Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
File: e-ykASv3tQVuLgoWHrRhiHbJESo.mft (raw, json)
Hash identifier: rcsc1WklVeIEtXnpnyi7vKW94soiowbyUloSlJ96AXc=
Subject key identifier: 95:81:B2:EF:96:73:D7:47:A2:2C:33:FD:AD:90:73:3D:65:D0:ED:ED
Authority key identifier: 7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
Certificate issuer: /CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Certificate serial: 019DA3E64FFCC3CAB2DEA043AF85D4A28C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 04:01:13 +0000
Manifest this update: Sun 19 Apr 2026 04:01:13 +0000
Manifest next update: Mon 20 Apr 2026 04:01:13 +0000
Files and hashes: 1: TrY6aUvOznEWPgwFCDr7RM2O3ms.roa (hash: DDvKuMgIkfq65IcNVG0b6/9Oq5NsQ98eHZFJJ6S6qiM=)
2: YddULzzqlHaijBKc45wV-2A9NRg.roa (hash: DJJK0mLKzBAwLMCbEIMtOEBhlQs/ecomUOMz09kFmzw=)
3: e-ykASv3tQVuLgoWHrRhiHbJESo.crl (hash: oHNtelq6+0jlloEXRYwT6V41Wj2nDmJW0auk9FWSRQs=)
4: g4nCWXK_03YbprQHpph4RAU5af4.roa (hash: bja30FhVlRyFoYSsgn4yCXyL+dT+/OEpibcb3uOS2oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:4f:fc:c3:ca:b2:de:a0:43:af:85:d4:a2:8c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beca4012bf7b5056e2e0a161eb4618876c9112a
Validity
Not Before: Apr 19 04:01:13 2026 GMT
Not After : Apr 20 04:01:13 2026 GMT
Subject: CN=9581b2ef9673d747a22c33fdad90733d65d0eded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:6f:cb:72:d0:30:90:aa:b2:8c:f2:b2:32:
13:71:f0:d5:5d:cc:62:5c:8c:2b:86:17:c6:3b:5b:
0d:4b:6e:e4:68:19:a5:e9:d0:b1:36:d0:4a:f2:53:
e1:c8:12:45:ee:98:b7:75:f0:42:50:5f:36:25:05:
62:b2:b6:58:81:80:9d:3a:4b:91:11:e0:b5:da:2d:
c2:43:f2:a1:4c:99:89:1c:2f:72:c3:c9:85:dc:b1:
94:d6:ab:f8:1f:e7:7f:62:f1:bc:e1:a6:e6:e8:ab:
8b:b2:ae:e9:38:f5:8f:f2:6a:f2:df:49:92:3e:f9:
a8:37:a8:2a:19:1c:93:8f:8f:58:a1:f6:4e:a1:b6:
c5:b9:16:84:8e:70:c6:26:70:80:94:a8:d8:1d:9d:
5c:94:2e:a1:92:34:f4:da:69:32:53:09:b0:64:d9:
12:8b:c3:f2:b4:3b:87:40:32:8e:36:be:65:dc:12:
aa:2c:df:4e:86:61:cf:53:72:ba:cb:08:87:a5:f0:
19:a5:f9:03:01:ec:2c:eb:49:57:a0:72:74:48:d1:
f8:98:d0:a3:e9:89:f8:a9:5e:52:8c:5b:de:d1:49:
80:2e:e1:6f:7d:68:24:6e:27:55:cf:be:7e:dd:1c:
b7:46:b1:a4:86:5c:a8:90:51:d2:e6:79:d8:38:c4:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:81:B2:EF:96:73:D7:47:A2:2C:33:FD:AD:90:73:3D:65:D0:ED:ED
X509v3 Authority Key Identifier:
keyid:7B:EC:A4:01:2B:F7:B5:05:6E:2E:0A:16:1E:B4:61:88:76:C9:11:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-ykASv3tQVuLgoWHrRhiHbJESo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/e-ykASv3tQVuLgoWHrRhiHbJESo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:05:ca:8e:da:2f:b8:05:f1:3d:25:53:24:95:91:e0:7e:58:
0c:07:a0:96:30:de:fb:63:c6:b3:8d:01:d8:e5:3d:7f:c5:f7:
3b:8b:92:79:ea:6d:93:55:53:b3:66:6d:42:05:29:ef:69:23:
68:1e:fb:19:b8:c7:4b:c0:be:20:30:0a:96:f0:9a:82:9d:1d:
87:d3:29:75:f4:b4:fb:fe:1a:cb:14:2d:76:9a:15:6f:d7:17:
15:1c:61:83:91:0d:ea:6e:a1:4b:e5:f3:a3:5a:c0:42:9c:a8:
2a:67:60:27:a7:b9:e7:d2:75:fd:63:c2:b4:81:a3:62:91:41:
0d:4d:e4:59:f0:2c:f9:00:4f:3f:4c:73:ca:ea:88:c2:38:49:
de:95:86:c6:a6:ba:4f:f6:ce:6f:56:24:36:84:ee:7c:8d:1a:
c7:d9:3b:8d:b0:1a:ff:a6:19:80:7a:cb:ea:3e:bc:bb:cd:42:
2a:f6:fc:92:6d:01:bd:6a:85:d3:94:97:13:82:2b:36:f4:57:
e8:8d:e1:45:d6:76:22:28:f4:1c:50:23:ec:19:e3:7b:4b:5b:
11:1a:11:74:ce:41:52:0a:07:49:6b:66:6f:cb:2a:d8:99:8d:
0b:10:44:fd:9a:78:50:0d:9c:6b:84:40:82:48:79:20:17:5c:
eb:f8:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:49 2026 by rpki-client