Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: cYbkcGvUIWy9VDWE1zJXhl9JexLpV/2hCg03Gk1bVxM=
Subject key identifier: FF:F5:98:5E:31:00:FF:CA:18:41:5D:A4:8D:BC:F1:DD:25:B4:72:6E
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019DCCAB03C8DBD3D6700B66CA71AB219A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 18E5
Signing time: Mon 27 Apr 2026 02:00:52 +0000
Manifest this update: Mon 27 Apr 2026 02:00:52 +0000
Manifest next update: Tue 28 Apr 2026 02:00:52 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: n76VpB5LULJ8PqLtZKHY5c6bT26O62NxKJ4q3pKAOlk=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:ab:03:c8:db:d3:d6:70:0b:66:ca:71:ab:21:9a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Apr 27 02:00:52 2026 GMT
Not After : Apr 28 02:00:52 2026 GMT
Subject: CN=fff5985e3100ffca18415da48dbcf1dd25b4726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:23:74:56:52:43:1c:dc:7f:d8:c3:46:03:
76:06:8d:aa:4a:3f:36:fb:2d:8b:0a:79:62:42:c7:
b6:8b:11:66:9f:b5:9c:56:17:f9:c1:a3:ef:bc:68:
a1:68:00:36:e1:dd:86:0b:41:f9:b8:fb:1a:ca:a7:
47:8c:0f:d1:44:d1:76:3d:8a:0d:73:89:cc:7f:ab:
0d:1f:f9:cb:24:30:01:94:31:f4:a1:22:44:24:86:
cc:0c:e3:bf:4d:4e:fd:9a:57:85:65:02:80:71:ab:
ff:fb:69:9e:7a:00:4a:b4:e6:3b:04:b8:c2:e6:ee:
29:ad:c0:a8:11:47:27:1c:cc:ac:c9:27:6d:29:e2:
bb:e4:23:1d:07:53:99:ec:8c:78:d9:98:30:1d:3d:
93:ae:e7:60:b1:77:95:2a:76:da:f7:a0:ea:1a:31:
29:a3:6f:55:ab:2e:7d:32:fa:2a:0a:5c:d5:ff:e2:
c7:98:71:f4:1d:f0:9d:ae:f3:eb:05:1b:31:c5:41:
12:67:24:74:57:3f:83:5d:66:22:bb:00:56:8f:d2:
37:13:2e:a5:5b:a8:e1:36:99:33:61:cd:ac:ba:a3:
37:aa:ab:65:77:e3:97:98:59:c6:ca:e9:50:74:61:
90:18:f3:b3:8f:1a:6d:d2:e5:f0:5d:4c:b4:2e:88:
1e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:98:5E:31:00:FF:CA:18:41:5D:A4:8D:BC:F1:DD:25:B4:72:6E
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d8:67:1c:f1:99:44:35:7b:fd:51:eb:c9:fe:a5:dd:5d:97:
6c:c3:cb:dd:2c:71:a2:ca:ea:3c:94:b6:bb:6b:a0:a2:49:51:
77:d3:6a:09:07:88:92:f5:d7:af:06:04:f1:52:55:27:6a:82:
4c:5f:e2:dd:41:05:11:bb:1b:d9:64:69:b0:be:19:79:37:f3:
84:6c:b6:c5:2d:b2:a5:6e:68:95:95:dd:1d:ec:58:11:3f:cd:
c1:e6:32:a7:4f:e4:c3:9b:71:bc:7b:6a:30:d6:af:50:18:3d:
82:c3:d5:37:e9:69:15:23:0d:b5:ca:3b:e0:f8:0c:df:2a:d3:
88:34:55:d1:4d:58:5f:07:34:08:5c:77:b6:8d:55:3e:c1:6f:
2b:fe:f9:2d:f6:f2:4b:4b:a3:aa:f2:e9:47:fd:ef:f6:a4:01:
66:00:2a:6b:22:74:ce:6f:d2:45:b0:36:78:ee:33:f3:43:16:
66:8b:1d:f6:45:0c:a4:ca:f0:e8:97:0e:b9:e1:2e:77:ac:25:
a4:c3:d4:9e:78:b5:28:3f:74:be:96:f8:9d:bc:a1:31:f3:f7:
19:db:68:88:f7:87:2f:d7:3d:9f:71:6b:c0:12:72:22:ee:21:
f2:12:e4:89:76:16:26:d0:2d:60:b3:00:db:4b:bc:7d:da:da:
80:bb:7c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:22 2026 by rpki-client