Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
File: ydy2lccNtLljcGAHUJGKSzqKIak.mft (raw, json)
Hash identifier: pelMfLDyk/+GLs28olySEixC/IN4GhC96pFI4ODKD08=
Subject key identifier: 40:30:BF:FF:A6:A9:83:E1:92:B5:4F:06:D5:38:60:03:64:B8:02:8E
Authority key identifier: C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
Certificate issuer: /CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Certificate serial: 019D977400E4B4C0B00D77D61EDA7D0275CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 18:00:55 +0000
Manifest this update: Thu 16 Apr 2026 18:00:55 +0000
Manifest next update: Fri 17 Apr 2026 18:00:55 +0000
Files and hashes: 1: 1I5pS-KyF91INpSvz4UTgvSLQM0.roa (hash: kUre6FGJxo0oVZmAH7QT5SEnqBChJ7h9HJs3PKswLaY=)
2: E2f-QrvVPeeVaSg1kFFd2ljgv_U.roa (hash: z/R9QyEuD/1u1pxIWlMmu6tFOTJDdDVTMoz5pzQhZoo=)
3: ydy2lccNtLljcGAHUJGKSzqKIak.crl (hash: v/4vdEiyGNXv2vj52lepiu0jRR3VRMZnzH2VrqLZiP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:00:e4:b4:c0:b0:0d:77:d6:1e:da:7d:02:75:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9dcb695c70db4b96370600750918a4b3a8a21a9
Validity
Not Before: Apr 16 18:00:55 2026 GMT
Not After : Apr 17 18:00:55 2026 GMT
Subject: CN=4030bfffa6a983e192b54f06d538600364b8028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:d8:fc:c7:22:a2:07:91:d1:21:ce:ac:87:
d3:96:94:a9:51:54:65:db:1b:5c:91:72:17:e4:18:
7c:3f:bb:a4:9c:49:06:37:d9:13:d2:d3:d4:34:95:
78:26:9c:2e:da:3a:f0:86:ac:93:27:28:ad:5e:c2:
5e:44:28:8d:8d:6a:20:ab:1b:f7:31:11:e8:a9:04:
96:25:c7:03:14:00:96:82:2b:a8:9f:22:8e:c5:1d:
c0:1a:50:31:37:13:2a:3b:6e:03:77:96:65:31:f0:
a0:cd:8b:a6:61:df:37:5a:6a:05:99:12:16:6a:1f:
54:14:ee:97:4f:d8:5c:4c:e5:86:2d:5f:b1:11:61:
fb:17:5c:68:bb:93:fc:43:31:43:77:94:94:fa:0e:
cd:c1:9b:37:08:d2:a9:11:ae:6f:c2:71:73:c1:60:
aa:4d:c5:47:c1:85:01:15:c4:0e:7d:80:d9:0a:ac:
c6:fd:e7:15:72:55:a8:69:b5:fd:af:83:6b:a9:bd:
7a:c9:67:bc:92:74:49:a8:97:cf:a9:da:3d:0e:42:
40:91:fc:ef:dc:05:57:52:20:3e:95:74:20:e5:d1:
bd:34:82:8b:2f:07:29:c5:f4:c8:7c:66:57:64:52:
ce:0c:b0:ad:1c:7b:9c:05:87:a9:e1:a8:8e:71:f2:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:30:BF:FF:A6:A9:83:E1:92:B5:4F:06:D5:38:60:03:64:B8:02:8E
X509v3 Authority Key Identifier:
keyid:C9:DC:B6:95:C7:0D:B4:B9:63:70:60:07:50:91:8A:4B:3A:8A:21:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydy2lccNtLljcGAHUJGKSzqKIak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0222fe-dcc8-4a7d-bfa2-eca978c3cb85/1/ydy2lccNtLljcGAHUJGKSzqKIak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3e:bd:df:9a:af:12:d0:eb:a3:a5:ed:c8:b9:58:cb:33:c1:
01:8e:4a:b2:d9:ae:ef:be:11:9e:5c:1b:85:cc:35:9f:c1:1d:
0c:a5:85:5b:08:20:d7:a9:4e:77:e3:10:18:0e:a1:67:69:f5:
88:04:3c:2e:c5:f8:0d:5e:fe:c0:26:73:27:93:9e:2c:27:03:
8b:71:4c:a9:1e:0b:41:34:17:f1:5d:bf:12:b0:6f:56:54:89:
f9:70:e8:42:77:e6:3f:2d:03:6c:3e:09:c8:1e:60:37:e2:3c:
1a:c3:57:db:0d:7b:44:87:20:22:ad:75:43:52:0f:31:f1:1d:
54:73:53:88:2d:bf:8c:b7:b3:d4:77:1f:e6:37:7d:3e:e1:85:
fb:25:19:be:8f:a0:05:89:33:4f:7b:70:5c:7f:ea:cc:a8:dd:
61:3f:7d:72:2c:e3:e1:f5:0e:30:39:aa:54:e0:1c:c3:07:72:
28:62:49:78:d3:48:ae:64:28:04:62:a6:f2:2c:1c:6f:0f:73:
1b:6f:8b:9c:18:84:99:c0:b5:e3:ef:7c:71:ae:5d:1e:fa:ec:
41:e8:e1:d9:be:b5:f3:e1:bb:fb:cb:59:58:48:f5:af:4f:52:
15:0d:8d:a3:d0:2e:7c:6a:83:ce:dd:88:a0:f9:0f:93:44:02:
af:12:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:21:10 2026 by rpki-client