Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: /3cKeoat94pk54NCGL92osP04uAVQmiVewViqhLeZf8=
Subject key identifier: A3:DB:59:30:30:77:2B:98:45:A8:FB:36:E7:17:F3:44:03:5B:9D:3F
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019DCC072F117600BF92243632CFA3FF0DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 13BC
Signing time: Sun 26 Apr 2026 23:01:55 +0000
Manifest this update: Sun 26 Apr 2026 23:01:55 +0000
Manifest next update: Mon 27 Apr 2026 23:01:55 +0000
Files and hashes: 1: 1k7VTB7SeldaLWRNqkcJf8z7HHw.roa (hash: 3oiTUkjmYdO5UbIwN8Ds5tNRJC/IkTwk80H4gmRZk9M=)
2: RrLny5U_ijBVCGnLCvuUJJ18m5s.roa (hash: bpv8Zff7lwgvln+/BYJURzEncDhJwqT1vkhDlSV1O1g=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: EyDSsEnCFJdQwf6HMMqgXoa4RuoSNqPwuF58hb0i2gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:07:2f:11:76:00:bf:92:24:36:32:cf:a3:ff:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Apr 26 23:01:55 2026 GMT
Not After : Apr 27 23:01:55 2026 GMT
Subject: CN=a3db593030772b9845a8fb36e717f344035b9d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:82:9f:18:d8:53:67:e9:08:22:5d:14:d0:0f:
af:91:b5:73:92:15:62:68:49:2d:45:5a:9c:55:77:
b5:27:ca:a2:d0:a6:82:24:5e:ba:09:77:71:43:11:
54:fe:7f:35:1d:be:db:31:54:c2:54:ed:09:d2:68:
8b:60:c6:aa:52:06:d1:aa:3b:0e:bb:95:a9:1c:98:
41:bc:da:41:78:aa:9c:91:e9:b7:3c:c9:15:30:c7:
f3:7c:5f:49:3e:4e:54:fe:5e:1f:2c:06:81:61:fc:
6f:70:b9:8b:87:90:03:59:8b:02:1e:d9:5a:41:3c:
cf:58:66:1b:d2:9b:18:54:c9:67:5f:d3:18:39:ad:
71:f8:14:b5:2c:c2:a8:8f:09:e9:e0:0f:4c:b1:ab:
96:97:72:90:78:69:5a:75:43:d4:e1:ed:80:92:ca:
9f:f5:99:ff:3b:97:a7:11:83:5d:ca:a0:d8:c3:f9:
45:c6:65:7d:d2:9b:31:09:5f:dd:b4:71:cf:7a:55:
a9:c8:43:dd:f2:e4:80:f6:c4:67:ca:c5:49:40:bf:
70:c9:a4:f7:2d:35:71:64:55:79:86:32:78:40:52:
b9:15:9d:26:38:90:1a:1b:b0:52:db:37:38:41:d2:
0f:c1:78:12:7e:00:11:5c:7d:ab:cf:2a:ec:d0:63:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:59:30:30:77:2B:98:45:A8:FB:36:E7:17:F3:44:03:5B:9D:3F
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f4:60:3b:22:a0:26:b4:c0:0d:8b:86:d4:b0:22:b3:4d:6c:
ed:e4:35:a6:ed:f9:0b:df:c8:37:5e:f2:08:f5:e8:e3:c0:ef:
6c:bd:c4:2f:e3:70:a3:d4:da:a6:83:b1:ab:8a:95:ea:83:08:
b4:a2:17:6b:70:bd:61:33:66:a2:99:2f:e1:71:0f:7a:c7:33:
fe:53:30:42:0e:61:81:00:9c:ad:82:29:a5:0b:a1:38:38:b8:
df:13:f3:8b:8d:3f:7f:5a:08:f7:50:90:90:54:24:1c:15:e2:
bf:a3:6e:36:be:60:64:47:5a:a5:6b:98:c6:b3:0d:49:10:84:
b1:7f:73:7c:13:bc:2c:d6:fc:fa:17:c2:1d:46:5a:7e:97:2c:
5f:85:12:3e:12:ed:67:a3:e1:ae:37:3c:20:47:0a:ea:0b:68:
33:e8:5a:c4:cf:95:99:8f:e3:fc:70:66:12:8f:43:9d:6c:79:
b2:74:40:09:cd:79:31:d6:d2:e0:85:ab:d9:69:30:de:8a:b0:
36:73:86:c3:dc:9c:96:4c:34:9a:f5:f4:cb:79:fa:44:55:72:
63:e4:91:fc:80:1a:5a:74:84:88:e3:8b:4e:03:45:ab:b2:26:
47:18:bf:22:56:85:bb:bd:0e:3f:da:25:30:11:46:5a:c1:1f:
e2:db:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:32 2026 by rpki-client