Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: L2EGjFeQc0sSxKaO/iJomnoSuKIyBgSw+NYSJL4Q6is=
Subject key identifier: 4F:99:BF:B5:3B:4D:B1:09:24:4A:FF:91:59:49:12:A2:0C:C8:FF:6F
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019D992B7330C99DB8E2D1382D2DE9677335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 18FF
Signing time: Fri 17 Apr 2026 02:00:54 +0000
Manifest this update: Fri 17 Apr 2026 02:00:54 +0000
Manifest next update: Sat 18 Apr 2026 02:00:54 +0000
Files and hashes: 1: Br8jDqLYrkaBjiJL6wr8w6b0avs.roa (hash: W7Sv+CJ6euSWOJRS/NssioWUOsmXYLBpEHMl3h7F400=)
2: DOQ8AlxWLE2vY7KBlqArp_D5uNk.roa (hash: v0cgDIGN25wK3dPZkNRB0dnbjCCauMeW+83WdAY4Puo=)
3: X4D9lHTk8PnxZTblZAtVaE1dNQQ.roa (hash: 6uloBsTlbb42wmCR8mdc3PElXKD6suKGJ+NWpe9F6Hc=)
4: khJQh_gOJAhdH_kny7OeYEA7vpE.roa (hash: APga9Ti26SSiaeHSYmmvz0zsM85wvjZCduJHpw3sCos=)
5: mzjq_E9j-9cKk2TKoQGkLBC5u4Q.roa (hash: 2CE2j2LCoSSQcA7NTRzO1EXIEEufcX6KVxq3KWqXbTI=)
6: qoAheOHH9UlqCoE7XA-QfCZLxZw.roa (hash: VVjSLN2hXu/mswe8VPF+IlHQVMhQLF+wIH35GZEPXZ0=)
7: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: QnSx952evcYb6ET3fzjVKoxPG5TztL93vQ7NllwCNPo=)
8: xJ55egTi-SOwIls63DtlY0C_yhc.roa (hash: kC3zkfZ5rMjuoKk4EnSBPzpT5cCfNNDGdDzD8ejaa+g=)
9: yh54kqFVQkBUGD2L64gmg0WiwgQ.roa (hash: fbRZrlQ7uDmusRMcXTaTF8xAN1V4wdzB4QikocdzyJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:73:30:c9:9d:b8:e2:d1:38:2d:2d:e9:67:73:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Apr 17 02:00:54 2026 GMT
Not After : Apr 18 02:00:54 2026 GMT
Subject: CN=4f99bfb53b4db109244aff91594912a20cc8ff6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:79:ba:45:37:e5:5f:b9:84:dd:e3:7b:20:
a1:13:aa:4c:24:38:b9:12:07:f9:2c:6a:df:77:c6:
32:af:3a:79:15:c5:08:6f:3d:67:ac:21:76:90:80:
8f:5e:3d:90:08:8b:26:41:56:c7:55:7a:9a:d3:4c:
9c:c0:cc:b1:32:07:00:63:b5:22:b7:0d:a2:cb:55:
ba:00:55:ce:15:ba:3a:f4:1d:4a:58:32:21:d5:ec:
b0:37:31:e9:90:47:51:47:0b:82:5c:63:b8:a1:3a:
54:03:47:fc:ab:f6:30:7d:88:ee:8b:e3:5c:2d:08:
b0:39:6b:28:0c:78:6a:8c:35:25:e4:a1:3c:2f:05:
69:0d:51:1a:bc:50:31:2a:46:84:c1:3b:54:1b:0b:
df:03:62:37:02:6e:a6:df:ba:7e:84:5b:66:92:fc:
e5:b3:5f:23:0b:01:df:c7:74:37:7f:49:49:1b:ac:
53:01:f6:7f:6c:a0:52:2b:e4:a8:55:21:0d:29:99:
be:7d:52:f6:89:f3:07:e4:c7:92:cd:a1:0d:04:b2:
f5:f5:8d:91:5d:50:78:a2:45:2e:92:6a:4d:ad:cc:
4d:77:8e:da:d9:6e:a7:b7:dd:aa:c5:fa:37:7e:02:
24:dd:dc:a3:5d:55:da:da:c4:19:7c:6e:4e:5f:69:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:99:BF:B5:3B:4D:B1:09:24:4A:FF:91:59:49:12:A2:0C:C8:FF:6F
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ea:60:8c:4e:5f:4c:2e:87:f6:48:b8:10:1e:c0:f3:18:8b:
6a:33:b5:d3:86:0e:4b:90:9c:3a:8a:4f:c5:09:56:71:df:1f:
18:3f:25:75:c9:4b:3b:a2:b8:2f:6d:72:d5:79:8c:fa:74:9e:
e1:5e:73:e7:66:d6:13:78:dd:a0:89:74:6b:4e:6e:44:fd:9b:
5f:cf:4d:8f:63:e7:5e:77:fa:b4:cc:ee:4d:71:cb:fd:6d:39:
41:85:d1:ae:1d:40:1a:6e:e7:57:f5:24:49:37:3a:ec:21:8a:
88:c6:47:20:85:1e:4c:ec:2d:48:46:77:47:bd:a2:5d:06:2a:
9c:85:ba:ee:49:a3:8c:f2:62:ef:04:d3:d9:37:d3:23:15:d2:
80:a5:70:96:c3:77:05:98:73:96:e2:df:bb:60:c9:69:94:a6:
dc:d8:50:16:f8:f0:d9:83:80:0b:a6:aa:9f:ab:5f:c3:b0:aa:
b2:87:a4:7d:96:9d:7f:99:e1:32:12:67:c6:16:ac:fe:95:27:
aa:47:f9:ea:51:93:29:9a:52:8b:ff:d0:4d:d5:81:89:fd:84:
e5:0b:e4:7a:d4:07:16:0b:83:54:8c:0f:2a:b7:9c:70:34:16:
24:16:71:d5:a9:9b:d8:f2:40:41:3f:41:86:39:bb:1b:09:6a:
28:dc:a2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:58 2026 by rpki-client