Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
File: _Y7_IBIYpagjy-hTNoU-PbTdFus.mft (raw, json)
Hash identifier: d77OaDTobl/lnK0rUu+YKFzXxYjjwfjEjZSMOH0b1sg=
Subject key identifier: 82:F6:30:39:92:3B:00:2D:93:5B:E9:A0:02:24:CF:E6:8A:30:F8:5C
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 019DCDF4B22CD363F2D84AE68304DF4BCCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
Manifest number: 18E7
Signing time: Mon 27 Apr 2026 08:00:58 +0000
Manifest this update: Mon 27 Apr 2026 08:00:58 +0000
Manifest next update: Tue 28 Apr 2026 08:00:58 +0000
Files and hashes: 1: _Y7_IBIYpagjy-hTNoU-PbTdFus.crl (hash: xOtgfNrFBWJx64ZgMUqOutiJLzMPahw97nhZHkZ6z3E=)
2: fk7mY39tErf9E91KsoOlDrOBfU8.roa (hash: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4=)
3: gK03dOMIheA0WW00ZsTlFQAdkqE.roa (hash: i+G2UvhUM8Q4L4pivFPhk7KZ2K/roiDcPV7B0z9D7E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:b2:2c:d3:63:f2:d8:4a:e6:83:04:df:4b:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Apr 27 08:00:58 2026 GMT
Not After : Apr 28 08:00:58 2026 GMT
Subject: CN=82f63039923b002d935be9a00224cfe68a30f85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:ac:b3:28:16:49:38:cc:ea:70:ea:a5:ea:
b0:29:d4:bf:df:e2:fe:f3:74:0a:35:e9:0f:9b:cf:
24:01:fc:47:fb:95:aa:a5:01:72:1a:14:48:b9:a2:
50:5d:90:81:1d:d7:c7:1b:e1:ea:62:24:af:ca:b3:
75:d9:90:e2:9a:f0:83:aa:0c:6f:03:d8:f4:d9:18:
90:cd:bb:2c:3a:ab:c0:73:66:d1:a7:05:0e:5b:a9:
48:32:ec:1a:98:96:0f:47:42:70:20:a9:d9:6e:e0:
dd:e6:69:bf:9f:87:88:bf:14:a2:97:6a:ed:c7:d7:
e6:f0:b7:3c:19:ad:8f:79:f9:a8:0e:8c:25:70:a3:
35:d2:0f:ed:62:11:57:f8:81:d6:ac:f9:21:d2:19:
38:d2:05:01:9a:c8:47:e0:cd:0b:68:b0:c2:0c:cc:
4c:2e:af:6d:bd:35:37:2b:40:50:fc:c3:6e:89:27:
73:bf:65:32:f2:41:bd:92:5c:d3:9f:ca:03:c5:a7:
87:fe:0a:01:3d:10:1b:92:ee:c9:92:49:ca:52:02:
0c:03:30:99:b8:35:30:72:da:cb:eb:40:f3:35:27:
9f:1c:8a:41:1c:35:6e:f1:2c:aa:41:fd:5b:79:f6:
39:a4:d3:c3:3e:2f:8a:5d:9e:f4:3c:c5:a9:7d:fb:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:30:39:92:3B:00:2D:93:5B:E9:A0:02:24:CF:E6:8A:30:F8:5C
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:98:6a:9d:d2:01:66:54:7f:c4:79:67:4d:fa:32:6f:d3:c4:
2d:f5:f8:45:fd:e0:f1:11:ae:56:66:2f:9f:e1:5d:f8:16:18:
a0:40:d7:4e:6c:b2:53:12:80:51:fb:4b:6e:a1:a0:5f:74:3d:
1e:cb:c9:f8:7b:1e:c3:23:93:7f:83:d7:7b:ad:e9:fc:67:a8:
f4:eb:35:72:0d:c3:d1:c7:94:1b:d8:08:bc:6d:7d:1d:13:46:
0e:f6:8b:22:ef:a9:3a:5f:84:d9:89:df:ad:d4:0b:66:7c:a4:
47:0b:1e:a7:2a:a2:ed:39:13:5b:4f:e8:5f:dc:3a:a7:ca:d1:
14:7f:bf:81:2f:7e:8b:4f:10:51:ab:5d:24:3b:0f:64:11:fc:
b0:9d:3c:5b:2b:53:0b:8a:a2:b1:0c:62:59:fe:b9:18:25:1f:
28:ed:a6:67:10:bb:13:81:38:97:df:92:df:9e:1a:be:a0:b4:
97:ca:73:c4:6b:00:d0:ac:47:4f:d4:1a:4a:dc:27:f4:9e:56:
18:f9:59:18:9e:87:3e:32:b5:a0:00:f5:e8:cb:40:f3:6a:22:
28:bc:39:93:07:25:a5:37:66:75:31:9e:44:c7:1b:d7:f3:37:
75:40:27:c8:e3:87:94:cc:e5:14:30:4e:ed:4b:58:e6:49:64:
a5:62:23:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:36 2026 by rpki-client