Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
File: rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft (raw, json)
Hash identifier: GyIdG6NdlENURy3wzgEddQPwDCFlu1JnPkGRc0s3laA=
Subject key identifier: A5:EA:27:D2:19:A7:44:1B:DB:F8:A3:A7:64:C9:B8:2A:8A:38:42:8F
Authority key identifier: AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
Certificate issuer: /CN=ad80679b96ca322bfa85500cab206c6d47412edf
Certificate serial: 019DCF3E1770917622DB7186055528BB69C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
Manifest number: 18E6
Signing time: Mon 27 Apr 2026 14:00:46 +0000
Manifest this update: Mon 27 Apr 2026 14:00:46 +0000
Manifest next update: Tue 28 Apr 2026 14:00:46 +0000
Files and hashes: 1: 1DSUQ0jxs6dG0EoFqfG91mFQyMw.roa (hash: iINHWWjQ7Nsnh6T5r2HUf93qqcUOuSqMNkps61w8OX0=)
2: BdsuDRm80ULk9aLfJ7zh20INiU8.roa (hash: 0BqcT0T81e3M/0LPrL5e9ii3yguHiKnmLWj00gesJkU=)
3: KLak6E7XOaljYL7i0cSZlIlCEqg.roa (hash: mJGksFMnjfzfVrg/g8a4mJkgqFzUtmtGPX7OdhiTIDg=)
4: VSskXdqgKe7CaDWuoatQnI_9KiE.roa (hash: ZdbXSqyDrBgEKdzaBPZgWnFmAfBPFOOQn34nK2NZEnk=)
5: rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl (hash: 2Ou89dSAKXOFGywf4G6VjTyYvVaG0lfBZFiTyot9k8Y=)
6: vPgoZptW0KavIK_Hg1kzkfOF1WE.roa (hash: j7J2y1HSuKj72l6kVGUrAtD78gxcoUd5XdyBbZEybuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:3e:17:70:91:76:22:db:71:86:05:55:28:bb:69:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad80679b96ca322bfa85500cab206c6d47412edf
Validity
Not Before: Apr 27 14:00:46 2026 GMT
Not After : Apr 28 14:00:46 2026 GMT
Subject: CN=a5ea27d219a7441bdbf8a3a764c9b82a8a38428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:dd:ac:62:8a:7e:2c:6f:47:d1:dd:8c:ff:
aa:07:ab:9e:60:7b:4e:41:92:6e:bb:e1:0a:fa:0d:
17:82:92:49:1a:64:94:53:69:94:30:f0:63:25:56:
77:e3:e6:71:c8:20:2b:35:4f:96:6d:54:30:d7:a5:
fa:1f:2a:e5:50:f3:a1:36:d9:cb:6e:1e:64:f8:65:
4f:7f:34:bd:86:7f:ea:b6:78:56:38:05:b5:52:d5:
46:14:a6:a0:29:e1:84:a4:a4:2c:a1:ba:b2:58:03:
d2:8a:44:15:f3:3c:ce:ea:f2:4a:41:43:0e:c1:17:
bb:8e:34:11:a6:86:c8:e8:83:a2:8d:51:2a:a8:98:
9d:ce:35:93:fb:78:3e:03:07:7b:21:01:d5:50:90:
a5:56:39:eb:1e:83:29:f3:96:ca:2d:76:7e:b7:19:
50:58:7e:f5:a6:a5:da:1d:a8:ae:c0:3c:41:85:3c:
97:41:79:5c:84:b1:d0:15:43:95:9a:38:f9:2d:96:
81:59:04:2e:a2:80:c3:b9:88:41:8b:31:45:38:6e:
b2:a2:fe:20:82:45:aa:f2:e9:76:d2:9d:7b:8e:c2:
0c:bc:f9:cd:b7:c1:d9:0f:da:5b:31:86:7f:90:0c:
77:17:f0:53:53:36:f7:cd:31:aa:01:19:c0:57:a3:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EA:27:D2:19:A7:44:1B:DB:F8:A3:A7:64:C9:B8:2A:8A:38:42:8F
X509v3 Authority Key Identifier:
keyid:AD:80:67:9B:96:CA:32:2B:FA:85:50:0C:AB:20:6C:6D:47:41:2E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYBnm5bKMiv6hVAMqyBsbUdBLt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a1399a-ea6b-4a09-8b40-90c0bde09869/1/rYBnm5bKMiv6hVAMqyBsbUdBLt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:38:fa:55:6e:22:de:b2:39:55:db:b6:66:0f:98:a3:24:2d:
48:a7:02:30:3a:d9:d1:3f:55:76:db:b0:28:6c:df:37:f8:c3:
ec:53:35:a1:81:65:4a:23:a7:8c:bf:8b:37:8f:b6:29:4f:db:
a3:14:fd:dc:9e:91:4f:70:19:c9:c9:74:08:fc:86:19:be:b6:
6f:98:e0:ad:40:6c:0d:10:07:66:ff:f9:89:b6:80:1c:c4:00:
80:7f:5d:60:f4:f5:2f:73:60:bc:b3:9f:0c:b8:ac:91:7c:c3:
5c:61:72:4a:f6:13:c1:05:20:e9:24:59:93:fd:a9:d5:c2:26:
44:94:f3:97:9e:b6:84:07:1b:07:83:4a:4b:c5:b7:3f:d9:63:
52:0a:6c:16:62:32:9b:6b:ae:69:1c:93:4c:c8:13:07:74:23:
c2:f7:73:aa:bd:53:e5:64:db:3d:ae:b7:f8:d3:32:2c:b4:7a:
ab:a1:d4:39:36:e8:39:be:4c:30:52:d0:9b:64:48:80:ef:45:
64:dc:c6:88:c1:a6:12:34:d7:00:26:ed:5d:40:e8:01:45:c5:
1a:e9:01:41:c4:20:9e:8a:87:a0:96:d8:9e:00:79:4e:40:b3:
bf:2a:6d:cb:59:c4:43:75:9d:a9:e2:3b:af:89:a9:05:5f:07:
7f:55:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:35 2026 by rpki-client