Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: oTIw/WNReWl9mqpqozvRolhEcyn7/7fzA//2yb0Exv4=
Subject key identifier: E9:92:07:8F:74:5F:FC:C3:7E:39:DF:60:0A:86:2E:B2:B9:91:01:E4
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019DA3E6AD1B0CEA02405D74C52AFB7C42F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 0838
Signing time: Sun 19 Apr 2026 04:01:36 +0000
Manifest this update: Sun 19 Apr 2026 04:01:36 +0000
Manifest next update: Mon 20 Apr 2026 04:01:36 +0000
Files and hashes: 1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
2: 9aVW5Ze1o0Y4oVgHxgnUhn1RdhQ.roa (hash: BRrYLjxdA6J0znC7g9IK6bOs3/hTtVjuCxhtd6Laps4=)
3: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
4: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
5: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
6: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
7: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: bI2dUXjQofsAizd1/UjApNCBWOYfewktlkUZBm2Y9MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:ad:1b:0c:ea:02:40:5d:74:c5:2a:fb:7c:42:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Apr 19 04:01:36 2026 GMT
Not After : Apr 20 04:01:36 2026 GMT
Subject: CN=e992078f745ffcc37e39df600a862eb2b99101e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:56:2f:d4:e4:16:fb:a2:62:e3:bd:02:96:
c4:0c:41:62:b6:01:ad:02:2e:8a:c4:a6:8b:09:a5:
9b:71:33:85:87:84:de:6b:86:a1:68:e3:d5:93:81:
72:aa:df:80:35:24:73:2c:90:ed:c0:6a:43:a2:e7:
2f:ea:63:c2:60:70:4d:6c:c8:59:24:ad:b3:2f:0b:
87:ce:52:75:7f:28:5a:ec:04:b3:bf:30:5f:f9:7e:
26:62:00:40:74:63:b6:98:46:5d:40:7b:9a:18:2a:
97:f9:28:e1:11:c4:ff:83:75:0c:ab:a4:c4:29:a0:
1d:6a:89:27:d3:02:6a:2b:4b:3f:dd:e5:37:27:c7:
13:d1:bb:d8:43:5a:f4:6e:c7:c7:a3:01:a6:fd:02:
93:cd:12:e6:92:f2:74:b5:93:d8:79:b3:85:04:fa:
26:58:56:a4:8b:ee:72:44:6f:27:b2:ee:d7:a6:8e:
b1:39:7f:53:da:9a:27:78:e9:4c:92:cf:e1:b5:21:
89:4d:0d:28:fa:9d:5e:0b:13:d4:23:e7:c8:04:f8:
c7:fd:41:bb:a0:28:4a:86:60:03:91:c7:0b:eb:c0:
23:e0:77:a9:0b:57:58:f7:a5:bf:f8:ef:5d:52:fa:
82:a2:b8:f7:13:0b:c1:ac:8c:da:7b:0c:10:78:4e:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:07:8F:74:5F:FC:C3:7E:39:DF:60:0A:86:2E:B2:B9:91:01:E4
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:25:a3:ef:ef:c1:ca:f9:12:b3:b6:74:e0:46:95:8b:f1:01:
7b:1c:6e:83:c7:6e:42:a2:f0:bd:d0:78:47:47:65:19:a4:1a:
24:f8:c5:ab:c6:65:f9:d1:07:0c:ae:5e:14:34:cc:38:90:3b:
2d:88:a2:2d:d4:f5:72:d2:a6:ba:2f:e7:ac:10:e1:2e:2d:29:
6d:93:70:8b:0b:83:fc:a4:27:09:35:9e:12:d0:51:35:e1:1a:
6f:2a:e5:d0:70:fc:60:24:1e:bd:a2:24:21:72:c6:c1:83:52:
83:24:f0:09:76:12:ea:35:31:7b:0a:0f:ec:d1:e1:f7:08:05:
8c:98:ac:f7:55:de:aa:03:e7:4d:ff:65:5d:f6:38:8b:c0:55:
bc:7f:21:cd:6a:4e:c6:dd:53:44:22:31:b6:8a:84:fd:99:8e:
e1:e9:b3:3f:1d:f5:2d:72:15:ba:69:5a:e8:27:6c:57:c8:62:
6f:ed:4a:da:35:c7:1d:31:27:20:44:f3:77:be:f2:98:b2:a2:
66:a4:f3:af:cf:a7:3b:b9:a6:a7:70:7d:79:7d:c3:5b:fc:3f:
9e:1b:c5:c0:87:77:85:1c:4d:17:e9:01:8c:d5:0b:01:45:21:
f8:f4:02:6e:e9:0f:0b:7d:65:96:68:63:2a:92:98:29:05:21:
18:74:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:42 2026 by rpki-client