Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File: i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier: KFi3O77FqVtOZLQi7JFsPpYy2siNkR8vb7FBhLYY9kY=
Subject key identifier: 87:F7:F4:5E:51:CF:73:FF:47:02:E6:DA:24:ED:11:9A:A6:5F:EE:E7
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial: 019D67D10001FC8480BC4B590B9BF353B744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number: 18AA
Signing time: Tue 07 Apr 2026 12:00:43 +0000
Manifest this update: Tue 07 Apr 2026 12:00:43 +0000
Manifest next update: Wed 08 Apr 2026 12:00:43 +0000
Files and hashes: 1: 3fmRvkperMmvyU4KqpsUtOxTyt4.roa (hash: 7eZzl4W/3A8ZztuV2lmxwvx6VP7+Qvs+/fsXhTjc0rc=)
2: 7Tcz0pE1-IDNMp7AQ99DVCGrgjI.roa (hash: IYa4nqDQg0w4fOWwfwmQezvrBABwOK7SbfWTarCYxSQ=)
3: 7W1NXgkMSkIdBVSG746iQwH_IUI.roa (hash: 8/Z+GxzPEApZfT9MVxqAMLn34ihqPk9rP7wFg/FqfLU=)
4: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (hash: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao=)
5: Ljk83VCvMFaaB88IfYzmXG7UKBY.roa (hash: f8wXBBWZbB++s5ojWl86XJPa1ZQ8YeSsSho2itzHWeE=)
6: MVvq6Rgk9g4xb6udrHASJS9rhUU.roa (hash: M5I2tbJMcYnMo8jDDImO8+z5cJdQDV2EBlWZ+aqbq4Q=)
7: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: EpBsJPtz0p6bPvAk8b5dQfjJL8u2pu3C9vaP0lQaEZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:d1:00:01:fc:84:80:bc:4b:59:0b:9b:f3:53:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Validity
Not Before: Apr 7 12:00:43 2026 GMT
Not After : Apr 8 12:00:43 2026 GMT
Subject: CN=87f7f45e51cf73ff4702e6da24ed119aa65feee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:4c:d6:99:16:0e:e1:e1:44:1e:42:3c:89:
90:33:a5:e3:66:cc:4c:2d:e2:89:12:ea:63:99:f2:
dd:5e:f7:fa:d8:fe:49:6d:87:06:d7:ab:b3:b7:0a:
11:02:a9:b3:81:39:be:34:ed:2f:f1:03:56:2b:86:
d2:d1:c7:88:97:ea:30:94:94:50:71:08:44:52:39:
00:19:d2:12:12:cd:b3:80:13:21:d3:77:a8:c8:25:
68:d1:f7:68:03:8d:96:e4:45:03:30:c7:ef:10:c9:
dc:b3:fc:6c:42:16:13:ab:63:31:32:00:68:4c:0b:
7f:2b:ff:3e:0a:69:c3:71:5d:49:9b:d8:7c:c7:8c:
a6:50:16:05:10:a4:2d:b4:dd:4d:47:a6:3f:07:30:
97:55:ac:b4:e2:cf:a0:31:a0:ca:f1:3f:d7:66:5a:
88:64:cc:14:83:98:40:46:0c:73:9e:0f:dd:8e:62:
c2:c5:0c:51:d2:89:5f:ce:5f:37:42:02:02:c9:0d:
07:95:66:7e:f9:ac:e8:a6:27:35:72:c3:19:93:40:
a6:33:41:9f:30:78:80:c8:da:ff:14:14:38:cf:3a:
36:ee:ed:e2:f3:a7:5b:5d:0a:45:74:42:37:cd:37:
d3:76:96:71:40:e5:db:0e:29:79:5e:73:af:38:a9:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F7:F4:5E:51:CF:73:FF:47:02:E6:DA:24:ED:11:9A:A6:5F:EE:E7
X509v3 Authority Key Identifier:
keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:23:b7:5b:b5:53:88:2a:57:eb:67:f1:6b:a2:bc:64:ba:17:
1d:15:2f:20:8d:71:c5:a7:99:79:dd:47:f8:34:f4:fe:f9:66:
d6:58:7e:34:d5:59:40:06:58:6b:2b:06:77:dc:d1:ff:dd:5f:
3d:2f:fc:89:8d:5a:18:6e:77:b2:c3:69:d0:89:14:84:c0:fd:
10:f5:e0:48:c8:a6:2e:37:9f:5e:92:03:d4:e6:21:27:35:57:
12:db:44:95:fe:0c:3e:b2:d6:c6:20:0e:d4:54:54:9b:29:60:
16:24:54:14:88:b1:5e:04:40:14:fe:79:08:3f:60:a9:b7:7c:
75:2d:31:85:db:dc:cf:a3:9f:b4:dc:62:2e:de:f2:f3:bc:0c:
00:88:80:70:76:ff:11:5b:4e:b1:9d:fc:11:f9:ed:14:98:e8:
81:b0:fe:d4:a5:90:ea:4d:55:ac:17:51:12:59:7c:15:f0:d3:
43:e3:e7:0a:67:e9:7a:4a:17:02:de:83:a0:62:2e:62:98:95:
cf:b7:03:5e:60:7d:4d:48:81:61:ec:c9:8c:1b:f7:1b:47:be:
a1:e9:f1:c4:db:50:68:01:43:6a:6b:29:cb:4c:30:9b:7e:8a:
8a:55:73:bf:cc:8c:f1:f8:d9:4a:ab:98:cf:3e:1b:0f:ed:d8:
9b:1b:3a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:55:52 2026 by rpki-client