Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: Lihl4zJ19OT8A/JGn2zXJQ2epI84h0tR2vSR+vVDm9c=
Subject key identifier: 11:E7:B6:60:45:80:5F:03:70:3A:3D:DB:E6:DB:4A:07:4D:75:25:A1
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019D9AAC291F813973A41CEEE2C325C4AE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 09:01:07 +0000
Manifest this update: Fri 17 Apr 2026 09:01:07 +0000
Manifest next update: Sat 18 Apr 2026 09:01:07 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: WoKtcjjYv9/zg50vF564zMrRX6UHA6ziJVWCOZEJO3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:29:1f:81:39:73:a4:1c:ee:e2:c3:25:c4:ae:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Apr 17 09:01:07 2026 GMT
Not After : Apr 18 09:01:07 2026 GMT
Subject: CN=11e7b66045805f03703a3ddbe6db4a074d7525a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:a3:8e:c5:fe:1c:9b:2c:67:3a:f7:99:79:
03:d1:18:35:0b:2e:87:a2:dc:7c:12:6c:17:77:79:
32:fb:1b:17:6a:99:59:e5:bf:4b:86:61:ac:91:56:
a8:a3:a8:35:f5:61:a8:57:1e:34:3a:63:4f:c5:72:
94:46:01:59:9c:ce:2f:55:82:a9:a9:6d:ef:a3:31:
a8:a0:ed:ad:b6:67:5c:fc:9f:22:87:f3:fc:57:8e:
a9:60:64:cd:9a:af:de:21:92:9e:07:eb:4f:8a:30:
44:33:9a:85:8a:e0:1b:ef:dc:68:8e:ca:30:7b:6c:
73:22:fa:29:3d:ea:a8:12:d2:ea:67:f2:6d:ed:00:
ff:96:48:41:c1:b6:6f:ad:80:ba:2a:66:46:bd:88:
b6:df:1b:57:5b:59:a1:7a:94:6d:eb:d5:e5:5b:01:
45:94:92:1b:2e:28:5f:84:01:59:4f:ca:11:69:0c:
28:5b:ea:d2:7c:db:53:75:02:9a:ce:61:f7:0c:14:
bb:7e:85:fd:44:6f:cd:00:69:5d:ea:46:15:a6:11:
50:d5:a2:e1:60:60:18:d3:a5:d1:f8:a3:8a:40:ac:
ad:e0:96:9e:5b:78:fd:98:c6:5f:c4:5b:ea:fe:20:
32:da:7b:75:2c:85:c2:69:f7:ac:c8:7d:54:93:3d:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E7:B6:60:45:80:5F:03:70:3A:3D:DB:E6:DB:4A:07:4D:75:25:A1
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:77:c8:4c:2a:80:08:68:20:b0:1a:28:c9:17:ed:81:97:ea:
23:6a:02:5b:af:1b:55:d0:ea:db:1e:30:11:45:de:33:5b:82:
39:98:9b:70:c8:57:d0:6a:68:dd:be:48:bd:fd:47:20:a2:a2:
e0:5c:41:f7:13:30:25:d3:68:af:12:41:44:e1:70:7c:b4:05:
63:05:55:9c:b7:ac:6f:e7:de:78:f0:b5:82:f8:0b:f1:e8:70:
76:00:f4:ed:54:96:f5:6a:85:00:2a:40:b6:4b:93:99:dc:a5:
a1:1d:9e:12:ad:e6:46:bf:a4:51:d3:5d:08:f9:51:fb:de:cf:
38:54:83:e0:1d:e9:dc:11:91:cb:fd:a3:1b:d9:c9:20:07:3b:
6f:e8:51:c6:fd:dd:7c:27:d8:87:56:a0:d2:88:9a:bc:a7:c0:
0e:81:b3:a2:f2:ff:5b:40:2f:45:d7:c3:6f:88:2f:19:d7:ca:
ec:be:75:cd:f0:9a:c2:58:30:bf:4f:63:6a:64:d3:cb:9a:11:
08:e7:af:30:f1:9b:77:51:e2:fc:6b:74:75:36:4c:7d:11:2a:
9e:a9:e4:24:80:d6:1c:d4:7a:25:5d:b9:04:c1:e6:1b:31:e6:
c5:6e:61:65:fb:20:bc:1f:8c:a1:43:bb:a0:e7:da:ac:c4:84:
dc:05:c7:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arCkfgTlzpBzu4sMlxK5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm
ZjQ5YjQwHhcNMjYwNDE3MDkwMTA3WhcNMjYwNDE4MDkwMTA3WjAzMTEwLwYDVQQD
EygxMWU3YjY2MDQ1ODA1ZjAzNzAzYTNkZGJlNmRiNGEwNzRkNzUyNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/KjjsX+HJssZzr3mXkD0Rg1Cy6H
otx8EmwXd3ky+xsXaplZ5b9LhmGskVaoo6g19WGoVx40OmNPxXKURgFZnM4vVYKp
qW3vozGooO2ttmdc/J8ih/P8V46pYGTNmq/eIZKeB+tPijBEM5qFiuAb79xojsow
e2xzIvopPeqoEtLqZ/Jt7QD/lkhBwbZvrYC6KmZGvYi23xtXW1mhepRt69XlWwFF
lJIbLihfhAFZT8oRaQwoW+rSfNtTdQKazmH3DBS7foX9RG/NAGld6kYVphFQ1aLh
YGAY06XR+KOKQKyt4JaeW3j9mMZfxFvq/iAy2nt1LIXCafesyH1Ukz0O3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHntmBFgF8DcDo92+bbSgdNdSWhMB8GA1UdIwQY
MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It
MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk
LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHfITCqA
CGggsBooyRftgZfqI2oCW68bVdDq2x4wEUXeM1uCOZibcMhX0Gpo3b5Ivf1HIKKi
4FxB9xMwJdNorxJBROFwfLQFYwVVnLesb+feePC1gvgL8ehwdgD07VSW9WqFACpA
tkuTmdyloR2eEq3mRr+kUdNdCPlR+97POFSD4B3p3BGRy/2jG9nJIAc7b+hRxv3d
fCfYh1ag0oiavKfADoGzovL/W0AvRdfDb4gvGdfK7L51zfCawlgwv09jamTTy5oR
COevMPGbd1Hi/Gt0dTZMfREqnqnkJIDWHNR6JV25BMHmGzHmxW5hZfsgvB+MoUO7
oOfarMSE3AXHoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:25 2026 by rpki-client