Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: uNnJekIlCo8xfVuq2tgzuHZ74t0t2BkROcSbY6ftHIQ=
Subject key identifier: E8:8E:52:68:B3:60:55:83:AD:C2:B9:16:9C:D1:A0:08:BB:9C:AB:F0
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 019DD051839408D88C18E69DF5D35CF74F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 19:01:36 +0000
Manifest this update: Mon 27 Apr 2026 19:01:36 +0000
Manifest next update: Tue 28 Apr 2026 19:01:36 +0000
Files and hashes: 1: 01b-_lSQYswp0XJqCFkWTN3FBao.roa (hash: ewH/zDZQ3rLluYv2guw0C+nvriPG/1vP0wlE4tPc+1Y=)
2: EGoSQ-IvTDuR6KeRNIfT2U3LRKg.roa (hash: L6sNJPWIZpchbyuvO0NFOoU8EkTxoHjIUljX0hT8hYU=)
3: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: UjyZ3GvVAE5VSWafMmN8alBhq3/wG3jiraF6N6cC8Yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:83:94:08:d8:8c:18:e6:9d:f5:d3:5c:f7:4f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Apr 27 19:01:36 2026 GMT
Not After : Apr 28 19:01:36 2026 GMT
Subject: CN=e88e5268b3605583adc2b9169cd1a008bb9cabf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:82:28:c8:52:2a:31:b7:bd:68:4e:ca:d5:
ce:b4:ff:d4:f3:80:13:17:94:af:96:e7:7c:74:a7:
93:a3:09:97:82:7c:96:83:e7:6e:82:85:8d:dc:bf:
31:3b:5b:d4:f0:b6:78:fd:13:c7:84:81:35:a1:51:
65:40:01:9d:7c:46:47:4d:19:fa:fc:66:e8:93:66:
88:00:dd:82:c5:e9:df:dc:a9:ff:5b:9e:50:96:5d:
4c:6c:cf:56:a6:02:3d:17:dd:33:ac:7d:37:23:6c:
dc:4b:4d:11:21:29:43:e7:7f:60:cb:67:7c:89:ed:
0a:3c:c3:b8:ad:cf:61:f6:24:a1:f2:53:87:53:07:
0e:23:ce:5c:5a:4d:5c:b8:d6:3b:74:45:56:6d:93:
e6:c3:65:ba:71:f5:aa:30:a9:dc:58:8f:00:09:b2:
86:83:2b:c6:24:64:ff:6a:3d:21:30:33:fd:9b:10:
e5:9d:a3:45:52:00:c4:b6:54:05:01:93:ed:b0:6d:
56:d2:e9:93:a8:fd:16:f0:c4:f1:53:ea:42:71:56:
4c:23:7e:12:b2:ab:3a:79:77:34:0f:5f:74:88:bd:
00:ec:f6:25:9f:e8:15:09:4c:0c:36:d4:4e:ce:8d:
8b:32:02:a7:1b:58:7c:7c:4b:c6:05:1f:da:ba:4e:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8E:52:68:B3:60:55:83:AD:C2:B9:16:9C:D1:A0:08:BB:9C:AB:F0
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e6:61:ee:3a:33:f2:d4:8e:a4:2c:b8:4c:38:c8:3e:f7:5e:
88:ca:f3:0b:02:9a:e1:71:6c:17:94:1d:d0:62:12:ac:c3:e0:
bb:30:a3:fd:14:38:1b:48:7f:ab:94:69:7d:4d:00:3d:9d:a9:
cb:8e:ae:8e:3b:e3:2f:03:a2:e8:3f:57:7a:ec:d1:9c:8d:ea:
a6:d3:5e:05:a2:67:d2:89:b3:c8:ff:0c:7a:de:b3:6a:5e:ea:
ab:33:37:46:e6:24:ed:fd:62:a5:49:97:f0:f9:b5:97:40:9b:
ba:7f:22:41:8d:51:18:1c:d4:48:e2:94:e5:57:d7:af:2a:2a:
34:38:e4:3d:48:9c:67:51:0c:6f:91:62:61:0f:64:50:d7:f9:
72:e3:18:eb:75:f9:a0:62:f0:b9:42:6a:08:26:ac:6c:e5:f3:
17:4a:7f:4b:58:1c:2b:f5:4e:32:80:b6:ce:e9:8e:e9:17:5b:
05:e9:e4:3c:d1:53:77:46:83:bb:e3:37:a0:56:ef:96:6b:8a:
d9:67:20:2d:5d:67:9b:c9:55:22:93:98:81:80:54:88:db:c6:
b3:e3:dd:09:ef:b9:7c:b7:01:d7:c1:50:68:9f:3e:94:3f:36:
2a:16:01:27:36:44:6c:82:d1:54:eb:ab:bb:81:52:82:a4:38:
3a:bd:1c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:14:40 2026 by rpki-client