Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
File: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft (raw, json)
Hash identifier: 4O8YUT3i3rKKebGhEauFdaiC7l+GYPEqTliahSlQ5HY=
Subject key identifier: AD:43:09:14:C4:06:03:CE:86:FA:DC:55:30:72:27:BF:08:D6:12:6E
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Certificate issuer: /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial: 019D9AABFBE639BEDDD7C56420DA8F5DDB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:55 +0000
Manifest this update: Fri 17 Apr 2026 09:00:55 +0000
Manifest next update: Sat 18 Apr 2026 09:00:55 +0000
Files and hashes: 1: UPrQj25vnT6Fdd7b7QXogF6wTTg.roa (hash: a8xR8qC3gvw3SqhvcSrLs9IegWUDgQWv4atMuiHFmB8=)
2: ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl (hash: DAACghi/CbyN/iLAf3aNncadKlU7RW+uNkZ4VOpb/NY=)
3: lCNcwiTis23NjZGJUyz6VATDyz0.roa (hash: 6hddPze5e7W4oU8e0Ss6BtZ9E8J7K5C2H/UpL6cDWu8=)
4: v9NaEdKzC8X1yV6jmpK7d2qNjF0.roa (hash: HsVzpPNEo4X7pN1jnhjgGZFS2tyRpInJqLP27FGb47M=)
5: xrEy6iUyNKlNRIluwbEEOx9I6H4.roa (hash: QhXBZ2h3TRqk9pU8GNfzx4oTepVoS1O3YxqP7OBtjQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:fb:e6:39:be:dd:d7:c5:64:20:da:8f:5d:db:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Validity
Not Before: Apr 17 09:00:55 2026 GMT
Not After : Apr 18 09:00:55 2026 GMT
Subject: CN=ad430914c40603ce86fadc55307227bf08d6126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:f7:43:16:5f:4e:1f:93:ac:d3:e5:48:73:
33:65:55:9d:2b:43:a5:f2:d0:2f:4e:ad:f8:56:f0:
3a:1f:e8:ee:d6:d6:b0:b6:44:d1:53:09:2c:ad:45:
8e:9a:ba:12:ae:aa:97:97:a9:6c:ba:44:bc:54:a2:
29:e5:f6:27:5c:7b:19:e3:2b:6e:43:97:22:4b:1c:
3d:2a:2e:71:6c:a7:4f:5f:37:6a:ce:8d:c7:11:da:
a8:e9:b2:8e:a6:37:93:19:2e:56:b0:7c:eb:6d:e6:
d4:31:59:5e:8c:0e:54:a6:ae:3c:31:22:d8:bf:77:
07:18:6f:bb:48:02:43:31:d8:4c:b3:f0:e4:b2:56:
bc:4a:4a:08:e3:bd:aa:8d:54:d3:4c:de:a7:d7:ee:
42:3b:64:5f:80:1c:b5:80:c5:d6:27:e5:25:7b:95:
e1:87:aa:d8:17:c4:70:f9:7d:aa:3d:e3:3f:29:00:
2b:eb:85:02:12:14:0b:6d:dd:87:bf:fc:77:25:0f:
d3:e8:c9:49:85:97:60:67:4b:bb:08:85:89:9f:45:
8a:13:3e:28:52:33:fd:0e:f8:fc:f0:1e:76:d7:37:
f5:86:58:6a:f8:fc:41:1a:fe:7f:12:2c:e9:b6:f4:
a3:8e:97:ef:27:1d:f7:a1:8a:2c:f3:34:2a:30:67:
67:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:09:14:C4:06:03:CE:86:FA:DC:55:30:72:27:BF:08:D6:12:6E
X509v3 Authority Key Identifier:
keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:97:d6:4e:1d:03:bf:7d:16:6c:c9:b7:13:5b:3e:87:b2:
a0:f8:74:d4:93:cd:3c:7c:66:da:ae:ea:21:dc:2b:bc:c6:b9:
6f:81:16:df:ef:be:8e:44:4b:b3:d0:f4:6b:ae:8f:f5:bc:6a:
50:46:c0:bc:cd:67:03:84:44:56:5c:10:03:19:79:d6:26:9f:
21:f4:7a:85:90:c5:25:d9:70:6e:4c:c5:96:3a:29:c1:cb:0e:
43:fc:e6:5a:b0:1c:e7:b3:a6:8f:9e:a7:14:10:81:e5:a6:19:
89:b8:f5:68:12:11:e0:70:32:cd:6b:08:e0:7d:00:81:f8:13:
67:90:87:9a:f0:f4:fc:25:df:b5:37:91:db:31:4d:db:bf:29:
f5:4b:c4:a2:e7:8a:23:b3:6a:b7:d8:5d:53:fb:50:00:3a:3e:
1e:8c:73:ca:a7:0a:c1:02:c2:76:4a:bf:fb:3f:e5:a2:42:a1:
02:ee:14:df:89:e3:b1:53:13:83:00:ca:f6:1d:eb:8d:29:64:
64:9d:e3:ad:73:b8:b0:3d:01:c3:2b:00:16:f1:2a:7a:ea:e8:
62:43:4b:b4:b4:4b:ed:f2:64:f1:92:39:98:23:ee:8d:8f:6b:
a5:a4:b0:7c:d2:bc:be:14:8e:4f:b5:75:71:57:e1:42:da:d1:
28:f3:e6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:55 2026 by rpki-client