Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
File: yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft (raw, json)
Hash identifier: 80g3Q3XIpzxq2EoAdat3Y/78WteqObH7Z0c0CWDeB+U=
Subject key identifier: BF:EA:90:1A:EE:E5:2B:A0:19:4B:8E:AD:5C:3F:5C:DC:B4:BC:9D:1C
Authority key identifier: C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
Certificate issuer: /CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Certificate serial: 019D9D080CF5DF2E297CA47169515CB4730C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
Manifest number: 07
Signing time: Fri 17 Apr 2026 20:00:43 +0000
Manifest this update: Fri 17 Apr 2026 20:00:43 +0000
Manifest next update: Sat 18 Apr 2026 20:00:43 +0000
Files and hashes: 1: 9vZ-bh78nQSisMvdujS-2j3jEKQ.roa (hash: 9I7QrI133VXhhj9mm/9D7pspc5I/xtLd60jZL9gznBc=)
2: yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl (hash: tYtvMAZNPfUL3GSd3DHf/Kfn8UxnzGHH4ohYQz+139A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:0c:f5:df:2e:29:7c:a4:71:69:51:5c:b4:73:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94ab84b380f32e3b156fca370a284fcb0761ab7
Validity
Not Before: Apr 17 20:00:43 2026 GMT
Not After : Apr 18 20:00:43 2026 GMT
Subject: CN=bfea901aeee52ba0194b8ead5c3f5cdcb4bc9d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:75:f9:4b:e8:ef:82:35:76:46:da:c0:4b:
e9:e4:56:f0:98:a1:f7:27:dc:a9:0d:e9:c8:cc:38:
c6:8d:fd:ec:d2:44:f3:91:fb:b7:29:c9:49:ae:6e:
6c:c8:50:5a:45:11:e1:c9:48:87:dc:52:9f:b8:96:
e2:23:93:ee:0a:18:44:c6:72:a4:04:bc:96:84:c1:
62:68:fe:04:19:9b:5c:ac:5d:32:f4:92:ca:68:16:
3f:cc:8b:b9:7c:24:7a:c2:c6:90:e8:ba:24:5d:cf:
02:3c:ac:fe:f9:8b:1c:11:3c:d9:58:da:ff:c5:b1:
33:1a:05:f9:91:70:0b:cf:7d:99:9d:0e:a2:47:db:
a3:fa:c2:82:66:53:38:7e:78:ec:11:89:d6:13:ab:
b8:20:4b:b3:ed:06:d8:a2:40:cf:99:37:59:ba:ab:
e5:b0:e1:c6:ed:f7:29:5a:cc:c7:84:d3:ee:23:c5:
32:8d:30:db:ff:48:6c:82:ca:10:10:e1:bf:23:08:
2b:a5:ba:56:92:1b:72:71:c1:a9:a5:e9:ba:a9:d6:
6a:0c:64:6b:a0:9c:43:92:55:b7:1b:6b:ca:50:d7:
d1:c0:93:71:de:7b:6d:9f:07:19:30:47:b6:a9:35:
c9:cb:81:d5:49:4e:85:a2:42:0e:43:f1:9c:8d:3e:
4a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:90:1A:EE:E5:2B:A0:19:4B:8E:AD:5C:3F:5C:DC:B4:BC:9D:1C
X509v3 Authority Key Identifier:
keyid:C9:4A:B8:4B:38:0F:32:E3:B1:56:FC:A3:70:A2:84:FC:B0:76:1A:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUq4SzgPMuOxVvyjcKKE_LB2Grc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/3479ad-783f-4daf-a9b7-0807790ba21c/1/yUq4SzgPMuOxVvyjcKKE_LB2Grc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:35:b7:6c:cc:59:41:57:3d:4e:71:8e:2e:dc:35:a1:3c:ad:
50:ce:7a:fe:ea:d2:b9:c2:9b:40:3d:57:37:8b:73:48:5d:ad:
31:8f:89:ca:e3:ca:78:95:8c:62:53:8a:31:44:bd:8c:e0:9d:
be:a6:b6:9c:8f:6c:56:db:ca:84:78:4b:6b:ed:e3:10:db:96:
3d:2b:9b:08:1d:4b:06:a7:29:95:41:d1:7a:3d:7f:6c:0f:ef:
7d:08:b7:a3:ce:61:0b:e5:4e:9e:7c:b2:74:b6:12:45:72:5d:
f5:11:4b:7b:5e:31:5e:a9:cb:27:b1:42:9e:cc:04:d9:aa:14:
4f:8c:00:a2:ac:e6:33:ea:17:9b:e2:60:e6:c6:31:1c:76:15:
89:0c:ce:f0:fe:13:ee:e0:d7:bc:1e:16:38:f5:24:7e:a1:5b:
c3:db:5c:86:7b:21:18:2e:1e:38:e8:5c:d6:11:14:99:16:82:
39:53:88:b9:81:31:2c:ef:2d:e8:a1:0d:81:77:89:70:01:e7:
e5:a1:4b:cd:c2:56:b0:cc:89:3b:38:ae:47:a6:b8:6c:9c:33:
21:aa:52:64:7c:d1:cf:7c:16:f3:e4:48:8b:9e:cc:d4:fb:2e:
05:f3:68:f6:6b:ae:45:3c:8f:c8:5f:2d:f8:9c:5e:44:a0:ab:
f3:26:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:06 2026 by rpki-client