Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
File: yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft (raw, json)
Hash identifier: sgLKDu5IwOivNBV6xYXV2TZDWxnVR/X0qr5H4dodEsI=
Subject key identifier: C2:6C:2D:73:8D:CF:10:14:56:80:70:BD:42:0E:B8:62:C5:37:E0:0C
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 019DA3E653FBAA56201562969D86AB5EC42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
Manifest number: 08E7
Signing time: Sun 19 Apr 2026 04:01:14 +0000
Manifest this update: Sun 19 Apr 2026 04:01:14 +0000
Manifest next update: Mon 20 Apr 2026 04:01:14 +0000
Files and hashes: 1: 8IDx5l-vl87yboZtOHYH4Nxu2oU.roa (hash: LyXSZWGcyRZHN3eXs85eKbB2V3kbw5mcU0mpJ2FqTj4=)
2: FBT-vF2CcpLQNwXtIK41eliOmdU.roa (hash: d7F1API+Zjp2HL3r+LaBPUl+vvTa147uB3W0MbbAhyY=)
3: yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl (hash: +cpQWPe5833P0+eGtdsRI7glgITyGA6zo2y8CLFDMIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:53:fb:aa:56:20:15:62:96:9d:86:ab:5e:c4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Apr 19 04:01:14 2026 GMT
Not After : Apr 20 04:01:14 2026 GMT
Subject: CN=c26c2d738dcf1014568070bd420eb862c537e00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:57:7e:fd:80:6d:f9:2a:6e:6b:2a:46:a4:bd:
0d:8d:a9:ec:f3:ca:0c:c7:08:23:02:a0:22:40:66:
3d:99:9d:0d:2a:93:10:72:b6:47:ac:d2:6b:d2:af:
17:3a:c3:6e:e4:3c:99:39:32:95:56:53:71:db:f4:
15:04:6f:0a:6b:19:f9:89:df:76:6f:eb:77:86:c7:
5a:e7:0c:62:3d:74:91:6c:9f:fa:f4:f7:dc:5f:c6:
45:4e:58:1f:a8:57:6d:45:ff:a8:31:9b:79:57:7a:
e3:4d:c8:13:0d:37:6f:20:00:31:ed:40:f7:36:fc:
b4:e4:af:4e:22:59:ce:b5:b2:c5:53:83:63:b6:4c:
fa:be:f7:57:28:66:bd:61:34:6a:67:0e:76:c4:90:
b8:5a:40:96:de:81:7c:85:57:fe:03:6a:65:b4:1d:
e5:85:f4:1a:a5:8f:6e:c9:e1:e4:6c:99:a3:ba:47:
a1:ee:30:08:f0:87:18:40:87:e0:10:03:a3:4a:33:
f6:a0:f2:1c:6d:f3:1f:9f:32:d3:44:39:33:48:0b:
1f:6b:95:5b:b8:8d:d9:84:c3:12:9f:41:0f:ac:5c:
05:31:35:d5:53:83:9e:99:a8:6a:16:59:7b:c5:2a:
ef:1e:2f:fa:cf:8d:33:72:c6:aa:38:89:36:39:0d:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:2D:73:8D:CF:10:14:56:80:70:BD:42:0E:B8:62:C5:37:E0:0C
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:30:de:c2:a4:4c:ce:bb:ab:8c:0d:b8:3d:94:64:de:fb:bb:
33:73:ef:19:32:5f:dd:0c:91:f3:63:6f:f2:8b:b3:16:0f:f1:
cf:bd:81:7f:7c:a1:1c:e5:c6:79:3f:ae:55:ce:22:95:52:ed:
ca:e5:88:19:6b:38:78:4a:8e:87:2e:f9:ba:9c:b9:51:ab:28:
5d:22:67:55:2c:7f:f9:21:55:ba:6f:71:14:ad:97:c7:92:64:
aa:7e:aa:48:b1:80:a4:a5:b9:97:2f:75:2f:e6:8d:c4:de:a3:
9b:e5:4e:d8:97:87:47:6a:44:a5:a3:cf:97:80:02:36:38:5f:
96:c9:12:12:23:7d:c3:a6:7c:b2:72:2a:69:9d:98:84:22:43:
01:33:83:13:24:52:f1:d6:c7:d1:08:93:76:22:c1:bb:00:be:
b3:e8:6f:ac:f9:20:7e:89:d9:c8:71:99:89:a8:34:a3:12:15:
8c:21:38:18:71:ce:75:48:25:ca:96:89:8a:f3:6c:99:9a:66:
28:18:87:56:ac:a6:4f:02:ed:79:75:77:e5:f4:67:dd:c0:c6:
83:a2:60:d8:5f:5e:af:71:1e:30:5d:0e:08:09:52:0c:7f:15:
51:32:6e:51:a5:fa:72:b2:9e:a6:d1:e8:db:05:87:9d:bc:2f:
60:5a:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:56 2026 by rpki-client