Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
File: y-PaNYKiKDDsTmdUfnX6O52iCyM.mft (raw, json)
Hash identifier: cmFUq6P1MqWZcHKcE64rRVMvopDkpp2wm3A/gyL3jbE=
Subject key identifier: AC:77:9B:0A:82:94:79:2C:CA:64:B1:6C:60:E9:22:27:67:EF:50:21
Authority key identifier: CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
Certificate issuer: /CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Certificate serial: 019D996239CCC59F438AEDDCD7400EB8F8CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
Manifest number: 0AD1
Signing time: Fri 17 Apr 2026 03:00:44 +0000
Manifest this update: Fri 17 Apr 2026 03:00:44 +0000
Manifest next update: Sat 18 Apr 2026 03:00:44 +0000
Files and hashes: 1: mGTXHUzlo8jZOHFUmBeN6FRI7Bk.roa (hash: 2bfzL2d7ZwGUW9cvd/ehAd7HuPDH/Eytzu1KccPbTks=)
2: y-PaNYKiKDDsTmdUfnX6O52iCyM.crl (hash: jZPLorBLB0FnG07/0eEIfBAdv6ERslZp53bTkQcNXmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:39:cc:c5:9f:43:8a:ed:dc:d7:40:0e:b8:f8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe3da3582a22830ec4e67547e75fa3b9da20b23
Validity
Not Before: Apr 17 03:00:44 2026 GMT
Not After : Apr 18 03:00:44 2026 GMT
Subject: CN=ac779b0a8294792cca64b16c60e9222767ef5021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:32:fd:0d:6c:1d:a3:a4:49:68:d7:a5:f3:
c4:e5:26:80:be:1a:e6:fd:0d:e8:92:bd:ce:41:8c:
79:8a:ee:67:5a:5a:b8:6a:90:67:0e:a5:b1:0e:21:
bf:d6:2f:da:e5:8f:b2:12:d7:c5:a8:55:20:55:33:
75:b2:43:f5:80:60:b3:00:45:99:93:85:f2:81:82:
55:68:24:ca:82:5a:ac:e5:93:81:6c:a1:60:ec:b4:
f9:7b:5b:d8:eb:a0:50:38:aa:13:02:b8:f1:e5:0b:
9f:8e:4e:53:90:35:c3:ee:58:86:60:33:86:1f:9a:
bf:87:ac:2e:b3:db:48:91:bc:ec:64:f1:64:4e:92:
ad:6f:9c:f8:a4:3d:00:2d:21:4a:0a:1d:2b:8f:96:
f5:4c:54:8b:25:77:44:c3:d8:08:86:c2:33:ae:a2:
78:0b:3e:2d:54:b7:9e:9b:48:ab:59:e0:79:a3:b2:
e6:1c:87:ec:c9:79:1d:c5:04:65:20:23:30:6f:b1:
a0:0c:45:de:06:26:2c:cf:30:4f:46:e0:ac:b8:dd:
3e:7b:e9:b3:cf:1b:57:81:74:09:21:53:2b:dd:07:
12:a9:f3:78:9f:d5:eb:29:1b:b5:b3:94:b7:d8:b2:
46:83:b4:ca:60:5d:5b:e9:9b:52:14:8d:11:c3:0e:
51:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:77:9B:0A:82:94:79:2C:CA:64:B1:6C:60:E9:22:27:67:EF:50:21
X509v3 Authority Key Identifier:
keyid:CB:E3:DA:35:82:A2:28:30:EC:4E:67:54:7E:75:FA:3B:9D:A2:0B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-PaNYKiKDDsTmdUfnX6O52iCyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/68cfc5-2ec6-4b59-b12e-6e36b2f1706b/1/y-PaNYKiKDDsTmdUfnX6O52iCyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:48:4a:35:b6:ee:c4:cd:17:63:af:88:01:c3:5b:3d:d7:65:
d5:e8:8d:11:57:ce:19:be:4a:94:ab:61:0e:9e:92:b1:a5:77:
0b:63:47:cb:3a:4a:5a:1f:b1:b7:26:a8:c8:09:e9:7e:db:22:
5e:f1:d3:19:8a:f1:c3:b9:04:2c:a4:23:4b:69:d2:aa:82:11:
4d:d8:00:ae:aa:c3:90:b4:df:14:b6:dc:b6:b9:9f:3c:5a:41:
7a:25:df:8d:c8:ad:3f:fa:37:b8:28:08:2a:33:ca:9c:46:6b:
42:af:12:b0:13:58:39:95:8d:1b:a6:7e:18:62:4c:14:4b:5a:
e9:73:b0:0d:53:a0:22:53:57:c8:f9:ff:55:89:85:4f:86:2d:
1d:2a:8d:08:b3:66:b0:4c:68:62:5f:e8:35:b8:f5:06:b8:4d:
20:3d:38:9c:5f:8f:97:00:48:e9:41:96:33:b3:5a:ad:4a:a1:
09:01:7f:b2:d7:c8:f9:d9:18:24:3e:b5:0d:41:73:d7:e6:a2:
fb:56:42:66:36:df:d3:3b:eb:03:cd:61:02:ef:b8:21:02:6b:
3c:56:ae:6e:4a:17:23:0d:72:62:7c:f2:e8:91:e6:ce:28:9d:
2f:41:88:92:b9:43:84:2e:1c:2e:21:a9:2f:1c:fd:59:15:e8:
9a:13:cc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:51:44 2026 by rpki-client