Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
File: yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft (raw, json)
Hash identifier: 2wpo83ahDGRUG2Lo/a0NkS0bnVED8dSsAqnhObsKavo=
Subject key identifier: 3E:2E:57:97:57:45:05:0D:F5:FE:5E:88:B7:80:90:DC:4F:9F:78:C3
Authority key identifier: CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
Certificate issuer: /CN=cb1d15194278a29aad57ca375f99588b976ef829
Certificate serial: 019DD019DC112BB29E4D00A983879E4DC89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 18:00:48 +0000
Manifest this update: Mon 27 Apr 2026 18:00:48 +0000
Manifest next update: Tue 28 Apr 2026 18:00:48 +0000
Files and hashes: 1: 1Y3Jx-pHnnlaAgkd81VS3ppPNg8.roa (hash: tTjmMx7gS2w8jTpbpktEzeLgDcYSzx93pMRGzj4kGes=)
2: yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl (hash: zx1wEYuK7LnwePy7655si8BKjc1JphJW1/L6D3TOU14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:dc:11:2b:b2:9e:4d:00:a9:83:87:9e:4d:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d15194278a29aad57ca375f99588b976ef829
Validity
Not Before: Apr 27 18:00:48 2026 GMT
Not After : Apr 28 18:00:48 2026 GMT
Subject: CN=3e2e57975745050df5fe5e88b78090dc4f9f78c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:97:ae:3a:d9:0a:b4:fb:3a:e5:89:75:ea:
41:8f:78:cf:03:20:17:ae:a0:64:91:19:8a:9c:81:
56:84:3b:e1:c8:bb:74:6f:27:2f:65:8e:1d:ff:57:
d8:14:81:80:aa:5b:18:fa:c8:a6:f7:9b:27:87:a2:
4d:5d:29:ef:62:64:57:c3:da:fb:89:f0:61:7a:44:
54:72:f0:c4:5f:e6:46:80:cf:89:7f:42:9b:6a:75:
2f:a6:90:fe:70:52:dc:34:aa:c5:23:57:c2:d8:18:
2c:a7:91:fc:c5:c3:1b:f5:f0:32:2c:8a:7b:6b:fc:
91:3e:5f:d8:a9:d2:e6:cf:31:34:c6:0f:50:28:16:
46:d7:d9:82:48:36:77:2c:a3:be:de:de:78:44:47:
8b:8b:c5:df:55:d7:48:b1:6c:0d:b9:d9:be:3a:d1:
59:5e:e2:6d:74:3f:6c:dd:29:82:01:e7:3a:a2:09:
eb:f0:0c:bc:01:ec:9e:47:a5:94:7a:79:d3:72:c4:
47:68:e1:18:08:cf:15:02:7c:38:8c:73:76:77:57:
42:b1:f0:44:a0:20:83:6a:e3:28:f1:77:a8:fd:29:
32:ef:34:de:d4:e5:eb:08:a9:49:e9:05:31:2b:5b:
a7:48:ed:39:b1:cf:37:e2:98:57:f1:bf:f7:56:1f:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:57:97:57:45:05:0D:F5:FE:5E:88:B7:80:90:DC:4F:9F:78:C3
X509v3 Authority Key Identifier:
keyid:CB:1D:15:19:42:78:A2:9A:AD:57:CA:37:5F:99:58:8B:97:6E:F8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx0VGUJ4opqtV8o3X5lYi5du-Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eb2361-8d34-4ff4-b3d1-1fb38435af77/1/yx0VGUJ4opqtV8o3X5lYi5du-Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:54:92:3e:ef:de:94:02:86:58:93:2b:fb:e0:48:3b:f1:6b:
e4:41:ec:68:e7:4a:28:fb:18:c9:14:d1:15:b1:02:5a:9c:2a:
59:22:8e:43:a7:c8:ac:fd:ef:4a:5c:03:10:57:20:17:0f:a3:
bc:c1:c4:54:9f:d3:68:c7:d3:cf:57:6f:17:ea:f9:5c:45:3e:
29:c4:a9:f0:43:cf:5a:c5:93:a2:39:6b:4a:7b:e5:af:df:0d:
7d:de:1a:b9:79:63:be:de:3c:4d:6d:f3:d1:d4:5b:2a:00:03:
77:92:83:b4:0d:44:56:eb:05:35:a2:ac:d4:65:16:6a:28:da:
18:6d:b4:64:8d:ce:d4:4e:df:48:d4:ac:60:31:eb:88:f1:0d:
2c:65:63:80:34:7d:54:1a:bc:7f:56:ed:ef:b4:95:c1:cd:35:
6f:11:10:af:7b:d5:60:f6:7d:81:4d:18:f5:81:43:9b:a2:d7:
97:49:fe:c8:3b:aa:96:2d:d1:0f:d1:f6:3c:bc:14:82:e7:f1:
8e:21:61:63:81:69:10:3c:e6:24:53:95:ad:55:2c:25:58:b8:
23:07:cd:00:4d:00:fa:3c:a3:01:08:82:63:6f:2a:2e:33:c8:
38:35:c1:af:a9:4f:79:fe:98:7a:09:12:e8:ef:74:d5:41:dd:
a0:f0:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:10:02 2026 by rpki-client