Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
File: _y4WckY7fxXxKyL4uWcEsEpdvpU.mft (raw, json)
Hash identifier: HpzH3c2J8Ylw4ukD9JBWAB5yQmm0+wx8LvDma0ljtDc=
Subject key identifier: 51:FB:9A:11:AB:63:E8:DF:5D:DE:C2:A1:9F:60:E8:CC:18:7B:5A:27
Authority key identifier: FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
Certificate issuer: /CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Certificate serial: 019D9B87BCA2733369A0F4D64ACB79B351AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
Manifest number: 7E
Signing time: Fri 17 Apr 2026 13:00:57 +0000
Manifest this update: Fri 17 Apr 2026 13:00:57 +0000
Manifest next update: Sat 18 Apr 2026 13:00:57 +0000
Files and hashes: 1: ORD0ibB7Qbi2VAqjn7de--YwbBw.roa (hash: EySJQ7PIleQkWh762AOp7DMGiFBRJZ4vqqitqSVoVfU=)
2: _y4WckY7fxXxKyL4uWcEsEpdvpU.crl (hash: JAFyUPTbv3kMvaMTHnrlZb6I0jsPzd8M8NQkvTZb4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:bc:a2:73:33:69:a0:f4:d6:4a:cb:79:b3:51:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2e1672463b7f15f12b22f8b96704b04a5dbe95
Validity
Not Before: Apr 17 13:00:57 2026 GMT
Not After : Apr 18 13:00:57 2026 GMT
Subject: CN=51fb9a11ab63e8df5ddec2a19f60e8cc187b5a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:64:56:7f:8f:9f:0c:22:d0:f4:60:bd:e5:
41:5f:10:7b:3c:70:e8:c5:ea:e9:a9:16:5c:47:80:
88:66:5b:37:28:4a:7e:fb:fa:f7:c6:0a:df:20:89:
15:e0:70:af:4f:d5:19:f7:ae:0f:9f:b0:45:f7:7d:
79:42:2f:e1:43:a3:13:3f:37:f2:3e:06:83:b6:7c:
cb:d6:f6:21:27:fd:07:3e:1a:2c:08:9c:ce:2f:5e:
59:7e:a7:cd:48:33:4c:e8:91:b8:23:16:23:50:6f:
f3:8a:92:10:45:59:b9:00:c7:0f:af:f3:de:0d:bc:
6d:00:c6:87:a7:af:fe:c0:7b:cf:e7:8d:a3:93:c5:
b7:c0:da:2a:54:8d:fa:44:99:3f:50:6d:73:98:c4:
3e:11:c5:66:df:ef:cf:f0:25:e0:da:ef:59:59:e9:
b3:8b:8e:56:2a:27:93:c6:f5:b2:85:96:79:06:f9:
11:71:7a:a7:23:e8:05:94:3f:ce:ba:06:bc:81:6f:
70:95:58:ac:e6:f3:80:d1:14:26:8c:a7:6c:37:3e:
3c:22:d6:b0:0d:51:f4:00:92:0e:99:59:99:0f:bc:
fd:73:a0:4b:4c:d8:d8:d7:6a:6d:0f:6a:81:59:40:
00:46:f7:10:2c:82:0e:bd:6f:5f:ea:5d:3a:67:61:
ff:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:9A:11:AB:63:E8:DF:5D:DE:C2:A1:9F:60:E8:CC:18:7B:5A:27
X509v3 Authority Key Identifier:
keyid:FF:2E:16:72:46:3B:7F:15:F1:2B:22:F8:B9:67:04:B0:4A:5D:BE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y4WckY7fxXxKyL4uWcEsEpdvpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89e2b5-a1bf-4839-b536-e4456f57d482/1/_y4WckY7fxXxKyL4uWcEsEpdvpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:79:e2:c9:73:45:74:0e:88:98:b1:83:fc:fc:34:03:d4:43:
51:ef:dd:72:34:de:61:44:45:eb:b4:9f:d5:1e:65:26:6d:b5:
2e:08:f8:ee:2d:10:94:84:b3:33:69:ca:27:8e:d3:34:48:00:
be:85:37:b5:81:5f:5f:d0:3f:19:dc:62:5e:97:46:f6:56:fa:
f4:b5:80:1a:53:15:70:4c:21:61:c7:99:fb:c1:99:98:82:60:
d0:d2:00:0e:43:5c:5e:75:db:d1:b1:ba:92:b4:e4:ea:ac:a9:
d5:fa:20:4f:0e:66:e9:b5:a1:dd:07:8f:de:f2:b1:23:8f:fb:
14:d4:02:aa:2e:ee:19:f2:76:4b:0f:27:74:72:c6:94:a9:b9:
88:97:59:1d:4f:76:e1:79:3f:7e:12:ef:30:4f:ae:20:53:88:
a8:03:f7:7b:07:3d:22:55:7e:23:87:21:50:61:e5:76:72:9c:
7a:ec:82:62:42:ce:84:9a:2d:71:0e:6f:76:dd:07:ab:c0:b9:
1d:0a:10:3c:95:23:c2:21:9d:31:0b:a3:70:e9:2a:4b:b6:24:
2a:97:6f:02:09:76:ea:ae:e2:d1:cf:ce:33:09:a5:b1:6d:6b:
54:b8:2c:ab:4f:b2:73:89:68:f5:37:20:0d:43:c4:a7:09:f0:
85:95:53:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:51 2026 by rpki-client