Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
File: yl4-xakGI8y5d4TTzvJCEqMcuvE.mft (raw, json)
Hash identifier: 7cSDgqdAnJBNVBxPoIyp2g0nb3zseJ4hOT1iba+Py6c=
Subject key identifier: AD:2C:BD:56:B9:CC:76:C2:1E:04:8C:7F:AF:3F:80:BF:2D:A0:25:58
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019D99CFDC2020AE8F93679BF4BB37137E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:00:29 +0000
Manifest this update: Fri 17 Apr 2026 05:00:29 +0000
Manifest next update: Sat 18 Apr 2026 05:00:29 +0000
Files and hashes: 1: Yo0ULWlGFniFl0kRIQzZJN8mg9o.roa (hash: j8hGB111jdt0RcgrUrjkuMAFRhv/pdlUdsj0AvFMkmM=)
2: jioszf8WkcygR-sUCmeQ22hRJBQ.roa (hash: GlPRmHwlYfAxgr1RqMrlQqRp2B9t9+qwJKez8uOIIxI=)
3: yl4-xakGI8y5d4TTzvJCEqMcuvE.crl (hash: DO7qQp5auo2lkI4jTA+0E/d2J7hvj17pLY2HCXaTU4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:dc:20:20:ae:8f:93:67:9b:f4:bb:37:13:7e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Apr 17 05:00:29 2026 GMT
Not After : Apr 18 05:00:29 2026 GMT
Subject: CN=ad2cbd56b9cc76c21e048c7faf3f80bf2da02558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:41:d2:f0:97:41:92:6f:5e:50:ce:32:1b:
70:97:1d:9c:72:df:7e:8a:d3:2f:e1:a0:12:95:f4:
a3:31:37:94:ae:5e:02:61:7b:71:c8:0a:db:7b:de:
eb:ed:3f:f4:4f:90:be:ad:f7:9b:97:ae:dd:79:ff:
b2:a5:71:b9:29:2b:d8:f1:b6:c7:f4:c0:46:0f:ae:
f0:28:f5:76:23:2a:ad:e9:b9:b2:25:28:f9:c1:9d:
40:9e:2f:32:5f:a9:0c:2d:d8:c2:f0:2d:d1:fb:b0:
e3:50:b6:82:ca:39:ae:81:7e:06:96:ab:46:d9:6f:
6f:e9:41:ae:c5:10:e4:8b:66:cc:63:2c:60:e9:0b:
3b:9b:8c:47:a5:fa:0b:39:42:51:61:3a:19:1e:f6:
54:3e:7c:b4:b3:d2:74:41:0b:4c:a6:f3:37:43:b4:
e4:07:77:e3:59:26:f8:3b:04:87:fb:43:4d:13:e7:
7f:21:85:07:3b:69:31:3d:96:1d:3c:be:ee:81:ce:
5f:f3:bd:07:76:a5:4a:f0:66:6b:cb:ef:ad:7d:73:
11:5d:46:57:58:68:b5:26:cc:e8:e1:ff:6a:cd:70:
d6:07:46:63:12:96:0b:a2:22:70:3c:fb:5c:fa:72:
e8:9f:8d:eb:2a:48:cb:06:0c:69:49:a8:26:31:47:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:BD:56:B9:CC:76:C2:1E:04:8C:7F:AF:3F:80:BF:2D:A0:25:58
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8e:80:b9:7d:ca:08:34:38:b9:8e:ce:6c:9c:d6:11:ae:e6:
f4:cd:bb:22:c1:82:ea:7c:68:22:bf:21:2f:b6:ac:e2:75:93:
89:58:20:27:1f:1c:17:d5:2e:13:36:f6:5e:b3:79:dc:f2:d2:
4e:45:e1:ad:1e:1a:0d:69:bb:5b:b6:4b:4a:50:d0:03:9d:de:
f0:27:75:f4:31:92:e4:68:4b:f2:e3:1f:a8:d1:ba:02:5f:50:
a4:d8:0e:04:3b:80:ef:12:93:e1:84:f5:27:4a:81:08:80:8b:
d0:55:4e:dc:a2:27:91:69:b2:7d:9c:92:3e:9b:dc:7d:84:22:
38:5f:7a:a0:19:69:c4:de:8a:be:3c:af:4d:20:b5:af:a0:83:
37:89:5b:94:80:06:cf:69:c5:27:4d:84:fd:91:ae:0a:b2:41:
cf:13:4a:b6:46:4c:fd:0f:70:21:3e:e8:b7:4e:f4:67:4c:cb:
b7:70:e5:32:2a:43:76:bc:dd:4c:58:f1:3d:fe:f9:18:64:09:
74:a2:e7:c2:b5:a3:5e:d3:e6:8b:b0:be:dc:da:b4:65:06:89:
b9:db:c9:65:18:37:ab:c9:57:1b:a5:60:55:36:d9:2b:59:e8:
29:63:54:dd:f6:98:6b:ff:7b:de:b8:6a:cf:d1:4b:d9:85:ab:
c7:e7:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:04:20 2026 by rpki-client