
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: eacnA5ccxXZPEpuCqtNwQ0nsKNwZNsIo9iCrSTboang=
Subject key identifier: ED:41:37:61:4E:6C:9F:31:21:D8:55:7C:95:0A:BE:8B:80:B7:FE:15
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 019D99D0BC1CDC01F8A4138014427D54F4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:26 +0000
Manifest this update: Fri 17 Apr 2026 05:01:26 +0000
Manifest next update: Sat 18 Apr 2026 05:01:26 +0000
Files and hashes: 1: BtnF3z_6Q5xPFk5aaPdB9AV2Ub0.roa (hash: e4XrjTZT9DVKsoP6xpDG68p8DkyaP4kbQPdVBr18Zts=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: o0QcfKTXD81s3aslY5TWdShRERtY2018F35jNopo4Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:bc:1c:dc:01:f8:a4:13:80:14:42:7d:54:f4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Apr 17 05:01:26 2026 GMT
Not After : Apr 18 05:01:26 2026 GMT
Subject: CN=ed4137614e6c9f3121d8557c950abe8b80b7fe15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:31:bf:1a:60:d1:1c:f1:04:35:40:87:3e:
87:59:a8:f4:4d:fb:83:56:57:78:e8:da:18:f5:78:
c4:42:d0:30:db:4f:94:6b:c9:fd:25:6f:13:6b:bf:
c7:b9:a9:13:38:1b:d6:2a:f2:15:f3:36:d2:24:9d:
3e:91:27:ac:19:4d:1e:49:44:34:1f:76:5a:4a:2e:
79:1a:93:ab:95:90:3b:62:57:05:7b:3e:32:94:e0:
15:51:c8:18:40:4e:3a:c5:84:48:3f:8a:7b:3a:93:
d7:19:1f:89:00:c1:2c:2b:c4:ff:40:ab:78:13:86:
82:a6:56:32:e9:19:32:c0:38:ed:be:cb:a5:af:6a:
09:1b:49:d6:4a:64:bb:08:cf:46:31:92:61:b4:01:
17:5e:ce:c5:f3:4a:73:0b:fe:ee:34:66:60:97:0a:
d0:82:61:fa:95:a5:b6:63:bd:cb:98:f2:07:41:aa:
7a:24:93:28:66:8c:20:71:fb:36:bf:52:08:f3:38:
c0:6c:37:4f:0f:b0:21:88:c9:b8:76:d6:d8:35:58:
cf:58:76:82:09:f6:2f:5a:32:4e:a2:15:48:fd:2d:
d5:2f:ba:b2:b3:9a:2e:15:fe:f2:58:7e:ca:3c:6e:
a1:4a:35:59:89:25:0c:4f:8a:07:cb:ae:90:47:d3:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:41:37:61:4E:6C:9F:31:21:D8:55:7C:95:0A:BE:8B:80:B7:FE:15
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:14:23:3a:94:8a:0b:30:75:a1:9d:17:73:3b:66:8b:a7:66:
f7:ea:a7:1e:3f:40:01:e0:7f:8d:f7:9d:0d:f3:f4:2a:f4:8c:
06:d1:3b:fd:2f:69:20:39:c4:ba:01:1d:f7:fa:61:cb:d0:ab:
df:3d:3e:1b:d0:ab:94:ca:3f:36:9c:17:14:62:17:2a:57:7f:
8b:68:54:1c:e3:49:de:7e:90:cf:b7:21:ab:ca:35:c7:1c:23:
82:62:c8:f0:d8:cb:94:ef:95:c9:cb:d7:1e:d0:66:1e:74:d2:
fb:0e:27:75:5a:75:41:ac:1c:f9:18:e8:c4:9b:1e:61:87:0c:
fc:bd:a2:e4:37:11:58:65:54:f1:60:12:71:c2:c6:96:8a:55:
75:5b:c9:7b:d3:2a:a7:9a:2e:60:53:81:24:ec:2f:7e:04:c0:
4a:31:7e:f6:ba:a2:92:19:cc:c2:a3:a3:c3:64:c8:6f:77:a1:
b4:f3:3b:01:bc:eb:65:1b:b3:9d:2d:ec:03:e3:43:c0:cc:fe:
05:62:96:b2:6d:0e:89:7f:7b:52:aa:38:db:d2:31:b1:a2:71:
ab:8a:68:c6:27:62:ab:65:fe:41:c2:26:7f:c3:8c:6a:3a:68:
e6:32:c3:ba:be:2e:19:f4:e5:b7:4a:88:f4:13:13:58:ff:5d:
d7:f7:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:35 2026 by rpki-client