Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: fk84B6BXPK9mSzlipNbwedSj9lUvGBYXGzVqJQCZj0o=
Subject key identifier: 62:80:8F:8E:52:C3:84:68:39:1E:A2:60:E4:18:22:94:91:1C:20:F9
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 019D992B0C8F3944C11FCCED20A8113FD668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 135F
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: Qt8hBCMlNLI8nIk_LiMf9y2OnJw.roa (hash: GjRUGfRDG86hd7K9wU5XQ1rme8zCmD1Q06yAXGf5F6Q=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: 5UTPb+gHBIdb8NSHD4dOEZIs1mfraG8onXWsXJ8ehfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0c:8f:39:44:c1:1f:cc:ed:20:a8:11:3f:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=62808f8e52c38468391ea260e4182294911c20f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:d9:3d:5b:d4:45:1c:ba:51:45:e9:66:4d:
88:ab:0c:bf:22:95:2f:43:2a:fb:3d:c1:ce:e4:5d:
e1:75:64:27:91:af:d3:05:3b:8c:95:6b:a1:96:80:
4d:05:37:7e:28:f6:b2:31:41:73:df:b8:47:0b:b9:
0b:1e:e8:35:87:82:c2:c0:29:1e:cc:bb:9c:9d:82:
89:c1:bc:02:47:69:4a:85:64:6a:6e:5c:9c:89:4a:
fb:b1:b2:3e:46:82:eb:6f:c2:cf:30:6c:66:63:10:
26:52:03:91:e8:a8:18:38:e0:93:e9:23:21:fe:4d:
e2:29:2f:a1:a3:7d:2e:f6:ed:be:52:d6:45:64:d4:
6b:9b:02:23:8a:f2:50:ee:66:cb:4e:af:80:9b:4f:
db:31:5b:f0:13:cb:b7:05:b5:f5:fb:00:4a:0e:38:
0f:90:b9:12:91:6a:34:3f:24:a1:fd:a5:49:cd:5a:
e0:3a:f0:66:d1:14:90:d4:f2:8a:df:2f:43:f9:18:
cb:2c:c7:ed:aa:21:4b:38:12:af:52:22:76:b9:37:
11:af:46:c9:03:16:d1:4b:06:11:48:c1:7b:0e:67:
76:84:80:2d:96:4d:46:a7:8d:3e:bf:01:1c:15:84:
2d:51:ff:09:66:d4:01:03:69:f9:b5:b0:a9:af:4c:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:80:8F:8E:52:C3:84:68:39:1E:A2:60:E4:18:22:94:91:1C:20:F9
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:35:5b:9f:a2:b1:76:34:9d:5f:68:76:99:45:52:b2:b8:
86:86:3c:33:35:9d:12:36:a1:3c:3f:2f:f9:9c:17:42:54:6d:
df:98:e3:30:33:a5:6b:a0:3e:57:6e:28:cb:95:a7:b0:e1:28:
4b:01:1c:c8:8a:5c:b1:f5:9b:04:56:16:36:ae:3e:cc:71:9d:
40:65:97:ec:98:82:24:a4:af:0b:ce:76:90:4e:0d:aa:92:e4:
00:55:3e:b4:8e:ea:86:ee:b6:55:3e:f0:f2:a2:8d:aa:4c:cc:
dc:c8:de:5f:a4:ff:7a:c2:86:2e:e5:ee:2d:7a:4b:b3:30:de:
d6:24:9f:f1:06:87:52:04:bf:a5:90:d7:6b:e2:9f:40:02:55:
4e:41:9f:dd:af:c8:1a:54:75:40:82:86:53:9b:ca:f5:13:24:
01:c0:86:75:e3:8c:12:cb:09:70:c3:c6:67:34:77:da:6c:a3:
5c:49:7e:a8:13:0b:0b:8a:34:4a:1f:1a:8a:d3:89:d7:85:ab:
78:76:2c:11:2b:7a:5f:b0:09:20:92:e1:28:f7:77:90:03:64:
30:36:91:9e:82:16:45:89:ce:f9:e0:b5:b7:dd:53:b2:d8:5c:
20:c6:a2:30:9c:10:be:37:0f:33:66:cb:87:9e:41:40:df:2e:
a9:6c:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:58 2026 by rpki-client