Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: q68yXyFYJDqRg2FCdLSsLsrVF8iJbTRdkRTiBNMHBDU=
Subject key identifier: 4A:9E:C2:39:7D:18:3D:10:58:56:F6:B9:04:48:9C:F8:77:39:B7:C5
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019DA41D194FCE32BDED547FE816AFB61BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 18D0
Signing time: Sun 19 Apr 2026 05:01:03 +0000
Manifest this update: Sun 19 Apr 2026 05:01:03 +0000
Manifest next update: Mon 20 Apr 2026 05:01:03 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: Htz/jQlVHLNgLZ7OatoIeSVqZqclkcUgl6NQaw9BDqs=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:19:4f:ce:32:bd:ed:54:7f:e8:16:af:b6:1b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Apr 19 05:01:03 2026 GMT
Not After : Apr 20 05:01:03 2026 GMT
Subject: CN=4a9ec2397d183d105856f6b904489cf87739b7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3b:3a:bf:2f:e7:c2:8c:49:d2:28:c3:61:8d:
3a:11:6d:a7:6c:d5:67:bd:38:12:a9:eb:78:81:6d:
0f:83:a5:72:74:c9:5f:06:a9:3c:b3:85:7f:81:80:
a3:58:24:8b:c0:45:f9:96:ce:ee:c0:87:82:4d:e8:
67:4a:f9:71:c1:70:bb:89:6f:de:14:bd:c2:fe:f5:
98:2d:c4:4c:09:bd:c3:43:dd:db:91:27:a1:16:cf:
8d:ec:44:38:52:62:d4:85:a6:0d:5f:81:20:b5:51:
f9:39:5f:4c:61:97:4b:72:73:24:25:7d:ad:f8:09:
81:30:c4:d1:31:a7:63:f4:b3:df:e5:41:66:22:14:
0b:d7:3c:b3:92:82:a6:f2:ff:b3:f7:f2:b4:72:3d:
39:4a:9b:2d:35:56:9d:cb:da:bb:5b:7c:a7:02:05:
e4:bc:c7:e3:e4:f9:62:22:69:2d:5e:db:cd:b0:56:
65:8b:8d:91:6c:3c:a4:eb:99:7e:b0:9d:d4:f1:2a:
d5:53:bd:5d:e6:c1:c4:d9:3f:31:9d:b7:c3:8b:10:
a4:da:61:d3:95:15:2f:fd:40:d0:f4:d5:84:b4:0f:
d6:96:07:96:a5:8a:50:c8:03:2c:ed:79:ee:6f:f0:
1e:91:69:ad:cf:43:a8:ca:41:35:fd:bb:aa:7e:d6:
c3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:C2:39:7D:18:3D:10:58:56:F6:B9:04:48:9C:F8:77:39:B7:C5
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c3:bd:38:85:6e:d9:53:0d:7f:a3:f3:86:6a:79:c5:ed:85:
b8:1b:3d:5e:3c:bd:88:42:3f:59:9e:1b:84:30:7f:8c:e3:e0:
5a:c0:e5:95:e6:85:1a:8b:64:ff:0f:99:c1:59:7f:3f:74:36:
94:2e:dc:47:8b:9c:2f:5b:cc:97:93:7a:56:5b:9a:cb:ce:75:
ef:fc:90:69:be:89:03:0e:ab:31:d0:7f:e1:ef:e5:fc:20:b8:
b3:b2:25:3f:5a:0c:e9:5a:c4:c2:43:92:59:2b:ce:12:4c:37:
01:9e:b7:01:cc:30:6b:2d:c5:f6:6d:da:03:73:84:18:16:75:
80:0c:a2:54:b8:4e:44:d7:ec:0e:ca:a1:55:0b:80:b8:68:4c:
8d:b8:8d:01:51:21:f8:75:b9:e3:14:c6:35:9c:62:d5:62:46:
9f:ac:d4:b1:79:8d:8b:fe:b8:16:d6:de:89:ad:d6:76:15:5d:
05:46:08:21:4b:cd:2c:a6:6c:96:0f:ba:d0:f8:7a:2d:77:6e:
fa:c4:27:af:37:60:18:db:95:61:ed:08:8c:b4:19:50:68:2d:
d9:03:07:9a:64:38:ac:18:9b:89:e4:f9:62:dd:52:5e:fe:d9:
8f:14:64:cc:be:4c:d1:6e:6c:13:58:f7:6b:d5:21:d2:1f:4a:
7f:6a:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:01 2026 by rpki-client