Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
File: ybWfQXeebyQ19Z8aFxwIClp6RNI.mft (raw, json)
Hash identifier: y5vngAT7S9t+Xm5jXVLmUyJcsnnsNCs5BZLA7z19pPU=
Subject key identifier: 43:A7:DD:3A:DE:D9:B5:55:05:0D:9F:12:20:7D:D9:B0:F3:4E:61:5A
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 019D9A0744533B2609574017CA665B6CE0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:01:00 +0000
Manifest this update: Fri 17 Apr 2026 06:01:00 +0000
Manifest next update: Sat 18 Apr 2026 06:01:00 +0000
Files and hashes: 1: mDqresBCjx5tB2O9064HotHQuTM.roa (hash: VNWcNf8Sdt3FuYIE0VhCUYSxFFyBe4BxXJfzVVJjUDM=)
2: s_AKvxWCsACkF3KVOQOZnp7oWW8.roa (hash: 49Z2BVMcidGjzi+D5MSkcRcdFDX2/JcSVY9r82t0hoI=)
3: ybWfQXeebyQ19Z8aFxwIClp6RNI.crl (hash: Zbwz27tJpUG/lcNZogeDrdtvRCtBKYjpzTlTtcFFZqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:44:53:3b:26:09:57:40:17:ca:66:5b:6c:e0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Apr 17 06:01:00 2026 GMT
Not After : Apr 18 06:01:00 2026 GMT
Subject: CN=43a7dd3aded9b555050d9f12207dd9b0f34e615a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:58:ff:77:0d:4e:7c:a6:ef:ac:62:a8:6a:
0f:d7:a2:32:06:16:99:8e:25:68:98:c2:41:da:ed:
e3:1e:b7:21:7c:7c:5b:91:a8:fe:e4:c2:50:c4:0e:
57:0b:ae:41:f2:aa:9f:02:2f:00:5f:48:05:88:48:
cc:29:7c:29:0d:ef:77:bc:57:41:47:7c:45:b6:80:
2e:d1:32:4f:03:bb:81:39:d0:88:53:33:1a:fd:43:
e4:56:1f:f5:d7:ed:dd:0a:a0:8d:9e:45:d0:87:c5:
d8:74:7f:89:ee:0e:d8:0c:73:0b:2f:33:de:be:50:
bc:3d:d6:1e:32:3f:f1:dc:ab:e0:88:00:f6:f8:b6:
83:40:03:61:a7:17:96:31:1c:a1:cf:71:74:d8:97:
ca:5e:19:6e:5c:b2:7d:a1:ca:97:20:c8:8f:8c:1c:
bb:79:bd:89:d3:19:24:7e:e5:dc:93:71:8b:49:cc:
f2:34:1f:ca:f3:87:cd:80:70:31:fb:4b:a8:33:f4:
76:45:fc:1d:f2:ac:58:8a:91:1e:fe:bf:d1:f2:b6:
84:a1:10:e8:90:79:81:e9:6f:13:22:e3:c0:a6:78:
32:9c:52:8a:bf:0a:f0:8e:0d:a3:14:46:2e:65:16:
f9:55:57:35:e0:5e:f2:26:e6:74:ee:d4:97:96:36:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:DD:3A:DE:D9:B5:55:05:0D:9F:12:20:7D:D9:B0:F3:4E:61:5A
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:b3:e4:54:e0:c5:58:31:fd:2d:a0:21:4e:ff:55:34:0d:
41:7a:8c:47:e0:6d:75:f2:c7:fc:d9:ec:4b:0b:ef:cf:54:72:
e7:59:ff:b0:aa:22:c9:14:be:da:43:ca:f8:37:57:65:91:38:
4d:99:00:67:07:f4:0c:c1:39:2d:91:1f:ff:ec:6e:d3:92:6b:
32:19:2f:04:aa:65:30:54:e0:d1:02:bb:9c:45:31:56:9f:32:
c3:ff:ba:dd:9a:e5:38:3c:f0:c1:bb:8c:c3:b5:d8:2d:17:da:
aa:de:9b:e5:92:8a:24:a7:33:db:79:a6:73:3f:ac:47:b2:67:
72:d6:1a:d9:cc:30:ca:08:1d:9c:48:04:02:65:d3:0b:dc:af:
61:83:07:4c:9e:a1:3e:7b:72:ac:9d:3e:f7:29:1e:30:18:41:
ec:e7:08:dc:67:db:ad:02:8e:1d:3e:01:ca:7d:16:4c:6f:7a:
ec:99:58:0e:5e:fb:97:63:d2:98:89:82:06:d7:d1:da:17:ea:
77:23:75:10:48:ab:b1:83:e0:3b:00:27:16:83:57:e9:73:a6:
5a:a3:44:40:5c:98:79:89:e9:68:b3:58:8a:16:e7:e4:55:92:
14:e9:74:c3:8b:00:fc:bd:b7:40:0e:d3:0b:b1:31:fe:7e:a3:
45:19:ff:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:30 2026 by rpki-client