Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: bOKlBRNGxtBFoNff653GwbMo3orjSPXemU8E1CL7eSg=
Subject key identifier: F0:FE:C9:1C:7E:00:8E:BA:FD:BE:EC:AD:70:26:34:7A:1F:09:65:D7
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 019DCD86985DBDF7ADFD8598329C64349668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 06:00:43 +0000
Manifest this update: Mon 27 Apr 2026 06:00:43 +0000
Manifest next update: Tue 28 Apr 2026 06:00:43 +0000
Files and hashes: 1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: qlZ4dKH8iuP10w4+Z9xRRLUdXvEEut8K2nQMn+GVd/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:98:5d:bd:f7:ad:fd:85:98:32:9c:64:34:96:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Apr 27 06:00:43 2026 GMT
Not After : Apr 28 06:00:43 2026 GMT
Subject: CN=f0fec91c7e008ebafdbeecad7026347a1f0965d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:b0:dc:09:ba:c9:45:f1:19:fa:42:43:ea:
83:89:59:9f:fa:06:ab:35:1b:d9:45:ea:6d:69:f3:
1d:ae:19:cc:a8:f0:88:df:cd:c8:12:aa:21:98:ff:
70:08:42:b6:28:90:41:7b:46:55:be:69:12:b5:c6:
27:80:ad:3a:33:ad:26:8c:1e:95:02:00:ce:ef:dc:
ef:ed:2d:a9:72:3a:65:e4:7e:42:96:20:af:82:c6:
a2:52:da:c3:71:df:83:89:f7:b5:3d:67:5b:21:33:
57:50:e7:36:78:4e:f0:2f:77:94:09:1c:56:33:74:
24:0c:c7:9e:44:4f:c6:b9:97:b2:69:da:c0:39:17:
51:ea:c8:d0:a1:93:21:d6:e0:a1:b7:32:48:42:11:
2c:9d:66:e1:f0:22:a7:e4:de:28:bc:35:ee:57:25:
73:a0:5f:ea:ac:ae:0c:8c:32:db:2c:2a:f9:d6:2a:
08:d1:33:1d:d7:48:e4:c0:48:37:1c:86:cc:66:6b:
c5:c9:22:c6:3f:5d:2d:6f:6a:90:60:0b:ec:8f:05:
6c:2e:f3:7d:a8:52:95:a4:fc:5f:b1:cb:e1:6c:28:
1f:eb:65:25:94:b8:a0:2d:ba:ad:2f:7d:1a:9e:ff:
03:5f:61:54:bb:f1:3a:70:4d:e9:7f:45:24:ec:5f:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:C9:1C:7E:00:8E:BA:FD:BE:EC:AD:70:26:34:7A:1F:09:65:D7
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e8:b9:7e:1a:7e:d2:ef:42:b3:1b:c8:51:fb:b3:9d:4e:cf:
4e:b0:df:17:0b:e5:44:5a:68:28:61:76:5f:b9:65:b3:9a:b0:
31:8f:95:3e:15:6f:0d:63:89:8a:c8:2e:04:f2:51:58:f1:bc:
53:08:51:34:9f:06:7e:b1:25:cf:ae:f2:27:3b:88:a9:42:fa:
72:c3:65:4a:5d:91:b3:39:51:35:b1:0e:b5:e8:e6:67:de:53:
0d:3a:95:9d:ea:04:30:79:61:6c:cf:41:6d:d1:6a:24:29:67:
64:0b:40:9d:45:8a:c6:b9:a0:43:cd:a8:b1:10:60:a6:64:c2:
6f:d1:59:c6:5a:63:8a:25:0e:02:6f:68:4f:a9:ae:6c:0e:58:
1b:b5:c4:7f:2a:ae:eb:02:bc:02:a5:15:f7:ac:62:55:88:4b:
f6:c4:3e:11:ad:46:c3:6b:0e:bb:c3:10:ca:50:2d:75:42:7b:
e1:f3:4e:2c:be:48:27:f3:60:e8:59:c4:c5:32:28:2d:30:14:
33:ff:f7:62:aa:6c:86:bb:2c:9a:50:9d:de:aa:aa:ff:18:38:
c6:26:54:ce:37:23:97:4d:57:85:1d:2d:31:04:68:b3:a2:a2:
3f:4c:c6:61:be:29:42:cf:16:05:0d:8e:76:d5:1c:df:72:94:
09:a7:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:10:25 2026 by rpki-client