Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
File: y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft (raw, json)
Hash identifier: Gue36Iu4HM+nNovGTCh3aCM/+jScSyk0FGvaE7VnZSE=
Subject key identifier: 48:68:D9:D5:DB:08:F6:5C:DB:3A:E3:34:49:27:D2:E8:7E:66:70:56
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 019DA3787F95D2403F778790D0B4ED1488A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 02:01:16 +0000
Manifest this update: Sun 19 Apr 2026 02:01:16 +0000
Manifest next update: Mon 20 Apr 2026 02:01:16 +0000
Files and hashes: 1: 9tnMBfiIpNVErByTpvjDqn5wKbY.roa (hash: kOpNjJnS/Tt8SHMz9QLvG0L/TVTmkM0mNYtN/5t0qzc=)
2: VJaS-jYIuprV7YtO1DCuyd2g5wY.roa (hash: hL/BN/PlAs7Bgm3HIeGTv4CgOWk68zftN+8vu/Zh/Kk=)
3: eV_cnBLHExwM3HoFdmLAj8EL0dU.roa (hash: izY6q8vOLE3p/u7foQA9fiAmgnD5RtTMesu7+JH2h/0=)
4: n4s3R3iktWUGobIMBTVKacPInjg.roa (hash: XxvWTy0J0RZ/Rk3snkitBdW77lxKp2361BnvrzID/vE=)
5: qDwRi2lUn6QwtTVR74uQNIDyQDY.roa (hash: jR4Cc4WipI4p46sG0PogQImTneHDTqWPMtigJYRDeY8=)
6: y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl (hash: i0AINjjFMjna0Scq4yyms0wY+Mr5hBVvcVa/QtOJ9YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:7f:95:d2:40:3f:77:87:90:d0:b4:ed:14:88:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Apr 19 02:01:16 2026 GMT
Not After : Apr 20 02:01:16 2026 GMT
Subject: CN=4868d9d5db08f65cdb3ae3344927d2e87e667056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:54:23:c2:4d:08:f1:37:61:46:d8:12:18:
06:46:e4:80:70:ca:77:06:c5:8e:6e:98:03:84:ab:
e2:3a:4b:89:53:ad:7b:7f:6c:43:97:0f:65:9c:2e:
be:09:2d:af:f7:c9:d2:fc:6f:15:8e:83:1c:ed:ef:
c4:f1:40:42:79:ec:6c:98:34:7c:f1:e7:45:7e:5a:
bc:67:d1:82:fa:7a:52:14:c8:2d:85:c5:2d:6c:27:
d3:ed:0e:8d:9a:4b:0c:96:34:ba:62:92:28:09:7c:
27:51:98:e1:ff:22:69:b8:0a:66:8f:f7:30:da:62:
e0:43:eb:26:e0:38:2b:10:25:ec:20:5c:2f:29:c5:
4f:77:95:c7:27:41:64:5d:04:21:de:bb:1a:f0:e5:
8c:af:2d:fe:c8:78:59:b5:f7:d4:b4:6f:c5:db:75:
74:50:20:c7:64:e0:78:a4:a6:8b:76:4d:6d:5d:ff:
17:6c:cc:d9:ba:29:72:a8:1f:19:33:10:56:4b:1e:
76:a0:07:bb:a7:58:82:b1:67:78:dc:df:ca:96:51:
47:af:03:99:e4:9c:c9:dd:0d:0f:76:33:dd:f4:bc:
6f:da:d7:02:af:7d:9e:92:78:c2:a2:0a:b5:34:b9:
6b:a5:fe:e9:2f:c8:94:92:6c:df:2a:c4:cd:d1:64:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:68:D9:D5:DB:08:F6:5C:DB:3A:E3:34:49:27:D2:E8:7E:66:70:56
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:37:36:f2:69:8f:0f:ff:27:74:cc:c8:86:d2:d4:60:ca:9d:
64:ad:80:89:bd:a1:40:60:df:ba:09:78:f1:bd:f3:ba:ff:a2:
9c:c0:f0:17:71:66:6e:d9:1f:f0:ae:02:e8:ab:a0:27:da:61:
1d:7c:e9:1a:8e:ff:4f:b3:a8:45:b4:71:85:e2:3b:b9:b5:29:
be:55:c3:b9:bc:8f:fc:36:78:3f:73:23:c0:36:21:ab:6c:db:
91:da:74:50:6c:41:12:b7:f9:e9:7a:a4:05:76:ca:b7:29:95:
3a:4f:22:2a:97:de:52:39:ef:f8:d7:f2:f5:a8:9a:78:b8:7d:
8b:c4:00:0a:35:f5:26:7b:80:71:6f:5c:c9:11:60:94:e0:25:
41:df:24:f5:2d:0c:c0:ad:cb:ef:ce:a5:9a:b0:2f:e1:e7:d4:
7e:0b:52:ce:61:1c:20:d8:78:f0:d2:a1:43:47:d2:a5:36:0b:
9a:1e:03:7a:ce:9c:aa:10:40:5d:7f:17:ed:f3:76:5b:4b:b9:
bc:60:56:ce:08:b2:a2:b6:dc:d4:21:15:de:c8:e5:88:a0:b7:
de:01:a9:1b:29:55:5d:90:70:c8:e2:d7:52:c8:1c:38:f3:dc:
41:2a:6f:8b:e3:90:33:55:5c:52:43:d0:a6:ea:4e:df:c2:7a:
55:f8:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:11 2026 by rpki-client