Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File: lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier: mcAgpS7yws7kOe+NurJIk+JIPnrwLII3fAVdBYsd87Y=
Subject key identifier: 77:5C:72:F6:70:26:EE:73:8D:A8:4A:10:86:A8:28:AF:74:C9:C6:19
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer: /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial: 019D98F4B8542529F5F4F38C8DCE57F786FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 01:01:07 +0000
Manifest this update: Fri 17 Apr 2026 01:01:07 +0000
Manifest next update: Sat 18 Apr 2026 01:01:07 +0000
Files and hashes: 1: KuYHIDTT0pfrZb69d41RvniDU3w.roa (hash: pzsXiQ0yFpyoB+XjLaUAL8JPW4YObE6pxPQc+E3xZNQ=)
2: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: kvRNOIVPi3bpNK2ax0j557sqeuxlKeFUCM5MRzq2aqU=)
3: vKZmJ0jDQuc8fHx1GoSSQ_umesg.roa (hash: aKqfhdTXupMXPlpBmxeTWXojTlpX9o9GLhhsywcjHYI=)
4: w1fI7tvPLN33WU2I9Rt_Z9orWcc.roa (hash: RojgiRAa+/JdbpS5f+RHbhZYfz5WfXhvE0D2UVq9ASc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b8:54:25:29:f5:f4:f3:8c:8d:ce:57:f7:86:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
Validity
Not Before: Apr 17 01:01:07 2026 GMT
Not After : Apr 18 01:01:07 2026 GMT
Subject: CN=775c72f67026ee738da84a1086a828af74c9c619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:ff:09:c5:5e:42:1d:72:4d:3f:0a:da:9d:
4a:6b:97:a9:de:d1:08:d8:f5:ce:cc:42:ca:2f:1a:
a9:17:ec:bf:b9:42:e0:59:6a:97:f4:43:de:0f:fc:
ae:6f:53:56:cc:70:ae:13:ff:b4:7a:e2:70:7d:17:
a5:6c:48:18:8e:dc:5c:34:8c:d1:47:9d:26:35:f1:
85:eb:1c:5e:55:9c:80:48:92:86:c5:d3:64:1b:ae:
f0:f8:2f:10:01:05:c4:72:5f:31:28:79:c2:49:3f:
0a:63:8e:55:df:dc:ae:2e:6b:61:d4:02:3e:3b:07:
36:de:6d:1e:6b:a6:24:27:74:90:a8:79:42:55:02:
2e:35:77:9d:fb:4e:a4:91:ef:4e:79:51:93:92:cb:
c4:6b:d3:06:db:3a:12:91:fb:1d:17:82:3e:fe:68:
0a:22:94:00:e1:c1:04:84:67:2b:68:c1:ac:3c:6e:
d1:c1:87:05:9b:52:f4:fa:43:06:85:a8:20:5f:8a:
94:70:41:01:53:3e:ab:bf:4f:dc:92:6e:e9:d9:a2:
9d:77:b2:70:f3:50:7e:6a:0e:c0:f6:78:7a:fa:a5:
79:3e:de:60:e6:d7:e8:5c:ef:29:0e:5f:b0:ee:d0:
03:f1:2a:36:2c:6b:c2:36:62:75:72:2c:f3:71:73:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5C:72:F6:70:26:EE:73:8D:A8:4A:10:86:A8:28:AF:74:C9:C6:19
X509v3 Authority Key Identifier:
keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:af:3c:84:37:5e:f6:9e:86:cb:bb:99:ee:66:dc:80:18:3e:
7b:4e:15:bf:92:19:45:ad:34:1a:a2:03:a6:1e:1f:27:0b:8f:
29:95:01:9b:99:6d:47:27:76:a1:15:d2:68:59:58:ee:5b:bf:
b0:15:3c:d5:71:de:5e:97:6d:3f:a9:67:44:8a:9b:ce:ce:c0:
db:54:17:15:80:a2:1e:ea:4e:5d:fa:d5:2a:8e:a8:94:e1:50:
ce:82:10:bf:c0:91:a5:06:48:9b:b8:09:a9:14:ff:31:2d:10:
fc:67:41:e8:83:38:72:8f:b3:ef:f0:b9:de:cb:4b:ba:4f:0d:
99:1b:47:d5:0f:db:4f:bd:97:1c:da:7c:c1:31:a6:d1:7c:7d:
8d:84:f5:34:e5:2f:0a:07:61:8e:54:59:ae:17:dd:36:f7:ca:
de:b8:5d:29:f5:1b:45:c3:7b:f2:98:20:a1:94:c6:33:ba:3e:
a4:a4:be:13:5f:dc:3f:9c:35:2a:f6:46:a7:2d:49:23:42:f2:
de:7a:bd:4a:8f:5d:ce:5a:30:29:2f:f0:88:d5:f0:ed:7c:fc:
50:72:26:f9:0a:b8:b8:c1:56:6c:16:fd:e8:f2:99:37:d3:0b:
5c:b8:76:96:a4:0f:81:dd:52:9d:9a:48:05:03:eb:11:b3:74:
03:3e:14:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:52 2026 by rpki-client