Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: c4hIR6VEoRr7OHP5C28L8Ta8+QYce3VWZTfYfpUYxb0=
Subject key identifier: E6:BE:7E:A7:96:B7:95:97:43:F3:D0:04:A9:B8:F1:92:78:9D:21:33
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 019D9E88FEB800F0C58EF24A92F4D391B240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 18C6
Signing time: Sat 18 Apr 2026 03:01:11 +0000
Manifest this update: Sat 18 Apr 2026 03:01:11 +0000
Manifest next update: Sun 19 Apr 2026 03:01:11 +0000
Files and hashes: 1: 7duJmg6XBu7Dkr56DQUbxqUTtGI.roa (hash: vRnmShBspjKGY8+2c67XY2q1Q6Ro3wJjFJL27Iuvolk=)
2: XNV9wPAqysMBIC2XJGUuQeljvGQ.roa (hash: flffQRMNH+W2jDu27k/I1V7GhHYoHbxfArajhLjcHkc=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: qL8fI/N1v9j5awoRohY9V1/+ajmYekLJGUJMWxtA8qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:fe:b8:00:f0:c5:8e:f2:4a:92:f4:d3:91:b2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Apr 18 03:01:11 2026 GMT
Not After : Apr 19 03:01:11 2026 GMT
Subject: CN=e6be7ea796b7959743f3d004a9b8f192789d2133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:00:0f:50:77:94:b2:22:ae:dd:66:5d:62:
1a:fa:f4:c1:ab:a8:da:15:56:b7:0b:d8:f0:32:f4:
8b:f0:fe:69:4d:23:3c:6d:a0:66:be:45:87:0c:a5:
98:7d:9b:8f:69:14:ea:78:5b:40:30:72:b0:db:67:
a6:8a:ba:fa:d0:02:82:31:08:fb:b7:60:45:4a:97:
af:01:1e:89:43:10:5d:de:10:e1:d8:c7:31:ad:33:
52:12:23:41:0b:9d:b2:fb:25:b1:e5:c9:25:9c:bf:
fe:76:d6:8f:12:0a:b4:a8:16:e6:be:6c:28:6b:98:
02:d1:ae:67:a4:2e:f0:fa:25:bd:ef:86:97:d1:22:
fb:14:b1:0e:21:10:ad:12:fd:38:ff:b3:6c:40:75:
13:39:d1:17:c1:26:e5:f1:fb:6a:6f:2c:07:7d:6e:
c2:81:21:0b:0f:62:f9:2e:04:91:12:8b:6f:af:04:
8a:c6:91:ba:d3:5a:e8:81:2b:24:e3:c4:45:ad:7f:
a1:22:88:6c:66:40:58:fb:db:2a:31:01:93:4f:dd:
15:65:7e:3f:2b:3d:e6:40:4f:04:1b:da:cd:f7:64:
e9:1f:a6:31:a3:25:aa:28:6e:89:0c:15:36:57:a4:
d4:aa:44:cf:67:4c:d2:c1:ee:54:8c:00:4d:e7:a3:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BE:7E:A7:96:B7:95:97:43:F3:D0:04:A9:B8:F1:92:78:9D:21:33
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:60:a2:21:42:92:3b:43:0c:ba:33:38:c2:28:10:d4:d3:98:
9c:7f:14:bd:87:96:43:64:ea:f4:d5:40:48:9c:5a:53:2e:39:
66:85:45:be:99:de:cd:b5:c9:e4:33:d6:25:b6:32:93:92:0a:
af:c7:17:fc:27:84:38:c5:cf:74:64:3b:4b:8d:09:c2:f3:02:
69:f7:41:5e:10:82:29:3b:85:04:4e:92:b3:6c:bd:ec:75:9a:
cd:c7:60:1a:30:42:9a:b3:ec:77:1d:00:d6:d5:2e:d9:a5:04:
eb:7e:a9:df:4e:b7:ff:85:f1:46:33:73:f3:bb:f0:12:c2:91:
c0:0b:b0:c3:3b:fb:1d:96:29:00:30:96:b6:3d:65:68:e5:fb:
2d:66:10:41:5f:b6:25:f7:d4:46:d3:a1:af:ec:53:4d:57:92:
99:2b:f6:33:fd:cf:80:18:b9:ae:4d:fb:ec:54:a1:18:be:07:
c1:b2:02:9d:da:f1:7a:fb:4d:80:85:19:fe:bb:8a:0c:d9:64:
53:50:ba:74:15:fe:a5:b4:f7:88:e9:26:93:c0:8b:dc:52:95:
af:3d:2e:96:d6:78:d7:24:60:0c:b4:d4:93:ea:58:d0:ff:e0:
c7:90:7d:74:b2:1d:91:93:30:1d:41:d5:d4:1a:ef:dc:cc:76:
e8:90:8b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:53:41 2026 by rpki-client