Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
File: yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft (raw, json)
Hash identifier: S4GoKsde1YlQaOFtw43QiHzlgKPCAwhOwST3RZ0V1e8=
Subject key identifier: FF:F4:D6:73:E6:B3:DA:E9:13:84:2B:33:BA:87:AC:D6:57:D3:A4:2C
Authority key identifier: C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
Certificate issuer: /CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Certificate serial: 019D97E1BAC25E58CB811B65B3081D3D8689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 20:00:46 +0000
Manifest this update: Thu 16 Apr 2026 20:00:46 +0000
Manifest next update: Fri 17 Apr 2026 20:00:46 +0000
Files and hashes: 1: Nh5n5OS_FgNSU_CRCZBVspz1rhI.roa (hash: IWrNPYpBRnCN3KoAH2/hYR5dMaCc3BE8UMq5q83cyhw=)
2: wG3GrFqVGUvTRTbPHblNlTz8CLk.roa (hash: LemTu9TRxZtqMeqZqR+9skKyltQynjo4K29j1dzL0vI=)
3: yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl (hash: WYCINKR0INs0gVVdaeDwSLk73u/sAUSEXA5x68PfEMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:ba:c2:5e:58:cb:81:1b:65:b3:08:1d:3d:86:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97dc6d8df5d084e923063488d37d3ae0114777b
Validity
Not Before: Apr 16 20:00:46 2026 GMT
Not After : Apr 17 20:00:46 2026 GMT
Subject: CN=fff4d673e6b3dae913842b33ba87acd657d3a42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:78:d9:69:06:c4:f2:a2:01:39:72:ad:a0:13:
aa:a0:70:09:be:f7:e3:0b:cb:8f:de:43:4a:c7:b3:
2f:ed:76:34:28:8f:19:aa:51:8e:df:4f:34:88:1c:
fa:70:e1:f7:68:c8:2c:60:cc:1e:92:04:9c:49:ed:
50:6d:35:f4:d3:d3:0c:63:bd:f1:71:e3:0d:1c:9f:
fc:23:07:7d:0f:52:5b:55:45:86:ee:db:90:09:d5:
63:47:92:b1:6a:04:a6:39:b5:08:36:79:ec:63:db:
12:18:5e:eb:56:3d:e3:ae:30:bc:1e:87:07:95:b5:
d9:dd:ec:c3:c6:d3:fe:91:d2:43:cd:d1:a3:2b:1e:
27:ef:23:03:d0:71:92:b2:dd:07:bf:20:a5:41:19:
d6:2d:dc:6d:26:6a:80:e1:60:ca:30:cd:6e:ef:ae:
c1:e7:04:f3:cf:ac:12:5d:ab:71:31:72:05:b6:be:
82:8d:91:46:46:2f:3f:7e:5c:55:7d:91:08:09:2e:
be:7d:2c:23:2c:54:e7:82:0c:f2:91:a9:1a:ac:7a:
46:a0:89:1e:f3:56:91:45:f5:49:bf:2d:3e:41:ba:
19:8a:17:fa:79:02:1b:b3:d1:1d:b6:ab:a9:1a:9f:
da:ef:26:fc:f5:65:05:86:7b:1c:d1:11:b0:9f:29:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:D6:73:E6:B3:DA:E9:13:84:2B:33:BA:87:AC:D6:57:D3:A4:2C
X509v3 Authority Key Identifier:
keyid:C9:7D:C6:D8:DF:5D:08:4E:92:30:63:48:8D:37:D3:AE:01:14:77:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX3G2N9dCE6SMGNIjTfTrgEUd3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0f6920-2770-4cbe-a64f-2a6bc3832a0a/1/yX3G2N9dCE6SMGNIjTfTrgEUd3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:72:e3:b2:1a:9d:38:f5:a4:88:13:fb:10:01:43:92:fb:df:
b9:63:a2:e0:03:e5:39:2f:60:ca:46:bb:c9:7d:0c:b8:29:5d:
f9:9f:62:b8:30:27:87:10:4c:2c:08:52:4a:88:07:b3:74:c7:
55:48:bb:28:14:1c:41:07:a0:3f:20:5a:75:52:09:7d:4e:47:
8c:f2:d6:e3:db:04:5f:5a:80:19:94:be:b3:a6:f9:96:a1:8f:
c5:73:a1:99:1b:41:04:01:e3:21:7a:64:86:b1:8d:3e:bb:c0:
70:a4:7e:fc:9a:4f:15:73:d2:3d:7f:b8:e0:20:ad:42:cb:70:
52:c8:dc:52:66:63:e9:5e:66:e2:cd:8c:37:67:8d:da:0a:00:
bd:ab:eb:67:ff:f4:52:33:4a:72:7e:b9:c5:d6:46:2f:fc:10:
d2:e6:bc:eb:f0:01:8a:01:b4:6f:d8:c2:df:55:2a:37:49:db:
e2:f6:40:7f:1a:a4:0c:72:27:a1:85:3b:08:c1:31:ff:0b:b3:
e5:1c:20:7d:e0:04:a2:8a:75:58:4c:12:68:ad:75:b9:71:33:
e7:7a:fa:f2:0a:2c:b4:7a:a3:94:f0:01:59:ad:d5:c7:1e:28:
cb:c2:35:8a:4c:5b:41:e0:6c:2c:ce:c7:5c:19:f0:7a:61:7c:
53:42:6f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:00 2026 by rpki-client