Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
File: Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft (raw, json)
Hash identifier: 0ctKp9BaftR22JGvBN5l67gw1aSGzoHzgmCkEaeasaU=
Subject key identifier: 4E:D8:7A:85:DF:9D:A7:A2:AD:16:6F:4A:6D:0C:3F:AC:B6:06:EB:98
Authority key identifier: 62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
Certificate issuer: /CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Certificate serial: 019DA378EE10EF2F4FB097387D93AAA5E849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 02:01:44 +0000
Manifest this update: Sun 19 Apr 2026 02:01:44 +0000
Manifest next update: Mon 20 Apr 2026 02:01:44 +0000
Files and hashes: 1: VpTcnmIdu1or70NVdb7KksBG0mY.roa (hash: X4YGR6I4Wi0PqQvq++rW4nssY1qKMiMmata2S9zHF98=)
2: Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl (hash: oRy/ynipoY0ThSJ1QE0TLCD8EOgXjVw2oQfYYrpMKiA=)
3: cTDuniyRrLnWpjHrfmAD6ZsdMKY.roa (hash: SUSOfIvJ0FegXPx9bBr1JRLYC/VJEW0GnploXLv94LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:ee:10:ef:2f:4f:b0:97:38:7d:93:aa:a5:e8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622f517b08182c6eda1b3f988ee01816ee264dc0
Validity
Not Before: Apr 19 02:01:44 2026 GMT
Not After : Apr 20 02:01:44 2026 GMT
Subject: CN=4ed87a85df9da7a2ad166f4a6d0c3facb606eb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:4f:62:aa:8d:60:72:01:f9:9c:56:b8:df:
e8:70:d0:22:36:82:6f:dd:9a:16:e7:d8:93:4b:25:
c5:7f:b5:91:38:d6:db:57:f1:86:ad:21:eb:d6:9a:
ff:78:9d:6d:4a:d1:5b:cb:25:1a:d6:13:56:36:80:
82:31:99:c1:f6:5f:b5:9f:63:75:7c:94:9d:9d:b4:
65:c0:63:15:02:a3:15:0a:96:0a:ae:93:26:16:b6:
70:94:bb:25:44:87:cf:41:71:75:d1:0a:2e:23:1f:
96:26:c1:8c:4e:88:99:df:36:17:c3:05:25:86:cd:
7f:b8:96:c5:bb:6d:1e:f1:ad:e8:75:97:0e:09:4e:
b8:be:cd:fd:22:a1:d5:2a:e5:0e:a1:98:ad:80:39:
df:46:2d:2e:7a:d5:5f:42:c6:ea:5a:72:77:7a:03:
91:e1:2b:e6:2c:85:6b:2d:65:8a:71:60:43:8d:01:
55:e7:cc:b4:e2:2f:a5:79:a1:4d:49:8d:d8:ec:63:
e2:97:28:8a:a3:48:71:b8:6e:24:a0:0e:06:ac:7c:
7c:bd:f4:31:4a:60:b2:e5:cf:b2:8c:cd:f1:6c:e4:
ea:c8:b3:14:54:a1:7d:e6:02:a7:95:78:15:31:c9:
de:da:95:30:98:9d:07:ed:5b:0a:0c:81:2d:75:d6:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D8:7A:85:DF:9D:A7:A2:AD:16:6F:4A:6D:0C:3F:AC:B6:06:EB:98
X509v3 Authority Key Identifier:
keyid:62:2F:51:7B:08:18:2C:6E:DA:1B:3F:98:8E:E0:18:16:EE:26:4D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi9RewgYLG7aGz-YjuAYFu4mTcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3453b2-9773-455e-8b08-d92dae861a7d/1/Yi9RewgYLG7aGz-YjuAYFu4mTcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6a:8a:d2:25:32:24:00:32:18:8f:76:28:d9:5d:fe:2b:0d:
01:e0:f1:ba:fe:26:f2:4b:8c:35:5e:78:2a:0b:9d:d6:4c:1c:
cc:b3:a7:ed:42:23:49:fa:ef:d9:59:8a:3a:ab:3d:a5:d9:1c:
82:9f:3c:46:4f:94:d3:85:ff:fc:a7:12:c3:19:00:ba:ef:5a:
25:fb:6c:d8:f5:f6:e0:6e:3d:73:13:4a:01:cc:b0:e7:18:42:
bb:15:84:19:15:43:ff:8e:13:43:89:10:d2:85:eb:e5:84:4f:
23:fb:80:6f:96:1c:69:6a:ce:49:dc:28:62:ee:b5:4c:ac:27:
45:a7:05:ee:91:ce:30:00:a6:52:6e:bd:f2:bd:61:55:d1:e7:
96:43:e5:2c:a1:70:8b:c5:9b:a8:c9:7a:9d:01:50:8f:b2:d4:
0d:37:1d:d6:58:fc:9a:06:84:2c:6c:d5:a1:63:40:ee:b9:b7:
90:8f:40:fe:e8:9d:4a:b0:12:d0:d5:02:38:5d:97:49:2b:1a:
24:14:6c:36:60:db:84:e6:13:ca:f6:5d:27:9c:8c:fe:11:cd:
5f:de:fc:60:3e:97:f4:6d:b5:ff:0f:49:12:c5:6b:e5:8f:e9:
bf:db:6f:89:c2:6a:e2:ae:4a:51:30:11:ab:00:4e:d7:23:f4:
de:b7:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:20 2026 by rpki-client