Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
File: yc040dHEojBTzZlxYzGNZJp7Klc.mft (raw, json)
Hash identifier: Ezk3DntJiIbNsL4Cu94qwUtvs2jZqpa7/KmBneFZkZk=
Subject key identifier: 38:67:4D:B3:79:CA:54:A2:01:22:B1:C3:D8:41:00:5B:A4:4E:94:1D
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 019D9A74E5349BEEBAA9BD9B36E62641274C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:45 +0000
Manifest this update: Fri 17 Apr 2026 08:00:45 +0000
Manifest next update: Sat 18 Apr 2026 08:00:45 +0000
Files and hashes: 1: 05Rdwr--1tnXZPfu13z1-r9tQTo.roa (hash: wM0ntv3W1SWKI6P8cH7TnrdrNZlJdigMYw8TmLb1CoU=)
2: aE8_gVmck-wD_VyyQXZL4UyhlMU.roa (hash: GaAIUgFsYTQaT7thc7zx4Q22k1Bx49GbLq0/1lvEmRM=)
3: yc040dHEojBTzZlxYzGNZJp7Klc.crl (hash: 1Buhy0AmJWY2vdj2rlJMU49K/30VG0fpqcD34Q4d0ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:e5:34:9b:ee:ba:a9:bd:9b:36:e6:26:41:27:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Apr 17 08:00:45 2026 GMT
Not After : Apr 18 08:00:45 2026 GMT
Subject: CN=38674db379ca54a20122b1c3d841005ba44e941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ff:e8:20:02:ea:4b:60:2f:9b:76:5c:76:25:
3a:8c:e4:1b:25:a0:42:ad:3e:52:b5:32:9b:37:3d:
78:33:6d:47:73:c3:5e:7d:77:31:fd:e3:cc:1c:0d:
fe:67:cb:fb:d9:82:3c:87:81:e9:7a:2e:95:cc:c7:
d2:1f:f4:70:a7:a4:ad:83:c1:6c:97:13:4c:18:25:
19:b8:fe:27:5f:26:09:82:64:3f:db:31:8b:46:f6:
32:c6:c8:9b:6e:eb:36:f0:e6:c3:f6:fd:d1:98:c2:
7c:55:db:c1:46:90:82:80:66:13:b9:9e:96:3a:1f:
67:5b:60:34:3c:ac:d6:a6:d9:87:a8:38:5d:69:0b:
42:85:6b:8b:97:2b:c7:b8:25:4d:14:66:0d:95:d9:
c1:88:16:5e:56:74:cb:ed:31:e8:23:ba:ca:39:90:
3d:1d:32:7f:c7:26:36:3f:a9:69:6e:ff:57:16:ef:
03:b5:06:24:a7:45:df:5f:48:b6:11:37:85:cd:2a:
19:a0:b9:b8:14:7d:25:35:12:41:b6:ba:c3:0a:c0:
25:c7:41:f9:39:79:1d:86:41:e1:06:77:32:74:e5:
4f:a1:a4:30:9b:39:a1:de:4c:a6:cf:23:aa:82:d9:
0b:f2:54:26:c7:26:7a:3f:f8:3f:1d:37:8d:91:41:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:4D:B3:79:CA:54:A2:01:22:B1:C3:D8:41:00:5B:A4:4E:94:1D
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4d:bd:64:00:04:16:db:4a:03:0b:cd:42:5c:7b:f9:20:20:
77:06:48:88:be:96:98:5e:45:a8:5e:3c:01:b1:3d:51:66:74:
cd:db:5a:bb:c8:1a:38:6b:ef:db:ad:be:ec:d5:ac:ee:c5:f6:
e2:f1:2b:f7:6b:06:e3:cb:ee:0b:fa:01:43:a4:f2:3a:e8:80:
d3:9f:12:01:d0:98:35:a1:f1:9b:59:a5:28:6b:72:1d:2c:0c:
e0:17:65:27:0f:2a:e5:1a:31:e7:3a:37:5c:79:8b:8e:9f:b2:
64:99:55:4c:52:cf:18:4e:a5:7f:c1:cc:a3:c5:b2:81:b0:95:
a6:5e:d8:03:42:e2:40:bf:d3:2d:d6:56:97:a6:71:70:36:22:
c7:13:c4:33:ea:7a:94:e4:ad:08:f6:1d:fe:51:e4:1d:70:51:
15:98:1a:42:16:76:1b:4c:e1:56:4b:e4:6a:fb:8e:73:7f:41:
98:77:1c:ec:02:d6:a4:0d:22:cc:e3:4b:e2:f0:28:f1:6a:2e:
87:de:08:4f:4c:5c:e5:8d:e3:94:50:9f:c0:45:cf:57:a9:1b:
60:f8:34:1e:16:bf:f2:72:46:37:b9:cc:6c:6d:f3:c9:0d:6c:
0c:66:5f:72:9a:a2:47:86:ce:dd:9e:09:6a:da:14:6d:7e:e4:
fa:1b:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:07 2026 by rpki-client