Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.mft (raw, json)
Hash identifier: ey3MewzfHaerN8Mk/2swTQ/Tm3guyMt0cJ2xm6ThE7s=
Subject key identifier: 14:D2:57:1B:AF:27:2B:45:35:C7:F3:21:6A:9D:7A:D8:87:DF:DF:56
Authority key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Certificate issuer: /CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Certificate serial: 019D98F532989E9957399B3314526AC3E2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:39 +0000
Manifest this update: Fri 17 Apr 2026 01:01:39 +0000
Manifest next update: Sat 18 Apr 2026 01:01:39 +0000
Files and hashes: 1: 6C5H6weklOvyIUmH6upyoLS9Fjk.roa (hash: 4tDaLUdULnIJjiPlfBjB5U5pwdeJP/TF6DH4C/OJMZ4=)
2: Y0FqyaIZN3iMrcd7ep-JttTFWko.crl (hash: zW3tlTbER3xnrkeWjosMMMeiQJQCNINpHnJgE7xkDBU=)
3: uTaIFz1uKDcuAGI72zb9cgQJSDU.roa (hash: /chT2KHjwm4Z4cMac2BTFt3alYJEDlnfPwAVuuzxgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:32:98:9e:99:57:39:9b:33:14:52:6a:c3:e2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Validity
Not Before: Apr 17 01:01:39 2026 GMT
Not After : Apr 18 01:01:39 2026 GMT
Subject: CN=14d2571baf272b4535c7f3216a9d7ad887dfdf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:ba:f4:d2:7c:55:ef:9e:6a:15:49:99:fe:
3b:88:f0:b1:a9:b4:83:a8:db:c7:43:4a:af:97:29:
e0:a7:fc:b9:b0:d1:50:6c:20:18:57:ed:fe:7a:42:
56:4f:ba:68:63:43:65:53:ef:03:1e:25:c2:39:38:
bc:8e:2c:29:4c:76:fa:0a:f9:fe:17:d2:c4:43:d8:
5f:8e:6c:dd:1a:3d:d9:71:19:b5:9e:66:21:9e:a3:
e9:b9:17:17:c3:7f:ba:c2:66:14:0d:73:78:46:69:
5c:ee:44:31:d1:3a:bc:9d:39:44:d6:7a:40:e8:3d:
12:97:85:a3:16:67:56:e1:04:85:9f:aa:c9:59:54:
3f:11:4c:4b:ec:f9:dc:e5:42:c1:de:c2:50:b2:02:
f8:30:47:67:6f:64:60:6e:4a:c4:b2:84:e0:08:0c:
0d:35:c3:97:b0:f5:fa:e1:31:88:de:12:31:63:d9:
04:ff:75:5c:9a:65:3c:7e:a4:a0:33:cb:2e:8d:8f:
62:6f:45:df:bf:61:0e:76:1b:48:96:03:89:c6:f5:
46:d3:05:be:b8:98:5f:ab:93:94:98:74:0e:04:d8:
4d:20:70:77:62:ed:87:f3:81:6a:0f:04:a0:b9:c9:
e1:4d:ec:ff:30:df:1b:09:97:4f:a1:e6:82:27:74:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:57:1B:AF:27:2B:45:35:C7:F3:21:6A:9D:7A:D8:87:DF:DF:56
X509v3 Authority Key Identifier:
keyid:63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f8:3e:28:db:fb:b7:a2:8c:b8:12:e5:ed:fa:43:1e:7b:22:
65:46:07:51:3e:16:62:75:30:ce:1d:bf:d2:f3:a0:13:3c:5e:
89:06:61:05:e2:0b:ca:04:60:91:7f:48:eb:45:f4:d6:b7:ad:
d3:e6:a4:9f:b7:3f:72:91:f7:2e:c8:c8:67:f9:64:66:a7:bc:
99:c1:b1:4f:e5:68:64:45:42:bf:1a:b4:2e:2d:eb:19:11:7d:
21:44:6c:50:c6:86:0c:0e:1f:10:34:87:ce:5b:79:d0:66:b0:
20:e8:25:b1:cd:31:d9:98:78:fe:31:0a:8b:02:f7:7e:55:58:
d8:4a:ff:f9:9b:26:4e:fb:af:98:6d:45:a3:f8:80:8e:8a:14:
14:c2:63:89:ec:4c:1e:47:f0:0f:75:05:af:21:02:c2:7a:99:
49:d4:64:e3:37:7c:f9:45:22:62:2b:37:7e:0e:ca:b1:f5:68:
96:69:29:60:70:6a:eb:f0:84:5a:ec:52:d9:44:25:31:b1:f8:
d7:b9:83:87:27:c4:8b:2b:d6:fb:9e:8a:76:89:50:66:78:5f:
92:0e:e7:37:31:f0:75:bc:86:db:a6:e5:1f:e0:03:7f:99:df:
f9:6c:15:e6:79:32:5b:e8:eb:f8:c2:0c:ae:b6:9e:a7:5f:97:
7d:16:57:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:12 2026 by rpki-client