Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
File: y9_aIe3gGO3_VJgRY1eoxhUux-8.mft (raw, json)
Hash identifier: cufcE3vsGLLkgT0bLEee+/jWQ2+8Jvm46iyM3I/0VL0=
Subject key identifier: 3F:7C:3D:4F:65:70:24:70:B9:CC:9D:11:1B:51:0E:8D:77:08:3E:6C
Authority key identifier: CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
Certificate issuer: /CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Certificate serial: 019D9AABF6EE0588F64794E367B5E05FBEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
Manifest number: 0C32
Signing time: Fri 17 Apr 2026 09:00:54 +0000
Manifest this update: Fri 17 Apr 2026 09:00:54 +0000
Manifest next update: Sat 18 Apr 2026 09:00:54 +0000
Files and hashes: 1: im_vhLMibVudnZg4kJ52SUS3c-w.roa (hash: jWyQDspkXiHiDQkhSK+ARTtEFmL2PYL0z1g2F7GJj5E=)
2: y9_aIe3gGO3_VJgRY1eoxhUux-8.crl (hash: bhRlpKdXbyFMrxapvD1y7TOED1+KxjfRiAeGBVJXSwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f6:ee:05:88:f6:47:94:e3:67:b5:e0:5f:be:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfda21ede018edff5498116357a8c6152ec7ef
Validity
Not Before: Apr 17 09:00:54 2026 GMT
Not After : Apr 18 09:00:54 2026 GMT
Subject: CN=3f7c3d4f65702470b9cc9d111b510e8d77083e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:8d:0c:14:23:1b:83:ed:d9:9b:76:25:29:
d5:1d:75:17:90:a5:03:82:30:70:6d:b0:d9:bf:75:
5b:f3:08:bb:1c:20:85:42:13:0b:05:98:ed:99:23:
23:2b:47:a3:ab:bc:00:ac:a6:0f:33:42:1c:6e:a4:
9a:d7:bd:8d:3c:c4:86:24:30:aa:c4:7e:ed:3a:6e:
d3:ec:de:97:de:67:e3:50:a6:6d:c0:4f:3d:c0:60:
d1:5c:b7:30:30:28:c3:e8:61:07:49:aa:d2:af:00:
92:06:40:22:bf:1e:61:c9:c7:f9:ce:8d:83:8d:ff:
8d:8a:3d:3d:16:e0:20:9c:ec:aa:56:35:be:9b:57:
38:b7:91:b7:a2:73:06:b0:65:4f:89:b5:76:ec:fb:
32:8d:01:c7:73:c0:f1:7e:2c:cc:4e:78:e6:87:93:
d2:62:08:60:42:42:e5:0f:63:23:74:e1:ae:f5:7e:
f3:80:62:5f:13:ef:f4:c6:97:ca:b6:89:68:18:9b:
f3:11:b8:7d:3d:d9:f8:77:44:40:91:09:dd:de:aa:
9a:b1:33:41:04:db:c7:84:fe:20:17:4d:3c:cc:9a:
21:79:c3:96:d8:96:68:df:98:26:0b:6a:1c:95:41:
b7:87:b8:3e:84:39:f8:2c:ac:e3:9b:60:5e:65:06:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7C:3D:4F:65:70:24:70:B9:CC:9D:11:1B:51:0E:8D:77:08:3E:6C
X509v3 Authority Key Identifier:
keyid:CB:DF:DA:21:ED:E0:18:ED:FF:54:98:11:63:57:A8:C6:15:2E:C7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_aIe3gGO3_VJgRY1eoxhUux-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ac7d5a-02bf-4803-86fe-e65d35883093/1/y9_aIe3gGO3_VJgRY1eoxhUux-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:68:f6:9a:32:bd:8d:48:87:e1:1f:a5:1a:f9:aa:31:63:21:
98:cf:30:09:4c:11:91:43:26:6a:ba:1f:0d:05:d3:4e:50:02:
a3:31:17:b4:24:0f:2c:35:86:0b:88:36:43:36:e0:a4:ba:40:
69:60:06:75:c2:1c:b5:41:8e:f3:7e:70:86:02:0a:8f:30:65:
e9:c6:71:d9:72:8f:7b:38:cc:d2:07:15:bb:6e:fc:51:77:32:
4c:b7:ce:85:b9:ce:6e:1a:0c:5c:f0:cf:9c:30:b6:e5:48:b7:
b8:84:da:ba:59:31:17:d0:39:53:80:35:99:48:07:03:6b:fc:
5a:03:ee:50:21:dd:e6:3e:00:a6:14:e8:02:a6:4a:e5:1d:1b:
e1:57:07:aa:96:49:0e:30:37:dd:53:d6:ae:d4:3c:9a:50:8a:
9c:8d:2f:1b:c4:fa:96:53:4b:d1:a3:fa:d4:7c:2b:06:3f:16:
81:99:04:76:d5:0d:52:98:ff:ad:53:c2:30:ae:e8:3e:2a:1c:
95:2b:75:64:5a:03:86:73:8f:60:ca:0d:63:5a:aa:86:59:02:
4a:cc:56:79:a6:e3:c0:d1:dc:f3:7e:d9:c3:7c:e7:7b:ae:c3:
49:19:9f:ec:54:7b:82:19:14:c4:1a:9d:69:e0:15:6a:d0:eb:
55:71:0d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:19 2026 by rpki-client