Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
File: yPV2sjbj7l0fmZnD27fBbEUfnh8.mft (raw, json)
Hash identifier: hbJ3wIoKjJtsHQ9SwLeq256vJY9EOLgWcXffOTklvf4=
Subject key identifier: DD:83:1C:18:13:B9:5B:7C:97:F1:CB:B1:25:7C:E9:EF:14:D4:5B:38
Authority key identifier: C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
Certificate issuer: /CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Certificate serial: 019DA59DB2DCFD3D3C897A834798B5FFB0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
Manifest number: E4
Signing time: Sun 19 Apr 2026 12:01:08 +0000
Manifest this update: Sun 19 Apr 2026 12:01:08 +0000
Manifest next update: Mon 20 Apr 2026 12:01:08 +0000
Files and hashes: 1: CP7XAwVQiMz2Q6ounln3ad2WPSs.asa (hash: dHCmJ8L0c4EENwwKULgdmd0i+CmSQXVp+UAKeU6FrFw=)
2: XE1hA9GoSwCCQTzlrJPud8rwosk.roa (hash: YUFGp3JRLfRJAoIp1SDL1Gd34rSXV9G2A1bQuPoViQw=)
3: yPV2sjbj7l0fmZnD27fBbEUfnh8.crl (hash: YS9Aow+QrT9HDykMvogRM9SqPM+69DRwevMPjA6Iuxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:b2:dc:fd:3d:3c:89:7a:83:47:98:b5:ff:b0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f576b236e3ee5d1f9999c3dbb7c16c451f9e1f
Validity
Not Before: Apr 19 12:01:08 2026 GMT
Not After : Apr 20 12:01:08 2026 GMT
Subject: CN=dd831c1813b95b7c97f1cbb1257ce9ef14d45b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:82:45:48:d7:b6:c4:f3:e7:43:dd:b6:be:
c8:a7:a4:6d:f3:0f:1a:b1:bc:60:8e:57:be:27:c3:
a2:f2:53:56:33:00:63:f9:5d:3c:54:92:69:db:71:
11:30:e1:a2:d6:62:dd:36:d1:6e:bd:aa:37:03:1f:
36:2a:4a:f6:b6:7d:b4:a1:08:59:be:d8:ab:8c:7b:
3c:5b:d0:f0:ab:3d:5d:6d:ae:c7:76:35:66:d3:17:
2d:8d:7b:2d:05:63:b3:b9:94:ef:00:77:f3:1a:c6:
8f:89:81:c5:ae:ec:58:7c:68:6e:e8:e9:01:9c:bd:
76:62:ba:43:5b:cc:0d:ff:c2:69:43:2d:69:e3:43:
bd:64:8f:34:fa:56:41:e5:49:70:5c:0d:a5:06:f0:
c2:a8:e5:1a:a3:a7:36:e3:92:60:52:a3:6e:3f:34:
75:cf:08:e1:a7:f4:88:ca:24:d8:82:84:7d:5c:6f:
bc:66:a7:c7:ce:14:dc:bd:09:de:f1:ec:84:f4:8b:
8e:77:29:29:e3:e1:f6:6a:5b:e2:72:9c:79:58:16:
64:04:b1:13:2a:38:e6:90:f0:68:45:2b:2a:e2:36:
5f:a7:d6:e2:30:62:9a:6a:93:be:d3:58:fb:84:53:
95:37:53:e6:4f:87:34:58:b5:e2:11:c7:83:e9:56:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:83:1C:18:13:B9:5B:7C:97:F1:CB:B1:25:7C:E9:EF:14:D4:5B:38
X509v3 Authority Key Identifier:
keyid:C8:F5:76:B2:36:E3:EE:5D:1F:99:99:C3:DB:B7:C1:6C:45:1F:9E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPV2sjbj7l0fmZnD27fBbEUfnh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2509e8-d456-4a43-ae4c-892e7e3ccecf/1/yPV2sjbj7l0fmZnD27fBbEUfnh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:42:6a:19:db:0d:2c:9c:8b:18:03:15:d9:c6:07:38:21:3d:
1b:49:8e:15:40:d2:45:bf:a3:f9:d0:ac:0c:5e:7f:ca:22:b0:
c5:43:55:40:45:a3:7a:38:2b:12:2f:59:0f:e3:65:b7:87:83:
b9:9a:03:c9:4c:11:e6:a4:0d:17:38:41:73:bf:a5:44:d8:f9:
14:9c:84:d3:69:7e:cf:6a:ac:5f:d7:08:fd:a3:e2:1d:cd:0c:
eb:59:3d:e8:98:35:96:9a:b9:8c:d9:f5:9c:98:98:02:20:26:
aa:41:b2:ae:04:e7:1f:14:f5:93:d2:dc:ad:e6:21:1d:00:37:
f2:bc:c4:36:fc:20:9d:85:b8:2e:8a:70:07:aa:a6:8c:de:ea:
01:90:f1:4c:4b:c3:96:27:53:3d:f7:1f:ab:fc:4b:5e:80:ce:
a8:cc:25:f4:59:14:7d:e8:84:cb:11:b4:b7:04:84:f1:3f:8c:
8e:76:bf:e5:72:34:cd:99:f2:3a:7f:64:63:b9:36:35:fc:77:
db:f9:08:9a:9a:93:0a:29:e8:c0:9c:03:fe:c2:4a:ae:cc:0e:
71:76:7c:8d:18:db:0b:60:18:c8:15:53:ac:8c:dc:3e:13:6f:
8c:e4:be:e4:c4:79:7a:18:64:9c:2c:06:85:c9:32:18:4e:53:
7b:34:d1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:33 2026 by rpki-client