Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
File: ypyYDqoWFBtcSBXGOJyiWz8u13w.mft (raw, json)
Hash identifier: cwdSrxBoelVC5TTThbjLNdsU/qeAVwrI7oEMNO5eYZQ=
Subject key identifier: 9F:16:18:6B:11:27:AD:DB:7F:C0:92:54:E2:FB:62:5D:E9:C6:44:71
Authority key identifier: CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
Certificate issuer: /CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Certificate serial: 019D9A3EBBFD22B99F2A69D0D3E221EA9C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:35 +0000
Manifest this update: Fri 17 Apr 2026 07:01:35 +0000
Manifest next update: Sat 18 Apr 2026 07:01:35 +0000
Files and hashes: 1: AbBA99jT8eQOwVRDlfvpJvgpbPo.roa (hash: STn2llVbUbpZKFu8EoltWnBFEcnPCMGc/9TugXrP4cw=)
2: ypyYDqoWFBtcSBXGOJyiWz8u13w.crl (hash: Kd8tG/kZrPosf3EMLI9yRCWdFWUiMxhgrIo3ut1ib+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:bb:fd:22:b9:9f:2a:69:d0:d3:e2:21:ea:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9c980eaa16141b5c4815c6389ca25b3f2ed77c
Validity
Not Before: Apr 17 07:01:35 2026 GMT
Not After : Apr 18 07:01:35 2026 GMT
Subject: CN=9f16186b1127addb7fc09254e2fb625de9c64471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:a9:6c:70:19:e3:5d:d5:5c:ad:4c:c2:40:
e5:41:ca:32:42:63:9c:d2:9a:05:bb:45:94:0b:87:
ba:38:f0:e2:a7:3e:58:e9:93:25:9c:b3:72:30:02:
31:37:f1:3a:95:ab:ac:d9:52:fc:26:c6:5f:1f:2c:
60:72:d7:61:40:0c:6e:fc:1f:83:11:99:99:94:a3:
6b:56:9f:c1:10:9b:43:ec:72:89:89:eb:03:5a:f9:
9b:51:d6:2b:74:a6:be:78:8f:6e:50:d6:3c:62:bd:
b0:24:b5:f0:12:bb:9a:c1:84:01:08:58:8f:e4:ff:
68:dd:16:41:ef:eb:8a:27:75:aa:48:44:ce:ea:f3:
61:65:24:50:58:09:e9:d4:22:32:36:04:55:28:1d:
eb:da:79:8f:b6:26:b4:1c:4f:48:a5:4e:dc:2f:5a:
b2:df:85:fe:b8:f1:e4:0a:02:42:47:37:c0:88:78:
34:86:a2:df:60:fb:98:28:93:d2:62:00:b1:e5:78:
9f:1b:e0:ce:5d:5b:af:90:6e:d3:54:b9:6e:19:ec:
af:39:a6:0b:72:b3:63:83:fd:67:8c:e9:25:65:9a:
7d:d2:73:ff:c5:f4:71:c2:49:cc:9c:43:84:75:3c:
5b:8f:a7:06:87:0b:e2:88:69:9f:40:3a:b9:90:ec:
e4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:18:6B:11:27:AD:DB:7F:C0:92:54:E2:FB:62:5D:E9:C6:44:71
X509v3 Authority Key Identifier:
keyid:CA:9C:98:0E:AA:16:14:1B:5C:48:15:C6:38:9C:A2:5B:3F:2E:D7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypyYDqoWFBtcSBXGOJyiWz8u13w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c981c-657c-45be-bff6-be5e050b00f0/1/ypyYDqoWFBtcSBXGOJyiWz8u13w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f8:18:d0:2f:82:99:34:6c:4d:df:62:21:49:20:5d:87:a3:
b3:61:ea:83:99:06:06:00:61:6d:8b:6a:01:3a:6e:58:c1:77:
0f:1c:c6:dd:03:a2:ba:b9:bc:b6:0c:2f:e3:94:95:99:a8:a2:
aa:86:66:23:6f:99:b6:7d:54:e0:f9:11:64:13:7d:27:c0:24:
86:bc:80:a2:db:b6:f9:22:6d:44:05:81:ad:cb:51:9e:75:c2:
3d:a2:53:bc:88:06:1b:99:24:de:d7:27:db:39:4f:fe:5f:94:
a7:de:b6:fb:17:21:71:3a:49:30:1a:46:7c:54:66:13:26:1b:
0d:a6:c5:c6:61:2a:33:dd:96:84:d7:48:de:2f:76:08:71:1d:
8d:e9:95:e1:2a:cf:26:8a:5f:5d:52:bf:3b:c1:69:fd:45:ed:
93:07:2b:cf:45:45:d7:e6:54:b6:42:09:fe:59:68:55:56:26:
f9:ac:51:96:58:e2:49:ea:36:7a:d3:82:83:47:bf:09:13:04:
b1:85:c7:97:f5:08:8d:ed:ca:00:8f:7e:d4:d1:df:e1:cd:55:
43:5b:a1:a1:f2:37:ac:df:0f:50:53:5b:ec:22:c7:d1:1d:c9:
f2:c3:06:8f:cc:64:b8:da:df:8d:70:fb:a6:fb:85:7d:67:6c:
fe:44:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:25 2026 by rpki-client