Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json)
Hash identifier: 0j4FVkPBBPpvrm4dlivYEzh2O1IMEYmrGS8z2ordTMs=
Subject key identifier: A0:AE:50:84:3F:62:41:C8:08:00:60:68:41:2E:7B:8D:0F:C8:E4:0E
Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Certificate serial: 019DCED07408720667647D7E71E58BEFA4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
Manifest number: 18DA
Signing time: Mon 27 Apr 2026 12:01:00 +0000
Manifest this update: Mon 27 Apr 2026 12:01:00 +0000
Manifest next update: Tue 28 Apr 2026 12:01:00 +0000
Files and hashes: 1: 8xpf1H5jnrklNTBoaVn0u85Fw00.roa (hash: xVZEKXXOjsh0YBdOeRbRNQ2rIeuGE/aopxCQhkfvBRc=)
2: k1f4H5R1t7ioWxpD9zQTzDGVw34.roa (hash: UazRYiujjVi7Q1FCel0edXG5MOLygjSQmvy3K0uCobk=)
3: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: cdJLoDRUKLek2puewA9JZkVGcXa9XJCqL0L8D0YmlwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:74:08:72:06:67:64:7d:7e:71:e5:8b:ef:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4
Validity
Not Before: Apr 27 12:01:00 2026 GMT
Not After : Apr 28 12:01:00 2026 GMT
Subject: CN=a0ae50843f6241c808006068412e7b8d0fc8e40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:25:47:9b:e7:e2:11:c8:0a:5c:b2:08:d6:
c0:0d:59:b7:31:00:63:03:45:cc:d0:26:b3:4b:0d:
16:bd:c4:b4:99:8e:5c:d2:1f:77:e9:09:fd:01:08:
36:21:b3:31:e7:33:c6:1b:27:09:dd:f7:80:1c:e5:
b8:6d:77:69:81:a4:c0:bf:57:c0:9a:de:f1:d6:35:
f4:c0:43:49:52:81:57:54:e7:81:70:12:4c:6c:9c:
6a:ec:f9:3f:f7:16:60:0e:77:c6:73:e5:9e:c2:ac:
ae:30:6b:07:06:a6:56:46:bc:ec:0b:48:79:bf:ee:
03:28:5f:5c:1e:07:31:04:db:b8:c5:e5:d8:ba:77:
0d:cf:44:79:93:77:44:b3:68:e9:b2:49:46:ef:ab:
dc:c5:44:ba:2b:e8:2c:fb:86:25:07:3f:bf:16:ed:
17:dc:28:58:ed:57:9d:af:d4:a3:c9:86:7d:31:f2:
49:40:58:d3:d4:0e:99:0b:2f:c6:d4:ce:05:dd:bd:
30:6d:91:85:11:8e:a1:fb:56:88:74:c3:5a:5a:98:
5b:7d:16:08:2f:c1:c5:7b:6c:f5:77:2a:5a:46:b7:
a8:7c:3f:da:6f:6e:24:22:da:89:d7:3c:c5:e4:f3:
5a:c8:d2:9b:c8:9b:6b:99:90:57:50:9b:1b:fa:4f:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AE:50:84:3F:62:41:C8:08:00:60:68:41:2E:7B:8D:0F:C8:E4:0E
X509v3 Authority Key Identifier:
keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d0:c3:61:01:6b:96:33:57:2d:bd:06:71:9a:29:21:8c:32:
a9:64:3d:af:4b:e0:d6:db:c5:1d:3f:d8:a1:32:50:e3:3a:fd:
2e:dc:0f:b1:3a:e4:0d:00:7b:60:c1:fc:b9:ea:bc:f2:69:16:
b6:23:d8:5d:4b:0e:23:99:e9:9c:28:4b:a1:31:ee:14:be:c0:
ac:1e:32:ef:e4:8f:e4:ca:55:9f:4b:4b:80:aa:3e:09:4a:ce:
1a:d3:83:cc:0a:e6:99:1d:28:8b:3f:fd:5a:a7:67:58:4f:0c:
03:90:61:a8:a1:86:6a:5c:01:86:54:1e:8b:5c:69:6a:28:7b:
b1:e9:f1:b2:26:e8:f4:a4:87:e1:aa:dc:e7:8b:74:84:67:09:
d6:df:92:c5:5d:53:9e:e8:23:fe:d6:82:c7:84:96:da:8a:b6:
e2:07:f2:0a:ff:10:51:b5:60:4c:17:3c:2b:2a:02:d7:81:d1:
5a:aa:b3:c5:f1:16:32:b2:df:d0:fb:f6:e9:eb:40:af:c4:40:
73:6c:f7:fd:89:31:17:f3:82:52:c0:f9:c8:c1:54:81:96:86:
20:68:32:32:60:03:68:90:79:a1:04:c6:6d:a6:bf:be:ed:e7:
7d:88:e4:e3:55:08:6c:54:41:f7:4e:24:39:6e:6e:bc:1e:6b:
e8:27:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:48:01 2026 by rpki-client