Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
File: Y9nR2VwetxbugZUEWnfLohgdeew.mft (raw, json)
Hash identifier: a6C5t6mFgof5duMxpzMeHv1BKU9Ob7k/6a7TE+ao3Zo=
Subject key identifier: 68:7E:CF:19:12:19:7B:34:60:2E:5C:09:8F:6B:6B:5F:FE:19:83:49
Authority key identifier: 63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
Certificate issuer: /CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Certificate serial: 019DCE62B9D813A47DCB4C9D3A76BFCF9803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
Manifest number: 18F0
Signing time: Mon 27 Apr 2026 10:01:09 +0000
Manifest this update: Mon 27 Apr 2026 10:01:09 +0000
Manifest next update: Tue 28 Apr 2026 10:01:09 +0000
Files and hashes: 1: 4IporOiK6JktRpGESiSAAQpMF7U.roa (hash: lg+Ex4UPGBW/ZbBLSg9owvXX4yPCqEFw5/NmsjkdpGk=)
2: NkORSlpsNzTNf4Yu6bNI9qrV2xQ.asa (hash: wbUaskZvxVYhABFMYZHgXLXqscELVMuo7ua+/E/mtdY=)
3: Y9nR2VwetxbugZUEWnfLohgdeew.crl (hash: u2fdf/Y4dNOMJFsnVLXBPHNGpBhEnIg90NDxMowTitg=)
4: fNxI3dXScPmMR3z1E-3FYKWMeS8.roa (hash: aphBfexzTqun+pqPzK9ahrBEriTPK5GbP96jBpZa6kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:b9:d8:13:a4:7d:cb:4c:9d:3a:76:bf:cf:98:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d9d1d95c1eb716ee8195045a77cba2181d79ec
Validity
Not Before: Apr 27 10:01:09 2026 GMT
Not After : Apr 28 10:01:09 2026 GMT
Subject: CN=687ecf1912197b34602e5c098f6b6b5ffe198349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:c6:12:6b:df:e0:ed:dc:3b:e1:09:31:ab:
89:35:e8:d3:04:6d:3d:55:46:ce:3e:d3:b8:09:e2:
99:b9:39:ad:73:c6:93:56:db:c5:f5:9e:96:7d:ef:
04:cc:10:5e:54:c0:9f:68:59:0d:7b:ed:cd:61:ec:
4e:a7:6f:86:5e:6e:08:8f:8b:36:1e:4f:da:67:56:
73:9d:4f:2b:ce:87:37:2b:d2:d3:0a:47:5d:98:88:
97:81:28:52:ef:62:9a:5a:15:da:04:b3:5f:8c:b2:
86:5f:8d:d2:63:b7:44:c1:0a:ba:bc:e6:18:8c:03:
f6:05:5a:8d:85:8d:43:ec:90:d8:b0:41:a0:d5:f0:
13:a1:23:70:6a:1c:ed:9d:66:75:ab:5b:a3:2a:23:
32:d6:ec:53:e1:8d:b7:0d:0f:67:fa:ff:54:6f:eb:
48:41:71:f3:0f:22:89:0e:4c:2f:9a:ed:11:0b:8e:
32:b0:73:2c:30:29:da:8a:a2:ec:18:32:58:bd:ab:
b3:f0:56:23:f0:3a:98:9b:19:fc:61:de:72:91:55:
b5:f9:56:fe:a9:98:45:a0:4e:72:d9:53:8c:5a:4c:
0a:c1:c7:16:3c:67:76:4c:6d:22:63:41:2e:df:24:
6c:0d:d1:6c:98:b7:22:7c:40:53:9a:85:aa:06:e3:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7E:CF:19:12:19:7B:34:60:2E:5C:09:8F:6B:6B:5F:FE:19:83:49
X509v3 Authority Key Identifier:
keyid:63:D9:D1:D9:5C:1E:B7:16:EE:81:95:04:5A:77:CB:A2:18:1D:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9nR2VwetxbugZUEWnfLohgdeew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ed8dd-d36e-440c-8142-d80c6b85cda4/1/Y9nR2VwetxbugZUEWnfLohgdeew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:0c:31:43:7a:3c:d9:1e:41:cb:64:6e:3f:b8:6f:79:19:85:
48:f4:6f:ff:be:ce:3a:84:50:42:ac:bf:61:32:09:d8:2e:72:
27:3b:9c:18:7f:bf:b6:d3:64:ce:bf:ff:fb:82:b1:a4:5c:1c:
3a:c0:df:dc:17:ad:6c:1d:99:1e:2c:8f:77:1f:ad:96:b1:39:
ee:f1:2b:92:98:28:10:27:12:21:43:0d:0f:ee:1e:74:28:48:
2b:a2:c8:c8:08:2a:28:74:f5:90:ec:76:40:8c:0e:af:4f:c0:
08:5c:20:b9:81:e5:ac:8d:b1:a5:d1:7b:7e:b8:eb:07:2f:43:
72:6d:c4:44:2d:1e:44:f8:29:54:64:08:df:72:5b:12:de:78:
9b:e2:19:ac:e2:2f:23:42:7e:1f:52:a6:d1:5c:53:9e:b1:26:
7e:ba:78:5c:2a:47:e2:86:33:7e:f3:70:36:75:0a:2d:1e:42:
b7:32:dd:31:74:82:fb:8b:9b:ea:a9:50:18:ce:d5:f8:14:8e:
b9:fd:ad:f0:ce:1b:e7:5c:f7:b4:4e:aa:fc:54:dc:63:3d:ef:
b1:ed:7a:83:f7:20:3b:80:7a:36:ef:bf:9c:28:f2:46:a7:d0:
ef:d6:e8:e5:0e:2a:ae:bb:24:06:2a:78:0a:c4:d5:5d:c4:4e:
fc:d8:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:26:55 2026 by rpki-client