Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier: bngSXN6mzqU9FlGMXbYgqWO37wd2EuiZQ7iqdP1REqw=
Subject key identifier: AF:C7:AD:BC:89:62:30:8F:9E:F7:53:AF:73:45:97:41:03:CC:4A:C4
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial: 019D9629F7B55861C1E48A785E4E6FDC12CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 12:00:25 +0000
Manifest this update: Thu 16 Apr 2026 12:00:25 +0000
Manifest next update: Fri 17 Apr 2026 12:00:25 +0000
Files and hashes: 1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: LV19dbBfAVaGkNsHnrKhT1SyHu15RPsAbsrzy+HaINI=)
2: LbD2tYPsPC8uP37pndvidAshgOM.roa (hash: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs=)
3: yV2l8jCuUkBjhG1YrGK34ROvjco.roa (hash: OW+ZvGgaMJR1U5WGE2eB0o2w9cCprc/bpgV1/vZl/uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 07:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:29:f7:b5:58:61:c1:e4:8a:78:5e:4e:6f:dc:12:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Validity
Not Before: Apr 16 12:00:25 2026 GMT
Not After : Apr 17 12:00:25 2026 GMT
Subject: CN=afc7adbc8962308f9ef753af7345974103cc4ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:3c:1b:8f:b7:9a:28:20:10:63:b1:0d:39:
3b:b7:71:38:98:59:e4:77:2f:3c:5a:08:23:c7:fb:
7e:98:de:87:a6:47:29:de:6f:ab:09:09:c9:55:6c:
a2:55:54:47:8e:b3:61:fd:3d:e8:dd:22:99:a2:eb:
ca:4f:a4:04:2f:4f:84:5b:f3:58:4e:ef:51:d8:5d:
6e:42:90:40:fa:bc:9e:38:20:19:24:88:29:76:7e:
3e:2e:46:70:6c:8c:4f:e9:20:61:7e:37:7d:d9:b4:
16:ef:96:d8:98:6c:ff:25:d2:5e:4f:7a:b3:14:96:
cc:b8:4f:88:da:18:01:b6:6a:65:6e:45:9f:90:99:
52:7a:1f:53:65:10:d4:e7:38:2b:38:d6:25:56:e1:
98:b5:20:8f:d6:e1:cc:c9:30:9f:cc:24:ee:24:cb:
82:41:6e:78:4e:0a:9e:69:23:b9:8d:90:12:29:fc:
ff:9d:a8:52:f5:c8:2a:a3:df:ba:15:aa:0d:c2:e8:
f6:62:7f:4c:27:0a:3b:ab:5b:0c:6e:9d:f9:b1:b9:
d5:97:42:fe:6b:61:98:f1:f6:83:a9:2d:e8:59:d4:
03:af:a2:b1:71:37:00:8c:87:9a:cb:8d:26:1b:6b:
d9:84:b0:ac:84:0d:10:74:fd:45:c1:f6:39:1d:a6:
71:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:AD:BC:89:62:30:8F:9E:F7:53:AF:73:45:97:41:03:CC:4A:C4
X509v3 Authority Key Identifier:
keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:97:69:02:11:34:1c:4d:80:89:b5:aa:d3:60:e5:4d:da:8c:
64:d8:14:b8:fd:ed:69:f7:8f:f6:a0:3b:aa:6a:1c:92:44:a7:
1d:9b:31:bc:53:b1:c5:85:a1:86:e6:84:4c:e7:e5:14:78:4e:
af:9c:35:d6:8c:f5:b9:a3:34:f3:26:38:14:9d:df:be:8b:4b:
a8:cb:b6:08:d0:7c:26:2f:8c:a5:b8:c4:72:b8:2b:11:92:a9:
c0:7b:e7:08:b0:73:be:e1:9c:3b:f0:96:56:38:63:44:f6:66:
ed:05:4d:d7:ac:20:18:38:8e:a8:c2:27:c9:0b:12:cc:71:1c:
3e:ec:aa:f7:dc:d6:b3:7c:01:17:07:5c:ae:28:48:10:8e:ee:
88:c0:81:2a:4b:52:1a:45:bf:4c:67:87:06:13:d8:88:56:6b:
19:1a:00:f4:0a:53:04:68:3a:c5:4a:90:87:f9:a9:8c:3e:00:
b3:23:cc:f9:ea:11:48:ce:41:63:6e:26:0d:db:90:5d:68:77:
18:fe:9b:d3:0c:52:e2:6e:2c:99:66:e8:85:cb:31:d4:96:c2:
c0:67:16:86:66:89:61:f9:70:0b:73:02:8d:6b:a8:93:7b:f2:
c9:c5:a2:6c:22:b3:f2:fc:d4:cd:50:81:c2:8e:49:48:64:9c:
a6:9c:8a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 15:30:26 2026 by rpki-client