Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: l+GECAaRgb3W8cMZwSmJ900+oUKEFYMkTL+/ZUWGWxo=
Subject key identifier: 08:6D:9B:E4:18:8C:93:4C:E8:4A:69:B4:C0:41:A8:C8:45:0A:73:3E
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 019D98F53C8B2E3434A308979E094C6FD5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 0864
Signing time: Fri 17 Apr 2026 01:01:41 +0000
Manifest this update: Fri 17 Apr 2026 01:01:41 +0000
Manifest next update: Sat 18 Apr 2026 01:01:41 +0000
Files and hashes: 1: C_wku5jNWsis0PL0WlmaY8cUefc.roa (hash: J88psE63nbYG3X/J1+2VVAZBNf7cffwkkrlJw1ScQ80=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: CLBxJEA9wO0jrLOZWGguyDQ63D2Yc8c8FsInG59lvhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:3c:8b:2e:34:34:a3:08:97:9e:09:4c:6f:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Apr 17 01:01:41 2026 GMT
Not After : Apr 18 01:01:41 2026 GMT
Subject: CN=086d9be4188c934ce84a69b4c041a8c8450a733e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:20:26:16:e7:c3:fa:05:e8:59:ef:cf:3c:
50:6e:8e:31:b9:33:45:64:b2:71:3b:47:24:e5:89:
99:ca:b3:59:6a:ae:54:d7:d6:95:b0:45:f2:4b:47:
33:60:02:58:2a:54:88:06:f2:7f:a5:71:01:8c:8f:
b8:d8:df:7b:fb:f2:25:61:ca:15:0e:a8:b7:24:7f:
61:8e:23:98:8d:f7:b7:2f:05:fc:91:b2:c2:f0:e7:
8e:58:24:fc:e7:e7:9e:7c:3d:84:09:3a:95:25:08:
5e:62:a5:a0:a2:ec:c9:7a:e7:9f:f1:35:7e:98:fd:
5d:d8:0c:7a:cb:b8:ac:12:f6:41:8c:3c:d4:c5:8f:
24:ff:e0:82:b3:7b:34:e6:12:18:52:3f:25:b0:fa:
90:7b:d0:9e:eb:66:3c:b6:e5:81:46:47:08:c5:7d:
e2:62:ed:5f:da:55:f0:cc:c9:ad:9c:19:6c:42:59:
0a:59:c1:00:c5:3f:fd:09:14:9a:78:1d:4d:ea:57:
20:d7:b2:4f:9d:55:5e:9c:41:11:20:61:97:1e:c3:
eb:81:cf:d3:fe:a0:83:02:1e:29:16:43:32:16:20:
61:63:3f:e9:06:77:d6:b3:cf:32:23:8e:b3:69:28:
55:83:e4:9d:88:82:d0:b4:55:7a:7c:2d:01:d0:4e:
29:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6D:9B:E4:18:8C:93:4C:E8:4A:69:B4:C0:41:A8:C8:45:0A:73:3E
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:47:51:49:c1:a5:a8:2d:55:55:3e:dd:46:5e:6f:ff:87:2c:
65:da:7f:1c:84:e7:20:2c:2d:62:f0:74:10:38:2a:b1:f3:cb:
b8:af:2a:d1:59:37:54:2f:f9:3e:84:f8:dc:28:75:7e:e2:55:
85:f1:a1:c9:55:c8:fb:46:ac:27:6e:75:14:ea:39:02:c8:71:
0b:d1:95:d7:ba:89:54:80:a3:5b:29:5f:6b:a2:f0:a1:70:3e:
20:95:f3:23:6b:e5:81:97:d2:25:af:8d:cd:40:2f:57:4f:f9:
e3:66:ec:c3:ec:33:c3:a6:89:57:ad:b5:08:e6:6d:64:c9:04:
fa:dc:dd:9c:6b:d4:04:13:55:67:d7:9a:af:9d:c4:64:db:c3:
37:49:cb:a6:59:37:48:c1:20:35:a7:2e:2d:04:69:73:ae:8f:
f6:8b:af:ed:9e:5f:00:7e:1c:72:ba:48:0c:7a:c9:d1:f6:a3:
2e:34:0a:1d:ff:5e:b2:40:19:8b:ed:54:3f:dd:8e:63:44:fa:
a4:b0:db:5f:b9:f2:4c:2f:77:67:7e:02:ee:6c:23:b5:04:1a:
d9:62:d0:8a:c7:d2:92:dd:1f:a3:b8:4f:ad:ae:76:7b:63:c7:
93:67:4c:48:77:d3:10:8c:ca:05:85:2a:00:ac:88:e6:58:97:
a7:94:d4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:20 2026 by rpki-client