Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
File: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft (raw, json)
Hash identifier: v2PSfuS2VUSW7DVoZJVaIYMNGy19ZCt6/yYeMCYDfSI=
Subject key identifier: 5A:C2:E1:AF:7C:84:DA:AE:6F:47:D9:0F:EE:BE:55:52:A4:6F:F3:03
Authority key identifier: C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
Certificate issuer: /CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Certificate serial: 019DCD192D706B8AD3FBABD4B5763A9F6884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 04:01:12 +0000
Manifest this update: Mon 27 Apr 2026 04:01:12 +0000
Manifest next update: Tue 28 Apr 2026 04:01:12 +0000
Files and hashes: 1: DQIguyk5vsbJ0WUq91-VKOsHIzc.roa (hash: 7wVw6qQqVdHA1hWjDiCXVImmM58vnAnP1SdP0652WV8=)
2: iMRV9NXr5k8zAqOBO4S0jdl29Sc.asa (hash: TVMdwIlpOvO/2aMdNbNnt4sElpinwCTHk7HOCPzOcpk=)
3: yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl (hash: lRcNze8ItpcqBYp7KHkl4W2k6fIk2ebud2wVHH0vil0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:2d:70:6b:8a:d3:fb:ab:d4:b5:76:3a:9f:68:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87c78b5b06a6f902c510f9b4a8f803ba32dfa84
Validity
Not Before: Apr 27 04:01:12 2026 GMT
Not After : Apr 28 04:01:12 2026 GMT
Subject: CN=5ac2e1af7c84daae6f47d90feebe5552a46ff303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:52:75:d4:28:18:b0:14:f3:c1:7e:cc:74:c2:
68:22:31:94:dc:b1:b7:85:19:75:ec:d3:3a:6e:48:
bd:8d:3c:3f:06:cd:97:af:9c:a1:5e:5f:c8:16:c1:
0b:77:69:ad:b7:8b:b6:06:0e:29:46:77:8a:68:24:
a7:4f:7b:41:35:80:ed:13:86:1a:69:80:e8:d7:5a:
e8:11:e2:7d:b6:dc:30:94:b0:c3:8b:78:07:c5:6e:
fc:ce:8f:d5:41:56:1d:6b:fe:b7:73:50:fd:3d:79:
df:15:a7:43:e8:66:66:5e:ee:3a:46:aa:a9:e2:32:
cc:53:6a:04:a6:54:b3:8c:7b:1d:1b:0d:bc:a3:21:
3e:5a:9d:a4:83:ee:1e:1a:28:49:b8:22:68:2a:5a:
27:01:a2:3d:e8:e3:66:dd:b1:7a:2e:be:e5:dd:b3:
4f:8d:e4:bc:20:a6:02:14:09:53:7f:4d:d3:6e:d5:
a3:81:f7:34:6c:a8:5c:2c:5f:5e:fc:06:94:77:2e:
33:46:e2:b0:0f:90:99:0c:3a:77:96:41:32:d9:1e:
04:a0:3c:c6:2d:9f:ce:b4:70:44:a5:5e:22:7f:9a:
79:cb:b0:a1:8d:e3:8b:aa:f7:18:9c:c1:5d:16:25:
77:69:5d:c7:59:53:75:95:65:02:43:85:f8:8e:b7:
32:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:E1:AF:7C:84:DA:AE:6F:47:D9:0F:EE:BE:55:52:A4:6F:F3:03
X509v3 Authority Key Identifier:
keyid:C8:7C:78:B5:B0:6A:6F:90:2C:51:0F:9B:4A:8F:80:3B:A3:2D:FA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e22980-d5e5-41e8-a06a-7469ef203f82/1/yHx4tbBqb5AsUQ-bSo-AO6Mt-oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bd:69:84:c1:00:76:24:9e:6b:10:f8:ac:6f:30:cb:be:ff:
11:b7:49:b4:65:d3:5e:44:3c:28:1d:94:69:4c:dd:03:e2:5d:
79:84:55:79:3c:0f:48:ff:22:9b:64:2e:78:81:42:93:23:70:
18:70:2a:ab:9b:92:7d:b5:4d:e4:ae:41:0d:3c:5d:bc:bf:4c:
de:1f:4f:f7:54:97:74:24:30:3c:e1:27:1a:eb:3d:68:b2:73:
93:37:4d:ac:dd:62:20:89:15:21:0b:a0:c3:4e:4b:93:13:37:
15:92:81:ad:f2:84:5c:9b:0f:c7:68:ed:8f:12:94:7b:22:75:
83:5b:40:9d:55:a5:2d:01:53:ce:98:05:f0:da:11:72:77:85:
7b:02:5a:f2:de:46:41:cf:40:f2:f9:aa:fa:a2:a7:9e:cf:9b:
00:85:b0:26:2d:f7:08:ea:8b:01:2c:cb:73:3d:32:79:c2:16:
90:6a:e9:08:aa:e8:e9:30:19:14:dc:d8:67:9c:b3:fc:86:9c:
9c:a2:12:57:bd:0e:c1:79:5e:2d:de:24:b7:90:18:b2:7f:68:
24:bb:f1:4c:f6:82:24:eb:9c:2b:cb:45:30:90:1f:9d:aa:09:
5d:08:43:0e:04:11:ad:29:24:77:0b:0f:23:dc:96:0d:21:c6:
93:20:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:24 2026 by rpki-client