Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
File: yBi-GcEJgPFbze4HZpAHhJGoqiE.mft (raw, json)
Hash identifier: WAK0Pp5DaSxlcadGs/gJtae+1IHndhX8w1vHL0Ejhaw=
Subject key identifier: AB:0C:89:FA:D0:AD:CA:BD:47:39:2F:54:65:65:05:AD:13:CE:DD:53
Authority key identifier: C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
Certificate issuer: /CN=c818be19c10980f15bcdee076690078491a8aa21
Certificate serial: 019D98F430BADD9D40F836DEFC81A08C4073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
Manifest number: 0EEF
Signing time: Fri 17 Apr 2026 01:00:33 +0000
Manifest this update: Fri 17 Apr 2026 01:00:33 +0000
Manifest next update: Sat 18 Apr 2026 01:00:33 +0000
Files and hashes: 1: j-_-OLKpvCpzT4pF0J3tbQLvCOk.roa (hash: Suu8haJW2xwfl33lBXaWemEMPHtEd4FyCegVEYmcMLQ=)
2: yBi-GcEJgPFbze4HZpAHhJGoqiE.crl (hash: p68mhf+wasibgP6Yq3dJJTRCn305sdey+6V+iIXOe9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:30:ba:dd:9d:40:f8:36:de:fc:81:a0:8c:40:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c818be19c10980f15bcdee076690078491a8aa21
Validity
Not Before: Apr 17 01:00:33 2026 GMT
Not After : Apr 18 01:00:33 2026 GMT
Subject: CN=ab0c89fad0adcabd47392f54656505ad13cedd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:26:1b:04:34:95:e4:88:aa:76:3d:89:62:
8c:bd:d3:9d:d1:af:27:7d:20:dc:14:fc:8e:db:15:
75:ad:81:68:8f:6a:18:58:ae:3c:fc:c3:7a:f3:c5:
cd:20:07:fc:f9:4d:60:35:d9:67:4d:d4:6f:36:bc:
a8:5c:14:16:c0:47:46:12:d4:9a:5b:ba:85:b6:c7:
3d:8a:cd:77:98:d1:f3:11:97:ae:6e:b1:ec:5d:46:
ec:06:c1:12:78:03:a6:d0:b9:95:66:42:d5:9d:cf:
01:b0:c1:a6:e0:c6:fa:d9:7a:e9:82:d3:42:19:50:
f8:94:ff:2d:2f:06:a0:f5:bb:1e:83:74:dc:63:53:
48:2b:3f:67:e3:1f:96:8e:cf:6f:bf:dd:9d:d0:55:
64:96:d1:10:be:54:4f:28:a6:41:37:6f:bd:97:a7:
8e:25:09:61:fe:01:47:02:dd:e7:97:fd:35:c3:38:
4e:06:96:5d:45:2d:a3:7e:3b:e9:9a:27:d4:cb:73:
87:8e:50:9a:69:6b:e8:39:ab:8e:1f:ad:d6:82:ad:
fb:11:c6:98:b0:0e:fd:e8:56:63:60:87:bb:1c:1a:
d8:17:29:ad:cd:7f:c1:ba:8f:90:ee:3c:f4:ba:11:
03:9e:c4:bd:b0:e2:47:dc:22:f6:6c:32:c0:80:b4:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:89:FA:D0:AD:CA:BD:47:39:2F:54:65:65:05:AD:13:CE:DD:53
X509v3 Authority Key Identifier:
keyid:C8:18:BE:19:C1:09:80:F1:5B:CD:EE:07:66:90:07:84:91:A8:AA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBi-GcEJgPFbze4HZpAHhJGoqiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8840f0-271e-4527-a413-6c4719bcf9ee/1/yBi-GcEJgPFbze4HZpAHhJGoqiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1f:af:e2:d4:ef:ca:d4:63:26:56:b2:7b:2d:48:29:8d:eb:
93:71:4a:ad:15:c4:c2:75:a6:06:c7:7f:60:61:5a:55:8a:2a:
0c:c3:68:05:b1:a2:a5:63:97:fb:90:1b:97:78:1d:d7:15:0b:
a4:7c:d7:c4:3a:03:4f:23:5a:1f:7a:e7:ea:8c:62:4d:81:81:
52:5e:7e:7e:e0:f6:71:2e:4d:35:bc:7d:99:63:9b:54:d2:be:
79:91:3c:2b:b2:b3:13:b2:88:b0:16:6d:67:3c:46:c2:58:0b:
0b:c9:fe:ed:c4:c3:59:8d:dc:4d:78:7b:a9:a8:53:c7:5e:93:
d3:1b:78:2f:19:17:08:c2:a0:63:e4:ce:a1:0e:f8:a4:bb:4c:
85:58:6b:75:f9:7b:08:d5:31:f6:53:23:71:f0:86:f1:ca:9f:
5b:ad:96:dc:c2:fa:d3:b9:06:0d:b8:f1:45:5d:60:98:9a:c9:
dd:80:3b:71:2d:57:10:fa:08:25:39:52:7c:05:1a:3d:75:2b:
7c:67:c1:d5:9a:49:df:0f:00:c4:f8:95:2b:21:a6:c5:4a:c1:
6f:33:8c:50:6d:47:7e:93:36:66:39:7f:91:f3:2a:a6:39:37:
90:bc:9d:aa:22:7e:1d:af:a0:c1:70:d1:54:bb:ce:c4:9e:07:
0e:78:5f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:03 2026 by rpki-client