Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
File: yKS714rzY_pb7uYy6L3Ei2KXNDw.mft (raw, json)
Hash identifier: wKZzO/1Jrtqd0+/lL5ebE5AcrJC7Wrs3e40INxy94VQ=
Subject key identifier: B3:C5:B4:FE:2F:DF:38:DA:EC:F7:2B:6D:5E:22:83:C8:B3:2B:69:DD
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 019D99998A9AFA6C8028EBD3A79A482BC0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
Manifest number: 0918
Signing time: Fri 17 Apr 2026 04:01:09 +0000
Manifest this update: Fri 17 Apr 2026 04:01:09 +0000
Manifest next update: Sat 18 Apr 2026 04:01:09 +0000
Files and hashes: 1: yKS714rzY_pb7uYy6L3Ei2KXNDw.crl (hash: A+ecsQVyGiGLxfvE5A8K1qQPnwFNwzT5mZZosu9+Fb8=)
2: ykn6ra4wP0urmcyUyxV1FWZ2Kp0.roa (hash: IJ1D7ZuY9/uNKyGnyBgDEp0dSpIFh5mPiRSScoZkO+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:8a:9a:fa:6c:80:28:eb:d3:a7:9a:48:2b:c0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Apr 17 04:01:09 2026 GMT
Not After : Apr 18 04:01:09 2026 GMT
Subject: CN=b3c5b4fe2fdf38daecf72b6d5e2283c8b32b69dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:e6:08:eb:89:fd:d7:b6:5c:df:79:12:ef:
c1:97:81:43:80:ad:4e:c0:d8:73:d9:1d:2f:ba:5e:
f0:dc:93:f1:16:2b:d4:e2:48:85:23:47:5f:10:ca:
91:0e:d0:e5:bb:4d:1e:02:8e:43:e6:fd:2f:41:d4:
e4:95:54:e1:25:1b:16:98:00:42:17:c6:0d:9b:3c:
26:a4:09:af:b6:3b:75:d8:15:0d:13:5d:e6:cf:f9:
84:85:17:5e:e3:4c:c1:7c:57:69:c0:8c:16:7d:ce:
70:69:71:fe:6e:57:ec:2e:75:ad:1f:02:17:68:4c:
7f:ee:4e:a1:60:5e:bb:02:2b:dc:b8:be:83:db:e7:
f5:ac:81:30:2f:3a:78:94:a8:86:1c:26:f4:7d:75:
af:89:60:53:35:14:d9:2a:f1:e1:ec:db:5f:36:99:
f7:5a:45:3e:46:b9:32:70:33:5a:e4:23:60:de:a3:
bf:2a:38:04:5b:bb:a0:ab:15:04:38:56:59:5b:f8:
99:4a:c5:d5:69:9a:2d:0e:41:94:81:74:93:1c:b5:
70:e0:a0:c6:90:fd:2c:e6:44:7b:ee:e1:3e:90:c6:
6a:87:a5:61:4e:32:ab:23:0e:43:31:a2:f7:49:84:
54:fc:40:6e:b3:1d:b9:af:54:be:17:bf:d2:2b:e5:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C5:B4:FE:2F:DF:38:DA:EC:F7:2B:6D:5E:22:83:C8:B3:2B:69:DD
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:6d:9b:b6:50:24:01:5b:0e:9c:31:38:2d:56:22:d6:39:5c:
1c:4d:80:11:66:cf:b3:14:cb:83:0f:10:3e:2b:4c:de:93:64:
05:71:17:32:28:09:4e:7f:02:69:53:31:6b:2b:93:28:a4:57:
a3:b4:9b:d9:1e:73:c1:f8:ca:20:11:7d:f0:30:a9:72:e7:c0:
99:69:1b:62:0c:e8:47:9f:7b:6a:d8:5b:81:7a:64:80:52:9f:
42:ac:c3:e8:83:2f:b2:03:83:e1:5f:e7:6e:1a:42:4e:e6:d7:
e4:65:d7:12:e3:c3:fd:ff:a7:e2:3a:1a:fd:65:7f:b3:81:7c:
62:bd:e4:82:e5:03:b1:e5:45:6a:59:5d:0c:50:2b:e2:74:60:
5f:95:fe:8a:8d:d5:d4:d4:ee:a5:51:7f:77:ce:8f:8a:c7:a2:
c6:0a:e4:0a:07:37:17:26:82:5b:5f:1b:fa:41:3a:78:03:87:
ad:30:22:9c:0c:fb:1c:2b:63:2d:a2:2c:e1:68:6b:cf:79:a8:
29:11:8a:cd:30:7b:8f:87:51:c5:ef:77:e6:93:aa:a2:91:67:
6f:33:b7:44:ba:18:68:b6:dd:aa:52:c4:2c:99:2a:2c:5f:40:
e2:f4:72:f3:5f:e8:fa:52:06:6e:24:1d:51:49:79:0c:f0:6f:
4a:a5:2f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:30 2026 by rpki-client