Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
File: yBEbEYJKUeh1t-BnsErHj97koRw.mft (raw, json)
Hash identifier: zqUkmna375LukTo51cVixruPuPJfhc3sWvsycM1g9bI=
Subject key identifier: CE:2B:26:80:19:99:CB:23:CF:1F:04:A6:2D:10:73:E8:10:D4:C8:24
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019D9BBF2A91A4E1E8C40F94B4274BAC8B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
Manifest number: 4E
Signing time: Fri 17 Apr 2026 14:01:29 +0000
Manifest this update: Fri 17 Apr 2026 14:01:29 +0000
Manifest next update: Sat 18 Apr 2026 14:01:29 +0000
Files and hashes: 1: a6qm2G8bP-6TfcIWHf4qN9k0lXk.roa (hash: AAGltJSHEt26RftxskOpRrCiKKvAykf8bEWROHtz0kQ=)
2: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (hash: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=)
3: yBEbEYJKUeh1t-BnsErHj97koRw.crl (hash: eSZi5xXY0zBi4jE0cRwrNmSTUaJG9xznH7IdqO8ycHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:2a:91:a4:e1:e8:c4:0f:94:b4:27:4b:ac:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Apr 17 14:01:29 2026 GMT
Not After : Apr 18 14:01:29 2026 GMT
Subject: CN=ce2b26801999cb23cf1f04a62d1073e810d4c824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:40:71:29:aa:6a:d1:2f:cc:c4:ad:90:bc:
8c:17:66:29:22:91:97:d7:df:00:63:40:64:93:23:
e9:34:10:95:3e:6f:94:ce:06:51:5b:12:86:c7:91:
fc:c4:8c:5a:e5:eb:d7:82:a1:75:e7:a2:3b:cc:5c:
b0:3c:5e:4d:33:64:34:2b:49:ef:cf:77:15:7c:a9:
8a:6f:f3:9c:0b:b3:61:98:55:33:4b:8a:46:98:c6:
90:a7:cb:96:49:84:9e:a9:05:df:6f:9f:47:bd:13:
57:d3:1b:c7:e8:97:c3:47:82:85:21:95:cf:1d:e5:
d3:e2:41:23:2a:22:1e:bb:0b:72:00:b5:18:80:72:
cd:58:3e:fa:00:ee:68:f6:5c:29:af:b2:6e:e7:47:
0f:20:c0:ee:ef:35:48:99:3b:cb:63:c7:c4:f7:8a:
a0:25:e7:b0:09:8f:3e:78:3d:d9:63:5d:71:6a:12:
ca:43:0b:ae:84:45:57:13:06:79:95:46:9f:d2:b8:
ab:26:d5:c9:5a:1f:9c:0e:64:ee:a5:bf:11:31:22:
57:a6:f5:ce:a8:f7:22:02:38:fa:e7:56:68:47:80:
bd:b8:71:ce:bd:b7:41:60:5a:09:9a:67:2a:b5:a1:
7d:60:05:fa:0e:a8:1f:34:1f:63:81:d2:98:fb:2d:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:26:80:19:99:CB:23:CF:1F:04:A6:2D:10:73:E8:10:D4:C8:24
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:33:d4:71:60:9f:49:2f:2a:5e:02:c8:19:81:8b:0d:2a:57:
4b:d3:6a:9b:cf:2a:f0:9b:d7:3b:48:06:68:12:8e:cf:03:53:
78:2e:df:9f:b2:9e:65:12:f4:43:ec:ad:1e:8a:e6:fc:0a:fe:
6e:7c:e1:d5:5c:cb:7c:88:c7:2e:39:ad:22:23:59:b2:1a:03:
6a:b8:83:51:98:73:4a:60:c8:1f:3c:2c:58:5b:bb:c6:0a:18:
ba:84:65:27:b4:e6:af:bc:26:bd:2d:32:91:d4:ec:a0:3b:c4:
17:01:e0:df:e1:8f:9d:98:d2:9c:a5:04:fa:37:2e:89:a8:f2:
22:a8:7e:32:a8:db:54:13:fb:9f:42:c1:f0:6a:d7:42:cd:eb:
4c:65:e4:85:bd:92:b7:db:74:2b:a0:74:5a:5b:a4:44:e3:a8:
6b:01:85:be:58:c2:ed:bf:51:72:31:5b:74:0f:02:b3:9c:b7:
6b:fe:a2:7a:b5:26:2b:c8:eb:0d:85:2b:6b:08:07:86:f3:03:
3b:2e:b2:7a:de:b4:d9:7d:e6:54:1f:fe:d0:db:7f:86:03:c1:
bf:b7:86:c5:de:62:61:8b:69:92:41:10:9c:e1:90:0e:5d:da:
d7:61:90:8c:e9:d1:9a:be:94:c6:5a:f5:a5:8d:a5:24:d1:8b:
da:6e:53:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:03 2026 by rpki-client