Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
File: yLbqU9hyUXDrX0KqUN241gXFOB8.mft (raw, json)
Hash identifier: BofQ7eN1CiFainMRZ65ohl6/YC3WdIljONyOunfSRnE=
Subject key identifier: 8B:81:0D:51:B6:83:DF:91:1E:D8:7D:6C:2E:CA:B6:E2:32:61:4C:0E
Authority key identifier: C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
Certificate issuer: /CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Certificate serial: 019D9FD226DB388AC0F40F27F9B12F9F07B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
Manifest number: 033A
Signing time: Sat 18 Apr 2026 09:00:42 +0000
Manifest this update: Sat 18 Apr 2026 09:00:42 +0000
Manifest next update: Sun 19 Apr 2026 09:00:42 +0000
Files and hashes: 1: 0KsnzuH-A_zXm2XLJt2nHb0im0Y.roa (hash: Ja/jRY18A5eip3z5tPS25Gs+cDPzHWqAalXTdxK4240=)
2: yLbqU9hyUXDrX0KqUN241gXFOB8.crl (hash: Zx1H8FZGhaIQVjt/3vf2Tek7xrG+wrz2a9BxtckMZ7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9f:d2:26:db:38:8a:c0:f4:0f:27:f9:b1:2f:9f:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8b6ea53d8725170eb5f42aa50ddb8d605c5381f
Validity
Not Before: Apr 18 09:00:42 2026 GMT
Not After : Apr 19 09:00:42 2026 GMT
Subject: CN=8b810d51b683df911ed87d6c2ecab6e232614c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:a4:7f:83:69:83:f3:bc:38:4e:a4:a6:56:3c:
e3:17:83:e8:b1:dc:76:20:01:42:69:2a:bb:0c:3e:
68:61:46:61:d0:50:26:8d:e4:76:a4:7d:80:d0:bc:
ac:d6:a5:ba:51:74:a3:54:96:7c:44:67:c9:0f:8a:
31:e4:fb:08:21:37:22:25:48:df:61:22:13:aa:7a:
41:b4:8a:c8:09:61:66:10:40:82:06:49:0d:af:aa:
dd:91:b0:76:e5:f2:0f:d2:32:08:e9:22:23:18:4d:
a6:7b:af:e7:10:a9:2c:7a:7a:b4:66:a2:4a:de:2e:
03:c9:ab:a4:90:bd:f7:47:0f:13:0a:ed:ac:7b:5e:
47:d3:48:15:7f:a9:51:35:63:2a:bb:f3:16:7f:24:
ca:c2:e7:3b:97:07:03:d3:ba:9e:5e:93:58:10:99:
0b:93:7b:79:30:de:d1:78:1f:b3:f6:de:a1:b0:bd:
06:d8:39:4d:b3:91:4c:7f:02:f6:33:a0:9a:62:6d:
ea:ea:7d:e6:05:7e:a3:e8:fb:74:d0:c0:8b:26:a5:
7e:3d:20:da:46:f1:b0:f2:7e:6a:1e:15:48:5a:f8:
40:2b:f4:0f:9f:a1:4e:25:3d:67:c1:28:e6:43:cd:
ce:37:4d:2f:99:80:14:05:50:f8:ed:e7:e9:a4:fb:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:0D:51:B6:83:DF:91:1E:D8:7D:6C:2E:CA:B6:E2:32:61:4C:0E
X509v3 Authority Key Identifier:
keyid:C8:B6:EA:53:D8:72:51:70:EB:5F:42:AA:50:DD:B8:D6:05:C5:38:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLbqU9hyUXDrX0KqUN241gXFOB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9bb1f-e3d0-4b06-ae68-939ac3fe4b89/1/yLbqU9hyUXDrX0KqUN241gXFOB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9f:c4:90:a5:55:93:47:ef:b9:9c:71:13:41:e1:07:4d:07:
6e:d3:36:2a:f8:88:64:5a:ef:fe:e4:1a:d1:2a:6c:74:cc:c0:
cb:da:cb:45:a1:28:7c:7a:9a:cc:7b:5a:74:2f:f8:eb:7d:54:
50:b5:1c:f0:de:73:67:7a:67:fd:13:c4:c8:5b:6c:6b:0d:d5:
aa:86:af:8e:dc:7d:d0:6b:d5:62:8b:da:f8:cc:bd:6e:8e:51:
59:53:aa:b2:28:95:03:30:ae:87:4e:16:d0:3b:ba:ea:96:12:
ec:6c:2a:03:14:3e:6d:23:87:e9:70:c6:31:85:84:42:d1:07:
24:b8:10:97:2a:2a:86:85:e7:30:98:ef:47:7b:65:f6:11:c0:
9b:4b:ce:b4:f7:70:ab:47:7d:0e:ee:aa:86:7b:26:18:95:79:
df:74:07:9c:dd:81:94:09:4b:dd:47:37:77:1f:1c:c3:8a:ee:
32:8e:9e:bb:40:cb:76:67:c2:5a:0a:45:27:6a:86:dd:57:0b:
86:09:5a:3c:f7:36:de:89:8c:c1:8a:95:ff:34:f6:d4:0d:6b:
33:70:fc:40:f6:6c:c5:70:49:cb:9e:02:0a:e7:14:8e:97:55:
aa:41:b8:0e:de:6c:7a:db:0b:3b:f5:a5:ae:bf:93:0c:3e:8b:
3b:64:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 12:59:16 2026 by rpki-client