Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
File: yGjKghR-0id7S8xppShbrnNfLkQ.mft (raw, json)
Hash identifier: bgny19+8BVXpA8q3lABHn2R5QovMLAqW2AEEaJBbpTQ=
Subject key identifier: 4C:FE:B5:B7:4D:BA:A1:65:C8:4F:B4:25:FF:2F:0C:93:4E:3C:9C:63
Authority key identifier: C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
Certificate issuer: /CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Certificate serial: 019DB2EBF09024EE9CE66026D396B3BD4F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
Manifest number: 18EF
Signing time: Wed 22 Apr 2026 02:01:40 +0000
Manifest this update: Wed 22 Apr 2026 02:01:40 +0000
Manifest next update: Thu 23 Apr 2026 02:01:40 +0000
Files and hashes: 1: CpcMl2eeE4kivr7Y_KcbhMBQkho.roa (hash: 3J5pbfw99fV9VldJRwXaEGP1Raiiwe48ExCYD8L4uko=)
2: gECFr_lCurPKmYUZbnBME6fDRJI.roa (hash: zPv5BFtY7ZttrJvpLgH3TkAwwjvJ39/Ya/LcQ77bi7A=)
3: yGjKghR-0id7S8xppShbrnNfLkQ.crl (hash: KDoC/d7NNp+AiFmNtFaHmOsN/3gyrX8XVHI0sNjNBcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:eb:f0:90:24:ee:9c:e6:60:26:d3:96:b3:bd:4f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c868ca82147ed2277b4bcc69a5285bae735f2e44
Validity
Not Before: Apr 22 02:01:40 2026 GMT
Not After : Apr 23 02:01:40 2026 GMT
Subject: CN=4cfeb5b74dbaa165c84fb425ff2f0c934e3c9c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:54:5e:2c:45:68:25:7a:ac:64:74:46:f6:
26:bc:05:43:64:a7:36:3d:49:7c:ff:f5:fd:5d:2e:
bf:6a:b7:33:82:14:e1:10:b8:76:79:bd:6d:7f:30:
8f:89:9e:be:9b:a4:50:30:8f:3e:ca:aa:94:83:56:
21:47:e8:5e:ae:ee:df:8f:f7:00:0e:fa:c3:3a:fd:
24:8e:b3:82:b2:8c:df:d7:0a:b5:1a:22:ac:e0:0b:
43:3a:85:c5:90:ef:07:e5:2f:80:ac:f8:18:cd:42:
4a:14:80:3c:48:08:fd:6f:bd:d1:29:96:e6:01:cc:
1f:21:5b:63:82:d4:54:5c:fb:44:39:0f:fc:58:cc:
9d:d9:b2:df:38:4a:9f:81:52:fd:04:52:fd:c6:51:
31:79:5d:7b:0c:2d:ca:19:a7:db:af:39:ba:1b:51:
05:3b:7c:0d:a9:05:07:20:a3:f8:42:82:53:eb:64:
df:8e:62:02:ae:b5:24:6d:62:79:b2:89:e1:e4:08:
3e:c9:73:73:2f:ad:47:64:68:fa:d5:b7:df:58:f2:
91:c0:f5:a1:6c:3b:3c:6e:04:0f:0e:3c:f3:bc:e8:
a9:21:3e:60:51:77:82:a5:f4:88:cb:40:35:7b:e6:
57:d0:33:dc:06:ff:45:cf:ec:57:bf:1d:7a:60:fc:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:B5:B7:4D:BA:A1:65:C8:4F:B4:25:FF:2F:0C:93:4E:3C:9C:63
X509v3 Authority Key Identifier:
keyid:C8:68:CA:82:14:7E:D2:27:7B:4B:CC:69:A5:28:5B:AE:73:5F:2E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGjKghR-0id7S8xppShbrnNfLkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/042c33-ab6b-48be-a492-66849019627e/1/yGjKghR-0id7S8xppShbrnNfLkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b6:be:0c:dc:42:4d:1e:5b:fe:a4:62:b6:63:bc:9d:eb:89:
26:02:9f:26:2a:90:0a:ee:d7:6d:48:aa:a1:51:59:1b:51:70:
0a:3c:31:40:2d:b7:e7:58:b6:20:98:94:ee:30:73:71:f3:a5:
75:b9:4b:c8:42:f7:89:53:b5:09:44:07:11:f6:f8:b9:92:50:
9f:26:0e:f6:6d:bf:ec:cf:8c:ae:ee:7c:69:60:f2:24:75:61:
32:ed:bf:fe:1f:00:6a:d6:15:08:5e:bb:b2:13:28:1e:ad:c3:
31:e9:5d:54:f9:4f:e3:7a:cc:ed:73:6f:20:39:bd:07:b2:e8:
aa:7b:ec:da:6d:d5:be:8c:ac:d3:58:b4:8a:7f:0b:fa:30:cf:
a7:ef:55:17:0e:96:e1:7d:0f:de:e6:c0:a1:a2:95:f8:27:5d:
5b:e7:41:f1:dc:62:8e:b7:70:c4:74:be:7c:4d:9f:6e:aa:67:
c9:be:01:c6:42:8d:4c:21:50:01:ed:c0:ee:9e:fd:cd:86:2d:
85:e9:c5:e5:f1:b9:6e:f4:57:a8:c7:05:4f:ae:c2:98:f8:6f:
5a:bc:4b:36:39:3e:04:7f:14:ef:61:10:aa:09:a1:e6:5b:cd:
d9:29:61:74:72:ca:da:ee:82:84:98:3f:65:14:ea:d5:32:6e:
90:bd:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:22 2026 by rpki-client