Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: lLp0qJEV4U8TWCoRmlGMMvLEv+88FPev2CvEXf4irU0=
Subject key identifier: 35:0C:F3:17:C6:FA:FA:76:7C:5E:21:A0:C9:15:04:04:F0:FB:D6:2F
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 019DA3419598EFDE8A1E90BA67F1345D1DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 0816
Signing time: Sun 19 Apr 2026 01:01:17 +0000
Manifest this update: Sun 19 Apr 2026 01:01:17 +0000
Manifest next update: Mon 20 Apr 2026 01:01:17 +0000
Files and hashes: 1: 4gDbD6p8Hecme3nj2mVq2yo0wcQ.roa (hash: new/XwK7LDSQZ29SSLejk2ZrF4hRfXE6iD6WKPwdrVA=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: 7vIJ2sG37I08EHtfb6dG9tjMxwwytYAC+MV2FPklL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:95:98:ef:de:8a:1e:90:ba:67:f1:34:5d:1d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Apr 19 01:01:17 2026 GMT
Not After : Apr 20 01:01:17 2026 GMT
Subject: CN=350cf317c6fafa767c5e21a0c9150404f0fbd62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:58:3a:d7:89:c0:56:4f:38:ed:6e:07:e3:
91:9c:b4:e4:dd:92:63:3d:e0:98:eb:44:60:d0:9a:
d6:82:35:bf:a1:b9:66:79:86:cd:6f:ae:88:c3:d5:
4c:9b:19:53:56:7f:86:e0:24:9b:2d:1b:da:78:3e:
65:7a:5e:c2:6e:10:40:bd:8c:6a:f5:43:30:07:f3:
09:65:bc:40:9f:d9:56:de:4f:bd:4b:32:77:9b:fe:
3b:c2:66:b0:19:91:f9:81:8d:aa:b0:cc:0c:56:25:
9c:29:2f:fc:75:35:d4:b7:7e:63:91:7f:cc:b4:2b:
14:62:e5:c6:7a:89:ba:1c:d3:01:3e:93:98:7b:f4:
ad:ea:69:54:ce:99:e7:00:2e:57:ec:1a:cd:b7:dd:
c6:a4:41:b0:51:53:37:79:4f:0f:bf:4d:f0:42:83:
35:a5:97:03:26:30:15:9f:41:2c:92:64:d9:a1:7d:
18:9b:b1:3d:5d:2d:a7:8c:b6:b5:ac:f2:d3:a2:68:
d0:dc:83:8c:dc:3a:f9:ad:86:40:a8:da:bd:be:9e:
56:8f:91:db:57:7a:36:fb:e4:c8:95:d2:68:f1:10:
b6:a0:ba:c9:e5:4a:5c:20:ee:a8:1b:61:a2:d8:ba:
6b:1f:62:e3:8a:8f:bb:f3:29:35:9d:6a:1f:08:9a:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:F3:17:C6:FA:FA:76:7C:5E:21:A0:C9:15:04:04:F0:FB:D6:2F
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:40:34:04:da:36:2b:c7:76:0f:e6:9a:3b:a4:e0:86:94:4d:
12:fc:ff:39:4c:5c:f8:a0:ed:07:61:0c:81:2e:30:27:57:89:
99:49:e9:f6:cc:0d:03:83:e4:1f:d4:c0:db:15:1f:01:a6:7a:
70:e7:92:65:f2:db:f1:e0:35:5c:e9:29:f0:21:d6:ec:cf:09:
cd:3e:18:95:1b:f2:e9:56:5e:7c:2c:73:01:82:24:dd:4f:38:
a9:8a:0a:1c:39:a6:de:cd:5d:8b:f3:d1:08:22:bc:9e:76:75:
33:6d:71:b8:7b:08:9d:a4:c5:15:a0:1e:53:30:8e:7e:30:04:
04:c6:15:93:01:f5:a5:d8:40:73:f8:c2:2b:8e:99:f6:0d:a0:
bc:64:0d:06:bb:17:8e:34:a5:8e:83:ed:dc:3d:3c:0b:60:86:
bb:7d:b2:61:a2:77:53:21:52:ff:2d:8f:a9:5e:06:46:f2:26:
36:f9:52:02:98:d7:d0:85:03:cf:f5:3d:25:79:48:2e:cc:64:
20:a7:ce:71:55:c1:1a:c8:f9:27:08:00:69:59:02:ac:b5:e2:
cf:bb:16:a7:12:f2:f4:5f:f0:7a:70:9b:28:4e:46:be:08:e7:
c4:bc:43:9b:b3:d6:bf:c6:63:74:b2:b1:0c:fa:1a:b5:19:f9:
39:22:09:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:16 2026 by rpki-client