Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
File: yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft (raw, json)
Hash identifier: 5crx5AK7OJqjrIZth8KNbdrD4wahw//qbMUjsEYgUxk=
Subject key identifier: 18:BE:23:76:62:13:A8:C2:C0:8E:2D:F1:B4:3B:72:AE:B6:10:5A:58
Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Certificate serial: 019DD1D1E1993A6721D5971C73DDA0D25D40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
Manifest number: 18DF
Signing time: Tue 28 Apr 2026 02:01:25 +0000
Manifest this update: Tue 28 Apr 2026 02:01:25 +0000
Manifest next update: Wed 29 Apr 2026 02:01:25 +0000
Files and hashes: 1: nr0Fz2tsmF_6TIuYhy0uEGaKhm4.roa (hash: ieUkKa8iQQkbjKfwym0V+JuKCh1x6uVEc/cFA3qAmr8=)
2: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (hash: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE=)
3: yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl (hash: 3VxvPIIAwCwWCAqPSQmomE1NMReVL2tIh9dwOXZGmHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:d1:e1:99:3a:67:21:d5:97:1c:73:dd:a0:d2:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf
Validity
Not Before: Apr 28 02:01:25 2026 GMT
Not After : Apr 29 02:01:25 2026 GMT
Subject: CN=18be23766213a8c2c08e2df1b43b72aeb6105a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:42:75:85:4e:f9:5b:b2:9a:aa:2f:bb:87:
8d:c9:af:8d:2a:ad:66:c6:a9:12:b1:0c:1b:28:0f:
00:64:d7:74:8a:aa:93:e2:6d:9b:75:cd:3c:e3:25:
a5:3c:cc:b1:cc:12:da:de:19:c9:6d:b8:26:6a:d9:
5b:57:09:0e:05:1a:db:d0:27:70:23:c8:a5:9b:3e:
94:f8:9f:9a:be:b3:f9:2e:ec:f6:a5:d0:18:63:7b:
68:7a:5c:7f:46:7d:c8:e5:44:48:12:de:2e:bd:7d:
b6:39:f4:53:6d:6c:82:fa:1a:4a:07:f2:90:ad:44:
2e:a5:7c:66:a8:02:b8:aa:7d:c8:de:b3:53:81:1a:
56:50:45:df:29:8c:31:7d:70:03:4b:86:b0:42:6b:
7a:09:fe:18:d3:d6:e5:bf:77:59:f4:e9:7f:fd:9a:
c1:3e:85:64:6b:09:35:38:19:b5:de:aa:2d:c0:d1:
a6:1d:61:b0:4a:48:9a:e7:c8:f9:03:f5:6d:a9:13:
70:20:0d:9e:3d:bf:b3:57:9c:0e:e3:9b:85:d5:bc:
00:35:ca:43:d9:2e:b2:0b:4d:86:cb:95:a1:18:05:
fa:cc:d9:aa:40:3f:19:a3:fc:af:74:f6:6f:5b:40:
31:c2:83:f9:d0:83:c4:84:b1:1b:3c:7b:0a:85:bf:
0e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BE:23:76:62:13:A8:C2:C0:8E:2D:F1:B4:3B:72:AE:B6:10:5A:58
X509v3 Authority Key Identifier:
keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ea:53:11:c2:e1:4e:b5:e2:9c:80:05:8c:20:63:99:25:28:
80:34:ee:7a:62:39:77:3d:b0:54:ba:29:03:84:2a:9c:7e:3d:
93:ed:1d:68:c5:8b:2d:78:8c:76:da:d5:12:e4:68:7c:a1:2d:
15:a1:8f:79:47:a6:ea:57:0d:4a:77:13:ff:a5:f2:82:4f:40:
e7:c7:bd:3d:a2:51:52:62:d3:94:1d:c4:d9:86:82:2a:3d:c3:
83:32:44:b8:59:e7:83:a8:21:96:6e:e3:19:68:19:a6:c2:dc:
b9:5e:5c:5e:b8:a3:01:28:94:c0:4c:f2:cc:f1:74:22:f0:b1:
eb:5c:a7:49:6d:10:30:97:f4:bb:ed:5c:d9:02:72:d8:d3:c6:
a3:5e:9e:57:5e:3a:b2:57:9a:56:01:e8:4d:ca:95:e2:6a:c2:
fd:a0:31:d3:36:bd:c3:bf:00:58:45:44:36:78:41:9e:a0:2b:
60:c3:0d:85:93:38:2e:9d:71:64:e3:29:60:5a:75:d8:4a:da:
c4:fa:98:31:62:41:4b:fa:03:42:df:ed:6f:e9:b5:8d:c6:bb:
ef:76:bf:fb:1c:c5:a5:d6:99:df:9c:2a:32:0c:00:d1:ae:34:
fa:43:45:8e:49:ce:a6:09:cd:87:ea:50:fd:38:40:66:2c:6f:
f7:c1:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 09:02:17 2026 by rpki-client