Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
File: yxAkP5hjb6oPtsWua62bCrrSNDg.mft (raw, json)
Hash identifier: f9ToqFAoCDSVoD0969EO25cspG1W57E52ekwTFYzGHU=
Subject key identifier: 8E:14:9E:BA:8E:17:E8:C3:1F:93:14:09:66:B8:2D:5A:44:42:38:6A
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 019D992B7933187447D83443F0AA6C9F10A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
Manifest number: 11D3
Signing time: Fri 17 Apr 2026 02:00:56 +0000
Manifest this update: Fri 17 Apr 2026 02:00:56 +0000
Manifest next update: Sat 18 Apr 2026 02:00:56 +0000
Files and hashes: 1: EqMzjpZI_PA25pj2HGjF-sxEQuw.roa (hash: Q+Tx0hJ38g+PHWlMRUIi6h6t6P6zwUEAYvtkrEbFArY=)
2: yxAkP5hjb6oPtsWua62bCrrSNDg.crl (hash: s/xLwNte0H6bFYOl/AO9bUZcDuU3NfcZuRi+rFv07HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:79:33:18:74:47:d8:34:43:f0:aa:6c:9f:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Apr 17 02:00:56 2026 GMT
Not After : Apr 18 02:00:56 2026 GMT
Subject: CN=8e149eba8e17e8c31f93140966b82d5a4442386a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:9f:09:b8:a1:90:12:a8:8f:02:24:87:b5:
b9:ed:c1:89:a3:8d:da:66:52:8b:7a:f1:a4:71:e2:
0e:78:03:35:ad:e4:13:11:92:4d:b3:a1:6f:a5:e3:
dc:75:9e:eb:c8:a5:bb:50:e4:d3:cb:f6:19:c4:49:
99:d3:8b:e2:2c:77:38:3b:43:9d:f5:e8:ae:b9:28:
46:14:31:d1:d6:b6:7d:81:8c:21:a2:14:00:3c:bd:
9d:97:51:88:2b:8e:0b:d7:57:76:6f:3f:91:93:c3:
6b:a0:0e:35:c2:a4:91:e1:08:f1:b7:9f:ee:17:ba:
fc:04:18:fc:8e:d7:12:37:3c:a5:82:96:55:7f:2a:
d3:00:f9:3e:60:00:b4:16:5b:95:52:73:77:37:f0:
a8:b2:1f:c6:02:16:fb:9c:ae:50:27:37:4d:13:b4:
a5:1a:f6:b3:a9:82:91:e2:e6:62:18:ef:ff:7a:11:
8a:1d:0f:fc:02:af:c6:8f:2f:05:f7:0c:59:cc:df:
47:28:a7:df:06:b7:97:88:c7:38:a0:31:ba:99:5d:
7f:87:3f:87:f8:47:d5:56:7e:2d:a5:7e:30:f9:15:
a7:ff:1b:07:c9:6c:48:f1:75:1d:97:5b:9e:21:fb:
2e:dd:e5:b3:65:fe:82:78:02:91:b7:81:30:cf:4d:
9d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:14:9E:BA:8E:17:E8:C3:1F:93:14:09:66:B8:2D:5A:44:42:38:6A
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a1:2d:7b:f9:71:88:0b:d8:20:8f:ea:5a:89:97:8d:b8:cd:
4a:be:d1:5c:fc:0e:8b:6d:3f:ae:95:82:35:23:8b:61:f9:ea:
12:37:62:f9:c6:29:75:35:a4:38:94:f9:f9:2d:46:a1:c3:3e:
25:c4:e4:88:6e:0a:6f:db:4b:a3:c1:20:da:d2:9c:71:58:0d:
20:5e:1d:03:3a:81:e5:1a:67:3e:13:1b:d2:73:6a:7d:f8:50:
f7:eb:a2:16:a1:57:1e:9a:42:69:85:e3:a1:02:9a:2d:c7:3e:
a7:92:6d:8f:c7:44:7f:a0:45:b9:af:cb:d4:0a:d3:e5:a3:de:
ff:22:68:4a:26:33:d0:ca:89:2b:aa:b0:6a:2c:bf:c7:9b:58:
a7:9c:7c:ce:a3:d5:b8:31:10:6a:44:f0:09:38:35:50:c6:d2:
5b:93:14:0a:29:af:11:c5:e7:22:82:50:7a:2d:f4:d7:50:dd:
93:9e:8f:eb:94:d9:cc:1a:7d:6e:fd:75:7e:52:67:5c:11:e8:
a3:76:f0:41:c8:7a:58:fa:5d:cd:bf:a2:c5:06:92:dc:fe:16:
95:64:ca:45:bb:94:1c:f2:6f:6c:b5:0d:55:74:c2:f4:cf:df:
cf:6f:9f:43:1d:53:fa:43:a6:28:cf:df:13:9c:1f:cc:fc:9a:
b1:27:63:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:56 2026 by rpki-client