Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
File: Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft (raw, json)
Hash identifier: TtlC8kYXvnHkVU9IHYrIZDvoxGtbDIQ+uOdZEpeH008=
Subject key identifier: C0:0A:66:E9:D2:DE:0D:77:22:75:9B:EB:68:A7:D7:51:E1:ED:4F:18
Authority key identifier: 63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
Certificate issuer: /CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Certificate serial: 019DCE997EE3EBB918C8101F468567C20574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
Manifest number: 18E6
Signing time: Mon 27 Apr 2026 11:00:59 +0000
Manifest this update: Mon 27 Apr 2026 11:00:59 +0000
Manifest next update: Tue 28 Apr 2026 11:00:59 +0000
Files and hashes: 1: XZ3sAdabDoOYfBZeEJolsMalQgs.asa (hash: XHuxusmmi3am2aFGs60mmc2MCFL+zmd66reyxUPLwTI=)
2: Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl (hash: NOobo6uRjIxmtQWxb46R62Lwz6/LnxXUGRozixpvAYg=)
3: nibctkm7wr91rBA37l_8PQxYVLc.roa (hash: VamjklOdSeVjkVgODzUFUtdlbnnylLnD0/pDvfa31T8=)
4: t8mVoTfmckCvsyVdwBCx2WY3_SU.roa (hash: punRHqDIXE83AX4muw8qvjP6n1JcfvmchVlgv85rsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:7e:e3:eb:b9:18:c8:10:1f:46:85:67:c2:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=638c509cb77b0149b6f66f5019f858b3acf942e9
Validity
Not Before: Apr 27 11:00:59 2026 GMT
Not After : Apr 28 11:00:59 2026 GMT
Subject: CN=c00a66e9d2de0d7722759beb68a7d751e1ed4f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:64:ee:21:eb:95:e0:53:41:ed:16:cf:a5:
51:44:e9:ba:d1:60:23:66:2e:87:f1:a7:83:16:dc:
c7:29:b4:13:1e:89:82:d1:b9:2e:07:d1:fc:0c:a6:
e4:b0:09:35:b2:43:d0:87:31:a7:6d:2b:ec:e4:52:
c1:31:b8:ba:fa:57:51:91:77:d6:74:dd:9d:1c:69:
76:d8:ef:61:3d:3c:88:65:bc:96:54:cb:85:93:f3:
ca:22:bb:29:42:8e:bb:61:37:bf:35:a4:84:8d:3c:
f4:a2:41:7a:76:84:a8:6c:48:ba:44:0c:b3:f6:92:
82:97:c9:5d:67:84:fd:eb:fa:7d:59:2e:71:f2:5a:
97:91:b0:5d:6d:3f:e4:2f:02:fa:d0:70:bf:cc:88:
b5:97:b5:1e:44:b5:b4:6f:29:a7:f0:d4:92:ce:a1:
39:35:67:a1:4e:97:37:c4:f4:a9:87:e1:5e:5d:7c:
41:b4:be:ea:03:97:68:cc:4b:e4:63:2f:02:b0:50:
f4:03:54:a2:3e:a2:91:29:7e:0b:6b:25:27:00:8c:
cc:51:7b:ac:4e:5d:bc:14:a2:1f:30:ed:24:be:ab:
10:00:52:85:2f:66:ee:f0:2a:98:53:c2:8c:36:c2:
a8:bd:1d:9f:f6:a3:e4:c5:6f:2f:0a:26:42:57:48:
21:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0A:66:E9:D2:DE:0D:77:22:75:9B:EB:68:A7:D7:51:E1:ED:4F:18
X509v3 Authority Key Identifier:
keyid:63:8C:50:9C:B7:7B:01:49:B6:F6:6F:50:19:F8:58:B3:AC:F9:42:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4xQnLd7AUm29m9QGfhYs6z5Quk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/860a5e-e0d0-44f5-9c54-3cc4ff9aa1bc/1/Y4xQnLd7AUm29m9QGfhYs6z5Quk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:6f:c6:10:45:75:30:40:6a:f5:3b:bf:bb:df:e1:75:c9:1a:
1a:21:1d:7c:b7:76:dc:e7:5d:59:dd:66:0f:a8:9b:f6:09:56:
c2:b6:41:94:f3:80:ed:76:57:9d:63:0f:8c:1b:e9:d8:55:29:
e7:8c:17:05:09:18:91:a4:cd:be:ad:82:92:11:e0:8a:2e:aa:
9e:17:de:b4:49:2a:ed:58:1b:69:b6:72:d6:c6:9a:71:91:36:
4e:98:b2:58:ab:22:16:50:02:23:b9:8a:5b:5f:fc:a4:86:9b:
c3:71:e9:3c:ba:60:e3:bb:13:13:8c:c3:3c:93:12:38:d8:77:
c1:77:1f:22:8d:88:d7:ad:1b:90:01:da:d3:e4:4e:55:8e:c3:
8a:7a:c0:4d:e5:96:ff:5d:83:5e:d3:39:d9:3a:4e:df:26:ca:
9f:3b:6f:04:8f:a8:76:3d:2b:ac:08:cb:ed:33:f4:e8:00:72:
d0:83:bf:5f:13:a5:22:07:20:30:a6:3f:a7:a5:09:df:11:37:
31:82:b1:50:b7:ec:a4:9c:84:3b:65:e8:a7:ec:2b:18:d8:0b:
a0:24:9e:92:70:2a:81:df:18:d4:d1:36:6c:03:ee:d6:b6:9b:
89:fc:d0:8a:d7:12:a4:32:c9:76:9e:05:dc:fd:3c:a9:53:22:
42:e5:cb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:00:43 2026 by rpki-client