Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: Y4AIHXNjbMZxA07O87RnvN7P90D6gdsBzCW+ZS3IT90=
Subject key identifier: 48:9A:F2:DC:55:A5:54:94:70:A0:06:9B:A8:A7:A7:21:9E:3D:8A:33
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 019D98BDF163DA9262EA4AC78C7A9D764B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 00:01:18 +0000
Manifest this update: Fri 17 Apr 2026 00:01:18 +0000
Manifest next update: Sat 18 Apr 2026 00:01:18 +0000
Files and hashes: 1: 8ncEIlz1-5zSR1QhL0rDdEkpqI4.roa (hash: nuQfSOfvY6zkx/iP7wr0MpQfCSukhDWy8/9CULyV7C4=)
2: IvA9B2nFsUB8N2tSxI1Z1owm5SY.asa (hash: Luu+iEJI9TF5mINkPbC0AuUUy8TwF281MV1BlQU5AFk=)
3: MhAe01ZmLmGIo1FB00FAZblkwBo.asa (hash: aUcLI++76yd3mnnAy6xNFCz8PJWqoY+FNcByDh9aH0o=)
4: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: 6LiPWXg8tnG5jx/64BwvdfBNfCLTxe4E4ZlWaLCBQ2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f1:63:da:92:62:ea:4a:c7:8c:7a:9d:76:4b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Apr 17 00:01:18 2026 GMT
Not After : Apr 18 00:01:18 2026 GMT
Subject: CN=489af2dc55a5549470a0069ba8a7a7219e3d8a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:e5:14:0b:d8:05:6f:f4:9b:e6:e3:a2:31:
12:63:b1:c6:4a:fc:1c:3c:3f:40:70:00:b1:f7:29:
ef:d6:ba:51:1f:b5:50:7a:de:3c:0b:03:88:ab:05:
27:b5:52:2b:53:89:b2:1d:82:c4:f1:c4:02:f7:a5:
64:6c:b7:17:f7:67:a5:9d:37:69:1f:6e:a2:8e:0c:
71:34:1a:06:11:cd:9e:52:48:53:cd:8b:e3:93:db:
ca:41:3e:a8:3f:08:fa:ef:10:0a:a0:a8:41:a5:cd:
70:9a:46:95:bc:03:37:9f:ad:1b:8c:4a:f6:7b:4c:
c0:19:e1:5a:0a:bc:6c:9a:a2:4c:79:5e:a9:47:f3:
d3:d8:12:6c:aa:1a:63:f3:20:ca:b1:b2:9b:52:2d:
b9:65:08:ba:18:57:22:d5:73:00:48:28:ce:1f:62:
ac:71:2e:7e:62:9d:1c:f3:ee:42:3b:1f:96:1f:04:
cd:88:48:ac:43:24:f7:59:67:a8:11:ee:dc:8c:cf:
13:aa:51:ed:5b:db:d2:c5:50:8c:57:c6:c0:c2:79:
72:14:ae:45:67:d4:b0:8f:3c:2a:b3:20:5b:7c:ec:
6d:a2:0b:c7:08:bd:47:a2:c0:35:bc:63:d2:db:cc:
5c:91:b8:99:82:45:a8:e7:07:b6:74:ea:1f:55:f9:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9A:F2:DC:55:A5:54:94:70:A0:06:9B:A8:A7:A7:21:9E:3D:8A:33
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b9:32:cb:45:ab:d9:62:78:ce:04:f9:43:b5:77:ec:bb:3e:
ff:fb:03:fe:f5:d9:5b:39:53:d3:48:84:bc:2d:64:1d:a5:cb:
e0:f8:2e:a4:56:0c:d1:97:e2:1c:ef:2a:1a:47:1e:83:5f:2c:
a6:27:88:05:47:53:b7:45:98:d2:9f:42:39:43:92:d1:34:7c:
89:92:2b:d9:75:ae:0f:96:27:95:27:10:4b:89:81:80:10:76:
7e:99:37:13:40:ff:fe:03:dd:08:34:5c:74:4f:fc:d8:b1:f8:
33:d6:16:ac:9d:ee:b6:a8:44:d7:84:dc:ef:a6:77:4a:97:05:
be:19:7b:f6:db:ba:a0:f1:74:3c:a1:c0:c0:cf:80:91:c9:3a:
87:d4:31:0e:1c:b4:19:f5:36:56:1c:b0:51:5a:51:bf:04:97:
95:b4:84:f5:e4:a0:7a:f1:32:72:d1:90:61:94:58:0d:6b:f3:
e3:39:08:23:ec:91:ca:e1:43:8c:5d:03:c3:ab:51:01:eb:f8:
41:ab:b0:ee:f2:93:7b:6d:db:a0:a5:b3:83:dd:33:8c:07:5f:
87:52:74:e0:00:0b:c9:f6:a6:2a:b5:ad:72:54:f3:24:7a:8f:
35:e8:d0:6c:44:37:a4:0f:6f:fc:ad:40:8b:ec:19:52:33:89:
51:c2:75:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:44:57 2026 by rpki-client