Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: +9L1Mn8Wbg1B3NAmZ8L4f7LwggmxtOmS6Mdhb6l7g3Q=
Subject key identifier: D7:AF:21:D1:AA:6D:9B:B7:F2:E1:F5:E1:D7:02:DD:FB:19:71:55:3A
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019D99D009BCECAE062C3C706F6310200F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:00:41 +0000
Manifest this update: Fri 17 Apr 2026 05:00:41 +0000
Manifest next update: Sat 18 Apr 2026 05:00:41 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: wTXnWTv57pPOM5dNGh2x0RVcNUBdIBSibenOYJBeqHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:09:bc:ec:ae:06:2c:3c:70:6f:63:10:20:0f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Apr 17 05:00:41 2026 GMT
Not After : Apr 18 05:00:41 2026 GMT
Subject: CN=d7af21d1aa6d9bb7f2e1f5e1d702ddfb1971553a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:45:09:82:6d:ab:f8:e1:7b:5e:5f:1e:ef:
3b:27:8e:ee:3c:82:39:dd:24:81:ba:7b:35:e1:75:
d6:12:a7:66:76:7a:f1:d1:41:5e:9c:c4:2c:39:9b:
0c:71:c2:48:8e:4f:f0:0f:70:c6:d1:0b:1a:b0:63:
83:f9:62:a4:7d:97:20:75:f3:fd:3e:cd:6d:0c:81:
2d:4d:96:6e:13:88:bb:bd:e9:92:a7:e1:ef:09:6e:
f7:17:4e:16:68:01:9d:e4:9b:92:b7:a9:e8:ae:da:
2e:7c:ea:47:8e:f5:43:24:c4:25:dc:59:53:21:8c:
01:0f:d8:f8:23:05:f9:75:3b:98:5a:2b:0f:a4:24:
e8:5a:bc:48:1e:62:f7:cf:71:b3:ee:2f:4d:83:90:
83:22:60:d3:56:10:ca:66:ba:68:1b:9d:d0:6a:dd:
2a:0b:8b:a0:f5:81:90:f8:e3:79:5a:e6:c9:bc:89:
fd:8a:8d:7c:6d:e9:f0:ff:5f:1e:16:77:e1:80:28:
24:80:b9:bc:00:e5:8e:37:80:ba:ac:01:27:0f:ff:
df:94:de:8a:4e:a2:2d:49:ea:96:bd:72:62:60:59:
3d:d2:ee:10:92:ac:ab:5d:84:ae:0d:70:f4:78:4e:
ff:1b:10:27:d4:04:b0:a1:5b:a5:78:8d:b5:c7:99:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:21:D1:AA:6D:9B:B7:F2:E1:F5:E1:D7:02:DD:FB:19:71:55:3A
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2f:a8:8f:79:af:18:32:4e:0f:1f:19:f6:79:f7:95:86:42:
da:01:60:27:0d:a1:48:8a:8f:4b:b0:28:c3:36:bc:09:33:2f:
13:aa:5e:cd:a2:ac:fb:2d:51:07:5a:fe:e1:43:15:5c:b9:08:
a4:77:17:40:26:43:8c:45:b5:91:8d:be:ee:1e:16:24:19:33:
f8:c1:77:d7:31:10:9e:ec:c7:24:32:fe:ac:4c:09:ab:c5:0c:
ae:73:96:ad:da:0d:15:71:1d:58:15:3f:f5:a3:4d:e0:4a:fd:
d4:11:83:a0:3a:9f:61:35:0c:09:d1:90:87:4c:fe:1d:78:ce:
75:3a:c0:b6:6f:7d:91:7e:58:4e:ab:f1:c7:c7:64:36:cf:c9:
3b:33:6f:da:b1:d3:48:00:41:c5:5c:d0:28:3c:ba:02:2f:99:
2a:70:0f:2c:3a:65:53:2d:c1:c3:bd:4f:21:d1:3d:f7:ae:2d:
5f:57:47:99:98:9c:66:c3:f8:0e:5e:d1:ad:25:3a:99:3a:ee:
52:c8:87:7c:e4:06:9e:0e:2f:aa:51:69:45:b1:38:3f:ad:99:
a6:fc:90:0e:5e:a6:2a:ef:41:e6:4e:1c:83:39:02:ea:08:a6:
b8:8f:d4:ab:b9:74:35:45:81:41:0d:da:21:92:78:f5:96:da:
9b:32:5e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:14 2026 by rpki-client