:31:53:e3:12:ea:88:46:68:32:57:96:fc:
09:85:12:3d:70:c9:f5:4a:3a:76:df:44:af:17:c9:1a:c6:03:
33:59:2a:84:1d:1a:ab:fe:b6:cd:49:e8:1a:93:9e:67:7e:d9:
d1:dd:0d:08:6a:a4:81:91:eb:19:f1:57:93:f1:ea:fa:57:7b:
35:20:c0:2c:2f:d4:84:5e:0d:6d:7e:b8:35:cd:96:fa:3d:23:
7e:a9:5b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:01 2026 by rpki-client