Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
File: A-ynkyRXUrZ6iB9441q4_0ndPsE.mft (raw, json)
Hash identifier: d4xyusB5G1Trbt5pPaQDIXTmbN2onMIGAVtGC2EDJYg=
Subject key identifier: DD:62:40:AA:09:07:BC:0A:64:0D:19:AE:3D:79:9F:D9:56:7E:C0:C2
Authority key identifier: 03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
Certificate issuer: /CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Certificate serial: 019D99CFC8B32C9A7A560E103458F57F285E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:00:24 +0000
Manifest this update: Fri 17 Apr 2026 05:00:24 +0000
Manifest next update: Sat 18 Apr 2026 05:00:24 +0000
Files and hashes: 1: A-ynkyRXUrZ6iB9441q4_0ndPsE.crl (hash: olAHij94GIzeZUMyQDS2rZKia+MM5kMNuZki3UfupdE=)
2: lsqSMmJEavXh7pViu8wsmFP-0ew.roa (hash: WZM+G3iXoRdRNC/z9rbX80joIRjQ5aWaqz7KFYrf3LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:c8:b3:2c:9a:7a:56:0e:10:34:58:f5:7f:28:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03eca793245752b67a881f78e35ab8ff49dd3ec1
Validity
Not Before: Apr 17 05:00:24 2026 GMT
Not After : Apr 18 05:00:24 2026 GMT
Subject: CN=dd6240aa0907bc0a640d19ae3d799fd9567ec0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:b4:20:14:91:16:09:81:fd:8e:d5:5c:2a:
29:5b:d8:2d:a5:e1:ec:f5:b7:03:98:36:e8:d7:fa:
8b:bc:90:a9:0b:85:21:dd:01:cb:f2:29:8f:c5:c1:
c2:5c:f3:8a:11:1d:f6:46:7b:3a:56:fc:0c:f6:17:
9e:df:95:7d:77:fb:fa:20:98:f5:eb:9d:17:cf:9c:
ae:46:7f:7d:b6:13:cb:63:8f:8d:eb:a2:dc:40:ce:
64:c4:b5:43:90:d7:a8:4d:64:77:b9:5b:ab:28:7d:
89:eb:b1:0a:6e:9e:df:3c:8f:c4:57:5e:85:51:b7:
3f:4b:12:65:cd:bb:5e:3e:f8:45:f5:ca:b7:f0:48:
70:36:05:9d:3f:f9:36:ab:f1:67:fe:87:c3:ef:01:
2a:bf:47:0e:a2:ff:b9:aa:6d:52:a8:99:a8:c4:5d:
8c:3b:44:21:2e:25:88:e4:c1:14:ee:8b:94:3e:1a:
94:6f:9d:e1:6a:6c:75:64:67:96:34:c6:92:fe:3d:
cd:a3:d4:47:7d:f5:73:1e:20:9f:07:33:4d:7d:8c:
af:97:41:7d:93:2f:94:44:6a:c5:10:84:c5:9c:68:
85:cd:a9:d9:d7:52:92:34:dc:a6:3b:67:37:36:2e:
f7:21:f7:50:75:d1:22:85:22:5e:42:08:99:5f:72:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:62:40:AA:09:07:BC:0A:64:0D:19:AE:3D:79:9F:D9:56:7E:C0:C2
X509v3 Authority Key Identifier:
keyid:03:EC:A7:93:24:57:52:B6:7A:88:1F:78:E3:5A:B8:FF:49:DD:3E:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-ynkyRXUrZ6iB9441q4_0ndPsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/03beb4-240b-4cbf-aa3f-9fdc106c8153/1/A-ynkyRXUrZ6iB9441q4_0ndPsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:88:59:4b:be:1e:6f:d1:31:e4:4b:99:dd:2b:2d:f6:89:
85:bd:a8:36:71:37:9c:02:35:12:2a:88:47:41:d0:b7:bf:49:
e0:63:c4:32:c5:c9:18:3f:3e:61:0f:68:05:75:f8:48:97:0d:
2c:23:8e:79:a4:2a:89:de:44:c2:13:26:f1:fc:ba:2f:93:a1:
79:10:e4:47:01:c5:25:dc:31:b0:2e:f3:a2:39:f5:00:c7:20:
79:3f:13:50:cd:89:d1:d7:ff:be:18:c9:7c:a0:2c:59:76:2c:
37:56:11:1d:f5:1c:11:49:a7:a4:e4:f2:74:19:63:fa:1c:fd:
2c:26:86:46:63:2a:0b:43:dd:1a:32:dc:b1:53:5e:9e:e2:f3:
ee:bc:92:c5:98:98:7a:0b:a0:73:fa:e4:e4:58:b2:29:fc:2b:
b8:77:2a:d8:67:ad:fc:ac:43:ec:df:b2:a5:dd:9f:d0:56:af:
26:07:54:da:4c:63:af:2a:d0:80:85:35:3e:d1:b7:5d:9b:23:
6c:41:8b:98:cf:a7:00:01:79:bf:0f:9f:25:0c:e4:37:27:77:
79:23:11:63:b9:32:82:f7:6e:40:d4:29:0c:d4:72:a7:ca:cd:
69:a8:8e:f0:bc:5d:fb:17:06:a9:fa:d1:74:ae:95:72:1d:78:
c3:d2:41:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:26 2026 by rpki-client