Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
File: y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft (raw, json)
Hash identifier: cZDer1AVd4g5rupZLx4w6YyhS5I9rStrbaX2H3GnRwg=
Subject key identifier: D7:AC:11:E1:D6:01:01:69:99:08:84:1E:46:4E:AC:B0:7E:E2:FD:99
Authority key identifier: CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
Certificate issuer: /CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Certificate serial: 019DA3AF525F1E2B8768947FAAA1AC902E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 03:01:09 +0000
Manifest this update: Sun 19 Apr 2026 03:01:09 +0000
Manifest next update: Mon 20 Apr 2026 03:01:09 +0000
Files and hashes: 1: QPQtrPAdzjVTLUIL1R2LDnfS2LA.roa (hash: Y2kjypGDHo8r5S3vGzyX8p4vjhzMXiKa35ThvxEKdFQ=)
2: y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl (hash: aF/Y0FlCZgfnGraboVZgMmJcthTvc/iQFkCcFiw9DYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:52:5f:1e:2b:87:68:94:7f:aa:a1:ac:90:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb95e1cbc67e782dbf9f8e744e437268bdcc39ce
Validity
Not Before: Apr 19 03:01:09 2026 GMT
Not After : Apr 20 03:01:09 2026 GMT
Subject: CN=d7ac11e1d60101699908841e464eacb07ee2fd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:24:cd:c9:85:f8:86:e8:57:71:52:4b:29:
4f:f6:4a:9e:97:2a:35:92:e5:c1:0b:43:54:4a:47:
f7:4a:bc:dc:e4:8a:3e:a6:0e:2d:d0:e3:e6:a8:40:
b6:11:ef:e8:5e:8b:8f:1c:93:f9:45:92:c0:9e:ad:
53:f4:b9:3b:35:ce:58:7f:72:cf:f9:20:51:74:7c:
b1:83:0a:d3:5c:3c:58:c4:40:f5:2e:1a:43:da:0c:
84:27:72:3c:21:c7:23:79:3b:2d:79:54:4a:89:b5:
1b:cc:1f:9f:e2:5e:1f:01:2e:80:11:c7:8b:b9:9b:
3f:69:a6:1a:16:21:e4:12:fa:a2:39:65:38:cc:f3:
c5:24:9d:16:86:17:86:0a:80:6e:5e:4b:fe:34:82:
29:38:95:14:c8:62:04:54:16:08:fb:ef:7d:c8:c6:
ec:87:66:1a:fb:de:da:26:f9:cd:7c:a9:4d:6a:64:
8f:e4:3d:80:f2:3f:43:bf:bc:74:44:25:9f:35:c7:
43:65:13:39:d6:b1:3e:2e:6c:68:06:21:65:73:54:
aa:3c:8a:f2:bd:9b:84:15:e4:37:42:91:75:d5:71:
03:12:6f:6a:9a:6b:4b:f8:f3:c8:9c:23:0e:93:cd:
f8:57:21:cf:36:f5:77:a1:6f:4c:e1:74:4a:4a:b6:
1d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:11:E1:D6:01:01:69:99:08:84:1E:46:4E:AC:B0:7E:E2:FD:99
X509v3 Authority Key Identifier:
keyid:CB:95:E1:CB:C6:7E:78:2D:BF:9F:8E:74:4E:43:72:68:BD:CC:39:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5Xhy8Z-eC2_n450TkNyaL3MOc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/73e00f-e3e3-4d23-ad6b-76682e794cc3/1/y5Xhy8Z-eC2_n450TkNyaL3MOc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f8:a6:c7:28:3c:a4:31:6a:5d:d1:ae:80:17:6e:ce:9f:a5:
de:4b:ad:f1:d8:4a:98:16:6d:72:db:57:33:96:96:88:ae:1b:
88:07:78:44:b0:39:19:23:19:3c:fc:eb:39:bc:63:8d:7f:cf:
36:87:c2:01:75:55:08:58:f3:67:1f:43:58:77:8e:a2:3c:43:
83:34:86:d7:d4:7b:03:88:a2:c1:4b:c5:7b:93:9a:55:4a:14:
f1:cc:35:0c:11:2a:d3:0f:89:5e:a6:02:b9:cf:a3:bf:00:83:
f5:36:f1:12:7e:79:d3:ae:c5:93:95:aa:e3:75:e9:ed:ef:22:
12:28:c0:19:b5:9e:d1:ff:19:e7:44:ee:86:a8:2b:25:a8:6f:
46:ca:57:1d:77:81:c7:4b:8b:dc:b4:0d:77:f0:f7:72:11:24:
75:c1:72:7f:fb:5b:03:db:8c:db:e2:b7:56:0e:51:06:94:fb:
8a:f5:e3:95:ea:8c:ad:c8:b9:89:71:35:81:22:69:1a:fa:dc:
13:fc:ae:48:53:e3:b5:37:92:87:ca:61:38:b8:ea:17:97:82:
bf:c2:cc:df:cf:06:81:1b:23:72:a5:98:ec:9e:e8:ed:6a:33:
f1:6a:68:93:7f:a1:56:58:8f:84:87:0d:bf:28:03:29:9b:89:
e7:8b:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:53 2026 by rpki-client