Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: yMPbDrX3RPJd0CHZPMU9UbnDIMFOMfJ45Hp+rNbexfE=
Subject key identifier: 44:9A:50:C3:C0:AE:B2:33:9E:7B:89:FD:DC:F8:DB:DA:CC:1B:A2:20
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 019D996293877F25A01BB71986383302ED33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 07D3
Signing time: Fri 17 Apr 2026 03:01:07 +0000
Manifest this update: Fri 17 Apr 2026 03:01:07 +0000
Manifest next update: Sat 18 Apr 2026 03:01:07 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: TyHc+VzBmYWPXyfZQ22WwF13z1Lzcr7pqhzVovn+r0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:93:87:7f:25:a0:1b:b7:19:86:38:33:02:ed:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Apr 17 03:01:07 2026 GMT
Not After : Apr 18 03:01:07 2026 GMT
Subject: CN=449a50c3c0aeb2339e7b89fddcf8dbdacc1ba220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:cd:d9:8b:8a:5d:69:bd:7d:26:3e:98:33:
82:7d:91:8a:62:de:3d:90:63:62:32:30:e7:97:de:
4f:3b:55:4e:58:c7:86:53:a8:23:e9:03:cb:43:ed:
23:d9:38:e3:3c:6b:8c:86:30:62:c6:5b:1d:ab:7c:
76:c5:50:b5:ed:fd:b9:20:81:57:e5:6f:e3:53:5e:
d4:fa:d1:8f:05:54:43:1d:01:5c:c6:56:05:0d:7b:
60:3c:9d:6b:5c:a9:11:24:6b:61:f3:38:79:b0:87:
b6:b6:61:6d:bc:6c:b2:06:db:e7:1e:b1:27:de:19:
83:62:48:d7:30:ba:2d:dd:55:07:fb:f4:b2:7e:f2:
c4:81:99:64:10:aa:41:07:01:74:31:f5:51:54:c1:
44:a8:38:3c:45:f8:a6:a9:59:3b:a2:37:2a:d4:c2:
59:31:75:3b:d2:84:00:fa:9f:f9:13:f9:72:cd:c6:
b7:28:b5:16:36:f7:72:04:23:d4:f0:24:26:6e:96:
87:4e:4f:d3:15:dd:46:53:5f:71:51:04:6f:c5:5c:
0a:cd:7b:f9:b9:ce:2e:a4:4f:b1:e6:d6:8e:81:f7:
09:4e:23:c1:fd:6b:71:68:dc:1f:04:0f:fe:7c:42:
40:57:12:75:b0:88:74:5d:ba:68:5f:bc:70:79:23:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:50:C3:C0:AE:B2:33:9E:7B:89:FD:DC:F8:DB:DA:CC:1B:A2:20
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e5:28:e3:d0:ea:4b:e4:66:6b:75:43:2b:1b:d1:2e:41:d7:
1e:86:95:b6:8c:4d:bf:1d:f3:2c:f3:a5:80:42:cd:cf:a1:d1:
a8:ed:bd:cf:da:6c:d2:b6:64:0c:e8:67:f2:cf:2d:4a:f9:37:
ee:f4:a7:f1:f3:fd:6f:e4:35:74:f5:b9:cb:e7:65:b8:ca:3e:
ae:e0:6c:97:fe:48:b6:c6:25:45:b8:21:69:0a:4a:1d:26:82:
75:fa:e2:5f:f2:da:0b:dc:91:a3:41:3d:76:e8:fd:b6:a2:ab:
97:ef:4e:c5:a7:6c:56:22:65:10:cf:44:8a:d1:2e:9c:8e:88:
8b:6e:81:b8:3d:76:c8:88:27:ff:b5:02:4c:3a:1d:df:dd:89:
e5:c9:14:a3:63:6a:df:3c:14:35:b1:36:04:6a:af:cb:04:ad:
e9:e1:0e:34:f0:79:25:9f:dd:6f:c5:ae:e2:a4:d0:5c:d8:9f:
e6:61:8a:7e:07:df:ce:e8:38:5d:14:02:ba:b8:06:d2:91:fb:
ce:56:69:40:84:28:05:0f:40:d0:db:17:bd:34:7a:d1:79:fd:
d4:82:92:e1:28:bd:3a:c0:5b:ee:d9:ce:0a:58:1e:e3:d3:aa:
db:ae:8f:26:a1:33:6b:2d:2a:fb:c5:6d:58:9c:3c:7a:a2:38:
9d:73:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:42 2026 by rpki-client