Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
File: yTNIHT-khxDcuXP9zSk0De22Ipo.mft (raw, json)
Hash identifier: aDR+U+jjTJ8r9HBWspVH1xrYn2X1tRxTHVI5yyrj58U=
Subject key identifier: CD:53:CA:8B:60:B5:79:47:E1:D4:1D:77:87:5D:AE:ED:89:1B:C9:48
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 019DF870CE26E3A8B08A8C8FF8A1BB585D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
Manifest number: 18F2
Signing time: Tue 05 May 2026 14:00:35 +0000
Manifest this update: Tue 05 May 2026 14:00:35 +0000
Manifest next update: Wed 06 May 2026 14:00:35 +0000
Files and hashes: 1: _ogFXsnc26cwnEEfI1RwCOLLjKE.roa (hash: T8WBXJPVj3V1XgVoalRoALm/8/55OH4oJDKe47m+Cgk=)
2: cisGlTDG6YbGvbXjq8ObLwOftto.roa (hash: B+cjo1pRI6fh+IOCsdjVyvdJ7iW7PB7/BMnta8fuFho=)
3: uWQ_yyWTJKlwMIna4dHe1PfEbz8.roa (hash: tvPaUHk8Xmgw+avX8XEILYU/M4IbkxRiILy7UdTCanQ=)
4: yTNIHT-khxDcuXP9zSk0De22Ipo.crl (hash: xk2tSAWyjeFbbj1r3rzaEtvbdSIGjzcNWlJsvtlcSW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:70:ce:26:e3:a8:b0:8a:8c:8f:f8:a1:bb:58:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: May 5 14:00:35 2026 GMT
Not After : May 6 14:00:35 2026 GMT
Subject: CN=cd53ca8b60b57947e1d41d77875daeed891bc948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:01:c2:2c:b7:06:0b:7a:6b:87:84:5d:76:
f4:5c:05:88:90:0c:6b:53:20:5a:a6:b6:88:5e:06:
51:d3:80:c1:a7:d1:2f:2a:10:6f:f7:1b:aa:22:01:
d5:c8:a2:a1:df:29:cc:0b:51:28:2c:9b:18:47:15:
4a:ef:9d:ac:8d:c7:24:9e:3c:ba:8a:f0:94:d4:12:
52:48:3d:e6:ea:6a:30:22:67:b7:08:a5:a1:1a:9c:
fa:d5:d8:d3:05:82:3e:45:27:99:b3:8e:4f:2e:63:
1d:d1:e4:14:f0:ab:57:cc:9d:bf:9b:d0:3a:d1:1d:
af:20:50:30:14:5a:a3:2a:6a:d8:e9:b2:83:a8:64:
aa:e0:87:62:12:54:57:70:b6:54:e6:6b:71:52:a6:
1f:49:3c:d8:58:fe:fc:46:60:bc:e1:e9:66:07:17:
00:53:3f:9e:12:87:63:cc:9e:1b:52:a5:4c:1c:77:
15:50:0e:2e:cc:aa:6a:c1:22:65:25:84:7e:bf:1d:
9b:3e:1b:65:b4:f4:4a:e6:08:0e:4c:a5:c5:e4:15:
0e:43:f6:a0:82:3e:5d:e5:4c:fa:dc:50:27:57:05:
98:b5:a2:3d:51:0e:19:07:60:48:52:0b:de:6e:19:
d9:f2:23:c6:c3:d7:a7:63:bc:97:28:09:65:f7:a0:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:CA:8B:60:B5:79:47:E1:D4:1D:77:87:5D:AE:ED:89:1B:C9:48
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:75:e3:4d:12:82:9b:1b:dc:90:b8:29:5c:ad:f2:c7:d9:c3:
57:a3:67:5e:7e:2b:7a:52:c0:05:95:89:01:e8:d1:9c:45:4f:
c2:f7:b6:b2:8c:cc:49:bf:8d:f2:e7:73:d3:9e:c5:9b:1b:41:
81:4c:ff:7b:e3:d4:4e:bf:8a:8f:a5:9f:64:1a:95:ce:a0:86:
5f:ce:c2:84:01:61:87:88:06:41:16:fb:45:95:f0:67:db:33:
8e:11:d6:49:8e:98:68:f9:84:8a:79:2e:01:ef:8b:52:bb:21:
80:98:98:dd:3d:8a:5a:a2:ff:41:e1:72:7b:88:bf:66:78:c9:
0d:4f:a6:48:04:b8:7e:10:36:5a:4f:f9:84:2b:bf:45:fa:50:
f3:05:61:b3:12:a9:f8:c3:53:ad:31:55:ea:73:c1:94:cb:b0:
4b:bd:a7:1f:3f:49:27:9a:33:9e:37:40:a6:50:3d:b5:2d:81:
76:fd:3f:57:5e:d4:ec:27:16:06:33:d8:6c:dd:06:54:4a:ad:
62:ae:85:57:12:f0:31:dd:c3:e3:be:7b:59:02:77:f2:30:c5:
74:bd:c9:6e:c4:0c:d5:6c:f1:31:71:6d:ac:17:90:d0:d6:a0:
24:01:0c:ce:66:24:b2:7a:e6:29:f6:5e:7c:50:49:2e:06:38:
d8:4d:70:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 20:12:10 2026 by rpki-client