Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: R/R4vO3tvB9//f7konGLuQJGM5AMHdWZ8Qm+rRVhANk=
Subject key identifier: B7:FF:1A:E8:89:AC:25:FB:65:AD:1D:82:77:77:B3:B7:0C:5F:4F:10
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019D9C2CCC3B4E0C8FBF759D3B8D594DEAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0EC4
Signing time: Fri 17 Apr 2026 16:01:14 +0000
Manifest this update: Fri 17 Apr 2026 16:01:14 +0000
Manifest next update: Sat 18 Apr 2026 16:01:14 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: Ef60xlyu1CczlEQQzW54aiMVSEY+omkbAU6XGpA9VsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:cc:3b:4e:0c:8f:bf:75:9d:3b:8d:59:4d:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Apr 17 16:01:14 2026 GMT
Not After : Apr 18 16:01:14 2026 GMT
Subject: CN=b7ff1ae889ac25fb65ad1d827777b3b70c5f4f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:6c:40:bf:46:bc:58:b9:63:3e:06:f0:e1:
c5:10:34:ed:ca:bd:cc:58:6b:a0:1b:0c:73:c7:31:
36:1c:5c:27:80:85:22:66:2e:29:88:59:8c:f5:a9:
2f:12:1e:d3:23:35:bf:a0:4e:19:58:52:80:65:35:
3c:eb:df:16:89:1a:7c:11:36:c8:4b:c2:03:82:27:
a1:0e:f9:ce:a5:a1:d4:6c:11:c7:1c:1c:a4:da:29:
60:31:56:5c:de:a1:9e:a8:94:6b:18:46:77:5d:c5:
5c:57:75:b5:ec:37:8b:35:91:7a:7e:7d:7b:08:7a:
d6:8c:c7:cf:81:c1:e1:20:eb:cf:65:47:19:07:86:
dc:57:d9:4f:eb:4d:34:16:67:83:1f:1c:01:3c:61:
28:21:d7:e8:b1:92:1d:d6:7f:6a:1e:3c:15:cc:77:
5b:91:a1:d7:c9:86:f5:ee:f9:0a:c6:49:ed:a4:77:
87:aa:de:7a:80:f0:17:06:df:27:4a:31:e9:1d:e2:
b0:62:4f:8a:46:c4:68:a2:41:b1:ee:33:c8:5e:c7:
6b:e7:06:b8:12:e9:6e:23:03:a4:9f:e5:6b:ca:19:
8d:a9:c7:d2:82:ab:ec:dc:ef:a3:80:18:26:65:0b:
cd:af:be:f4:a0:8f:e9:53:d1:6c:c2:16:8a:cf:d0:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FF:1A:E8:89:AC:25:FB:65:AD:1D:82:77:77:B3:B7:0C:5F:4F:10
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:79:97:f4:3a:2c:7b:32:c1:b0:3e:04:ee:c3:bc:07:d7:
db:24:e0:7b:28:b8:9f:9d:40:4e:d3:c6:92:b3:9c:b6:28:a6:
97:76:48:2a:ea:76:9c:75:0b:1f:bf:c0:11:05:fa:e3:0f:bb:
af:64:35:d0:d7:42:09:0d:01:91:0d:9c:a6:e0:05:bb:70:c7:
f7:4c:37:5a:5a:67:64:0b:9f:f5:b0:cf:44:2d:c1:3b:ec:53:
7c:db:b4:5f:94:81:cc:c1:34:01:5c:d7:fa:77:f0:8a:68:b3:
be:c7:5c:fb:d4:b1:42:d9:2c:6a:49:61:90:4f:38:04:52:d6:
64:3e:56:0d:af:a3:29:b6:ee:bf:87:91:44:74:01:ea:9b:37:
a7:75:04:e2:1b:69:2a:01:19:94:0a:83:34:19:82:87:95:71:
44:e4:ba:3b:99:d1:b2:95:5b:a7:aa:99:40:7e:14:4c:cb:31:
4f:31:53:08:e1:e2:3f:a8:15:c9:93:d2:a9:86:6b:34:af:25:
f3:c1:cc:82:1c:c6:93:ff:c7:d5:d6:b3:a3:c9:e2:34:b5:14:
73:6d:8b:43:17:69:b3:4c:39:b5:05:f7:52:99:ea:3c:ec:89:
2b:56:f4:04:85:e7:7b:75:b2:45:eb:0f:e5:09:32:18:75:62:
e3:be:d2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:54 2026 by rpki-client