Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
File: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft (raw, json)
Hash identifier: PBXsytic5GbhmR3tPPdmMZ8iQIFrmWXRroUEdUM8Cds=
Subject key identifier: CE:4F:4C:40:E0:85:2F:A2:D9:A9:DF:AF:79:BA:A5:03:45:D5:09:B1
Authority key identifier: CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
Certificate issuer: /CN=cbf74cd846493138f522c57c0065b5c60512dd09
Certificate serial: 019D9999983EE4F35EA3584C0611E3AF47B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
Manifest number: 17CF
Signing time: Fri 17 Apr 2026 04:01:13 +0000
Manifest this update: Fri 17 Apr 2026 04:01:13 +0000
Manifest next update: Sat 18 Apr 2026 04:01:13 +0000
Files and hashes: 1: 7wFOH7ecwAxbcPrjKMH8DMVlPm4.roa (hash: oDFpn/TpGeL3vgneJ/VQgGBHX/EOeGEzI4ysPf7pfaY=)
2: QLOd9vMTP4FPhghSPou0JbJuhUE.roa (hash: RwuImmn6QOcjTBNhpw2cK0vTsfjOTjWE/72ESbcTKQg=)
3: Y-pJ0zt5xFwsfApM5zD_msTaIqQ.roa (hash: a+YKFLuDobsKmaDDpSgIi2ckC2hwZqdDdY5fKql5U+8=)
4: oBXcY9E5U1GBb72h8m09mGmm-Vo.roa (hash: 9fw2PFDyEVoaxUE4CEIY7mthU2LIqsQo2HGJzEoheK4=)
5: y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl (hash: FU1a19dRmmmtDjS8YRgpNs+Rh0Ouoaa3X4YGuFw+0OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:98:3e:e4:f3:5e:a3:58:4c:06:11:e3:af:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf74cd846493138f522c57c0065b5c60512dd09
Validity
Not Before: Apr 17 04:01:13 2026 GMT
Not After : Apr 18 04:01:13 2026 GMT
Subject: CN=ce4f4c40e0852fa2d9a9dfaf79baa50345d509b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:17:a3:de:22:6d:80:8d:11:70:75:db:27:
de:90:fd:e3:a3:f5:25:4c:57:55:df:3e:bb:81:58:
e1:ef:5e:29:15:cb:41:a3:0e:bd:5a:87:23:28:bc:
01:3a:4b:d6:e6:de:08:ed:8f:5f:e6:f0:70:24:8a:
43:ae:1b:0e:41:1a:9a:08:88:60:3c:32:41:31:6b:
cd:c6:9b:67:a3:15:4e:91:ea:48:1e:23:8d:57:1e:
ed:c9:56:20:c1:33:30:a3:e8:8b:1f:56:d5:9d:08:
be:36:2a:28:7d:a4:1f:13:8c:05:39:62:28:82:75:
ba:52:29:5e:4e:0e:ea:76:ba:3c:f5:16:4d:c5:0f:
71:c7:a2:c9:32:f8:07:50:e9:c7:ec:0c:c6:0b:81:
2d:97:1f:28:9b:48:3d:35:1d:36:3a:07:40:94:8d:
6b:f2:ef:46:ee:69:79:04:e7:16:25:58:5e:a8:64:
00:14:7c:c2:66:07:88:c5:86:1f:1f:bb:34:7f:92:
d2:e4:2c:01:fd:b9:d6:52:75:da:d4:db:37:49:5a:
94:7f:4a:8d:15:6e:57:8d:7b:23:57:67:6e:d7:b0:
3c:26:23:01:23:e8:75:f1:3d:de:95:f6:1b:46:bd:
52:b2:7b:d4:32:6e:fc:f6:5a:38:19:77:d8:b8:87:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:4C:40:E0:85:2F:A2:D9:A9:DF:AF:79:BA:A5:03:45:D5:09:B1
X509v3 Authority Key Identifier:
keyid:CB:F7:4C:D8:46:49:31:38:F5:22:C5:7C:00:65:B5:C6:05:12:DD:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/348789-3208-4847-9c3f-982d1f21a32b/1/y_dM2EZJMTj1IsV8AGW1xgUS3Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4a:3f:d6:d2:b0:2f:00:f9:e3:72:3d:7e:d5:72:bf:7c:25:
51:89:cf:b3:f0:2f:42:1e:d5:31:ca:d4:ba:8f:78:37:c3:ed:
0a:7f:49:aa:1d:4d:f2:b8:95:dd:cc:a5:75:85:24:02:0f:9d:
ed:32:05:04:21:e7:1d:6b:42:89:0f:a0:a4:5d:89:f8:77:21:
6f:76:8d:d8:da:b2:ba:f9:5c:27:94:c1:98:92:6a:ab:6f:a6:
2c:67:bc:bc:4c:78:3f:b0:6b:7a:3a:52:97:20:b2:dc:94:5d:
a7:b8:13:d8:b7:3a:f8:26:6d:49:a2:bb:40:0c:c9:bf:a7:68:
f4:85:42:63:01:a9:53:6f:7f:e9:f2:60:64:58:dc:8e:72:3d:
13:2e:0a:63:59:1f:7a:8d:44:25:30:79:df:33:14:e4:69:05:
1d:df:4d:0c:ab:b8:26:eb:4e:d7:87:0a:03:ff:97:4a:54:20:
d2:0e:be:97:94:85:fd:04:2c:8e:c4:a8:d4:21:36:75:02:33:
11:ac:05:a6:f7:73:c9:d3:e4:97:9d:a7:9a:a7:ac:74:7c:63:
28:22:86:eb:d3:7f:13:5a:89:8d:c1:6d:45:15:9a:57:52:84:
27:83:3a:cb:2a:5e:e7:e5:e1:d4:f9:3f:c1:68:ad:54:d0:34:
76:44:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:28 2026 by rpki-client