Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
File: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft (raw, json)
Hash identifier: FdM+RGG9deW+eL3huErUaEZr0KJzrgzRbkbp7ZZfBDM=
Subject key identifier: D5:68:7E:A8:2C:E0:49:C1:B5:12:C1:14:E3:0B:96:D5:F0:A7:03:BF
Authority key identifier: 63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
Certificate issuer: /CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Certificate serial: 019D97AA7E08060D1E9A9A361A7FEF1D6CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
Manifest number: 123F
Signing time: Thu 16 Apr 2026 19:00:26 +0000
Manifest this update: Thu 16 Apr 2026 19:00:26 +0000
Manifest next update: Fri 17 Apr 2026 19:00:26 +0000
Files and hashes: 1: Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl (hash: m5NvNt0SzEayD8HGv5BnLgAgitraSAvJKIdhtYy+CdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:7e:08:06:0d:1e:9a:9a:36:1a:7f:ef:1d:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6385ebee4363f5ad93366cb28f42fd5b72783e6f
Validity
Not Before: Apr 16 19:00:26 2026 GMT
Not After : Apr 17 19:00:26 2026 GMT
Subject: CN=d5687ea82ce049c1b512c114e30b96d5f0a703bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:80:6d:85:af:b0:b6:7e:a0:b5:78:06:d1:
07:a4:ec:51:5a:28:33:0e:76:c8:64:50:29:e6:4a:
3d:bb:83:aa:1a:eb:19:23:a5:ae:08:63:14:12:a9:
62:4f:08:70:a6:c2:3e:d9:69:e1:81:3b:58:22:63:
f2:b4:01:79:7a:8f:6b:49:48:c3:83:f1:63:a9:0a:
56:f5:c3:5c:0f:5b:fd:2b:d6:fc:b9:cd:83:7b:ba:
89:b2:38:99:f2:ea:c5:0b:03:76:c1:2d:55:c3:8f:
37:ba:06:31:a9:33:5b:67:58:98:9d:dd:53:99:41:
55:86:9c:16:13:0b:1a:89:26:41:45:6d:a4:d8:e1:
ac:c1:e9:b1:16:5f:d8:fa:6c:03:36:1c:ff:9a:07:
61:a6:64:a3:e2:fe:a8:c6:6b:ef:f7:02:c9:40:f9:
16:14:03:ff:3a:88:34:da:ac:9d:a8:77:9f:66:e1:
59:e6:f3:23:4e:49:f9:74:a6:72:37:92:44:17:f0:
57:1c:23:21:40:c9:5d:12:d5:a6:3a:6e:36:07:73:
2d:55:58:41:d1:80:6a:2f:cf:35:f2:07:0c:a3:25:
79:41:59:bb:19:af:36:e1:c0:09:7a:63:42:43:b3:
e5:0a:ef:f0:06:c9:f6:b6:cb:db:83:44:98:6c:27:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:7E:A8:2C:E0:49:C1:B5:12:C1:14:E3:0B:96:D5:F0:A7:03:BF
X509v3 Authority Key Identifier:
keyid:63:85:EB:EE:43:63:F5:AD:93:36:6C:B2:8F:42:FD:5B:72:78:3E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a62cd7-33f2-46a2-8b3e-7d74be6ae558/1/Y4Xr7kNj9a2TNmyyj0L9W3J4Pm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:90:b3:61:8a:f6:23:81:e1:32:c7:e2:8a:33:48:57:98:81:
54:b4:48:fe:20:96:ff:51:d4:e6:1b:59:35:a8:ea:9f:90:4f:
36:a8:71:7b:68:4e:28:8c:05:64:c5:72:66:f3:97:a3:db:b3:
a4:f7:f3:70:58:f4:d1:44:49:0e:99:47:a5:18:14:6e:4f:0f:
cd:4c:a5:64:d0:a9:8f:4c:61:da:24:e6:eb:bf:9a:bc:ee:08:
92:31:a4:52:ec:e9:d7:ba:e0:cb:fa:aa:92:29:4e:0a:60:94:
1c:8d:03:1f:fc:e6:40:2c:fa:3c:99:bf:95:8c:0f:fa:b7:2c:
26:07:88:89:fb:24:1e:1e:60:16:89:80:c6:a8:06:5e:7b:23:
be:eb:b1:4f:53:4b:8b:17:93:e3:d8:7d:78:58:e8:ed:64:75:
cf:02:c3:8e:fb:99:98:60:c9:5d:f2:c9:eb:fc:f1:23:7b:f2:
05:04:20:fb:3c:d1:6b:3b:f1:3e:75:77:af:66:1b:d9:0b:cf:
27:a7:78:fb:48:98:3a:98:24:01:e2:bb:d0:bd:70:82:62:bc:
6a:03:6c:30:a1:01:7c:cd:ae:09:57:22:16:43:22:46:35:87:
b5:1e:6d:5b:b1:11:0e:b2:ee:8e:91:38:70:04:00:c4:f5:5d:
c0:72:38:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:17 2026 by rpki-client