Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
File: yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft (raw, json)
Hash identifier: eBRhe8rDiQO+eW4n2BH62c9XRCZDCcZG1e1C6qfsMbo=
Subject key identifier: D4:D7:7D:B3:2E:BE:83:01:BB:11:C7:78:67:13:9E:85:22:4B:93:AC
Authority key identifier: C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
Certificate issuer: /CN=c87fefb4db5746680ad6036934662e236ca77772
Certificate serial: 019D9AABC8654C26B0333714B98AAD8CD404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
Manifest number: 04EE
Signing time: Fri 17 Apr 2026 09:00:42 +0000
Manifest this update: Fri 17 Apr 2026 09:00:42 +0000
Manifest next update: Sat 18 Apr 2026 09:00:42 +0000
Files and hashes: 1: QWfQGr4z8VEUuY5YGNgr59n5bZA.roa (hash: lETgMikwnnnSO1uZ9XbjvLYBMxyEwNCLWUmrzKcWQbI=)
2: yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl (hash: PmSMZTYrwxSNgl0soFk8AYbGVq1tQgCg+XRXP7o11gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c8:65:4c:26:b0:33:37:14:b9:8a:ad:8c:d4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87fefb4db5746680ad6036934662e236ca77772
Validity
Not Before: Apr 17 09:00:42 2026 GMT
Not After : Apr 18 09:00:42 2026 GMT
Subject: CN=d4d77db32ebe8301bb11c77867139e85224b93ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:13:28:b2:d2:cc:5c:f2:81:11:d7:e3:89:
4f:a2:c0:bd:4a:31:4f:7c:8e:ea:50:14:5b:36:68:
03:00:f7:94:d5:a5:6b:c5:bb:8e:f0:fd:9c:48:9c:
8c:8c:cd:12:12:93:09:bc:d0:0b:c2:24:11:99:b3:
65:5d:19:09:22:81:a6:48:b3:8c:01:3d:0c:cc:b1:
50:4f:e1:0b:e9:ab:71:31:ca:b2:6c:0c:bf:bd:9b:
24:9c:f8:f1:45:fa:8c:81:f3:b3:94:1d:3d:19:51:
66:b7:c0:f3:32:e1:49:78:c8:5d:5c:92:7d:09:8f:
5c:48:9d:44:c8:bd:06:61:56:4c:3e:2c:79:b2:3d:
5b:e6:df:6d:b2:91:ef:2f:14:52:df:1e:77:b1:50:
04:c2:08:0a:ea:67:bb:ad:b9:b3:9c:98:6b:3d:4a:
65:3e:e1:9b:2f:2a:69:b3:a1:d2:46:73:5c:8c:05:
ea:2c:bd:ba:72:87:13:50:4f:e4:8f:64:06:75:ac:
ee:a9:9b:89:24:71:d3:87:70:37:9d:df:f3:0a:b5:
45:49:de:5d:90:bc:3c:57:0c:9d:31:aa:69:9e:0a:
23:a8:23:a2:3e:23:50:1c:09:5a:8d:89:80:60:72:
ae:ff:eb:64:2d:1f:9f:3f:ef:59:8c:6e:d3:af:c6:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D7:7D:B3:2E:BE:83:01:BB:11:C7:78:67:13:9E:85:22:4B:93:AC
X509v3 Authority Key Identifier:
keyid:C8:7F:EF:B4:DB:57:46:68:0A:D6:03:69:34:66:2E:23:6C:A7:77:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yH_vtNtXRmgK1gNpNGYuI2ynd3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/076838-5547-4b98-82bb-6950c1cb8879/1/yH_vtNtXRmgK1gNpNGYuI2ynd3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:80:75:c7:48:6d:73:20:31:ba:f9:5c:0a:f8:a7:b4:46:
82:46:00:69:94:b9:dc:f2:45:3b:3c:24:f4:0d:25:1b:91:10:
81:25:b2:ad:14:f4:91:13:94:23:06:07:7c:d1:54:4d:4d:4b:
a4:e0:7c:6b:88:50:99:98:a0:17:77:6f:fa:de:a4:91:87:74:
5a:53:e6:52:cd:b6:bf:3a:b0:46:c6:32:3f:f1:e1:ac:a4:8b:
10:c3:31:ff:ae:ac:a6:ef:40:fc:53:ad:13:b4:6b:8c:11:2c:
df:bc:13:bc:76:27:2f:30:97:ac:1c:71:a1:a4:c0:bb:f2:fe:
f2:27:a3:a0:d0:18:7b:cf:7d:8c:f0:a3:a2:03:c8:23:01:b7:
99:56:6f:ba:c9:ae:7f:d4:58:c4:2e:a4:04:35:99:0a:47:cd:
1e:5e:7a:d4:7a:1a:f4:b3:80:8c:2c:0b:e5:30:59:fd:4f:1a:
af:e5:e5:e6:b9:5f:51:5d:21:87:57:f8:d5:b5:75:23:3a:73:
6e:b0:41:d7:d6:ff:f8:be:de:a2:09:c2:51:61:76:8d:fd:c3:
bc:b3:20:d0:90:fd:df:d6:f8:bd:b0:d9:93:58:8d:d4:48:31:
4e:fa:99:49:8d:8f:9e:16:d4:27:30:2d:ff:17:55:23:47:f2:
92:9b:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:42 2026 by rpki-client