Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
File: yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft (raw, json)
Hash identifier: CK6nFhJpgJE/buojXGC8oBDMvH9vgT4GbYu5fFM2xhM=
Subject key identifier: 31:0A:A2:10:D1:E9:22:82:61:03:6F:24:D3:16:FC:88:77:64:DE:0E
Authority key identifier: C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
Certificate issuer: /CN=c8df337cea56a083f46b799072e70da345cc2364
Certificate serial: 019D9818738B72A934DD56608A72885BC90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: k2ViBnovBSrJ6-QzUlh_SgfUQTc.roa (hash: 9Q1EqZG/a6iEl1F6uqJOmdn36R+djh5MF5HhvgX3ijc=)
2: yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl (hash: z4/DqQx2blqP0SLUoP9WdkMwuHqRCg2wZQm5Eeg6Myw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:73:8b:72:a9:34:dd:56:60:8a:72:88:5b:c9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8df337cea56a083f46b799072e70da345cc2364
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=310aa210d1e9228261036f24d316fc887764de0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:64:95:34:29:36:e1:3c:8d:10:72:fc:2a:
4b:87:4f:8f:a9:5a:8b:cf:5a:74:a1:81:7f:b0:af:
24:61:83:5b:2a:19:4d:0b:55:54:94:98:0c:af:0a:
71:b8:bd:b0:d0:0e:1b:45:9e:91:03:1a:5f:b1:f2:
2c:10:a3:45:6b:19:01:fe:03:8b:c6:68:e5:a2:43:
53:4d:03:8b:9f:1a:cf:4f:b8:cc:c2:9c:50:40:a2:
eb:16:5e:56:17:03:4c:c4:bb:09:73:00:6d:ed:c8:
63:32:7f:72:08:e9:ae:a2:11:98:ae:8d:d4:a6:58:
9a:2b:ec:74:b4:e5:9c:6e:6e:55:4d:2f:5b:d0:c6:
8c:a5:06:20:3e:f1:4e:c6:6f:0e:8e:ec:76:e7:69:
fe:96:16:bf:96:cc:ab:a4:29:23:29:0d:a5:49:2c:
8f:ee:1c:5f:86:a0:62:39:f2:a5:b4:19:35:e2:f3:
93:de:3b:d2:e8:5a:cf:b3:36:3a:73:cc:cf:c2:5d:
52:09:70:6f:1a:c9:b8:34:12:24:d5:91:f0:68:ed:
e6:95:72:a3:55:5a:69:f2:74:0a:65:09:a7:07:df:
4d:05:29:2f:a8:87:98:89:14:81:05:4b:82:ff:e6:
2f:0b:64:31:63:87:8b:27:b5:31:5b:55:59:39:bb:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:A2:10:D1:E9:22:82:61:03:6F:24:D3:16:FC:88:77:64:DE:0E
X509v3 Authority Key Identifier:
keyid:C8:DF:33:7C:EA:56:A0:83:F4:6B:79:90:72:E7:0D:A3:45:CC:23:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yN8zfOpWoIP0a3mQcucNo0XMI2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/297d54-bd82-42e0-9c42-6fdbca600e00/1/yN8zfOpWoIP0a3mQcucNo0XMI2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:99:43:a6:ae:4b:c0:ab:81:5c:f7:dc:6c:10:20:1f:68:36:
d0:5c:a0:6d:5d:16:e8:fd:e9:fb:6d:a2:d8:9b:b1:d6:08:db:
52:10:96:30:12:02:0f:18:a6:51:01:16:fd:4e:16:ec:83:00:
f4:7f:c6:36:6e:66:48:23:71:cc:3d:a7:8a:a4:6b:0d:61:39:
83:44:59:95:50:66:4b:93:16:48:5d:ec:79:f0:ed:eb:d4:36:
76:62:44:a8:3c:89:ff:89:95:f1:16:d6:b3:e7:f3:dd:50:5d:
7c:66:66:93:70:b2:4c:e8:10:49:42:98:97:bb:0c:94:9f:f4:
47:e5:8e:46:c7:16:68:f5:d7:90:97:bd:39:64:32:c2:58:ce:
94:cf:3c:4d:b9:c8:f5:87:90:46:78:cd:9f:e5:e9:41:61:22:
0a:14:17:57:8a:a8:a0:b1:f9:aa:cf:9b:e2:03:5b:ac:60:92:
02:d7:bb:92:f1:2c:04:ea:dc:de:db:b3:04:55:06:bd:d1:4d:
3b:4b:a0:b7:aa:9a:d3:ef:b0:7b:98:29:43:46:1f:75:45:d6:
3a:9b:5f:b4:a4:bb:3c:68:3c:50:ca:d6:b1:14:1d:46:3c:ff:
ae:7b:60:d2:9e:9c:a3:fd:a5:36:be:94:b4:b5:cb:6f:f8:76:
34:3c:12:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:16 2026 by rpki-client