Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
File: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft (raw, json)
Hash identifier: NkVYMn0o6jFj3s93JF2jhu8KuH0cUkPX0jlHd0EhyEU=
Subject key identifier: 7D:B3:02:E0:6E:43:CC:9A:93:4A:D9:3B:82:07:31:90:F9:E6:98:9D
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019D98BD47902EE800CD83D90D1D8A4A1583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
Manifest number: 0986
Signing time: Fri 17 Apr 2026 00:00:34 +0000
Manifest this update: Fri 17 Apr 2026 00:00:34 +0000
Manifest next update: Sat 18 Apr 2026 00:00:34 +0000
Files and hashes: 1: PR91ry3J0euYdorH5rO0N-Bkpvk.roa (hash: DbSkzL37Cl5yQPPXgAD1SKpuqfRlWV4g2sxvgZ9ZsC8=)
2: y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl (hash: LBlSsPsFe3QE0cj/DU8X3KbHlMue17a73m8K9Lg2jug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:47:90:2e:e8:00:cd:83:d9:0d:1d:8a:4a:15:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Apr 17 00:00:34 2026 GMT
Not After : Apr 18 00:00:34 2026 GMT
Subject: CN=7db302e06e43cc9a934ad93b82073190f9e6989d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:f2:5b:d4:db:d0:01:ff:5d:cc:75:aa:03:
6f:9b:84:c7:29:65:f2:76:cd:0e:4c:6b:50:59:de:
ee:2a:69:e4:03:2c:10:e1:53:82:2f:ef:d3:76:d1:
8e:62:80:d6:97:17:59:60:e8:fd:57:d1:32:f7:e7:
ea:ab:d6:ec:6d:9a:ae:b4:bc:52:b3:a8:e4:28:d3:
3d:d7:ea:c0:d9:a1:62:46:bc:01:bf:2d:e3:c6:29:
6a:ec:dd:7b:b9:16:37:78:f9:a0:62:5a:f8:b1:68:
60:b3:2b:97:4f:57:91:44:95:26:ee:57:3b:76:e1:
b8:72:94:c9:dc:84:a9:c7:1d:35:18:fd:45:84:1f:
7c:a3:a9:4f:21:be:0c:db:30:82:78:fd:41:0a:b1:
d5:7d:f3:48:85:7d:b7:83:70:12:ac:4f:e5:9d:6d:
7c:61:8a:d1:e2:33:cb:82:04:02:19:8b:02:d6:83:
c4:ee:aa:f4:12:07:63:5a:da:ee:fa:de:39:e9:21:
5b:43:9d:26:5d:bb:31:53:af:59:35:82:5f:02:79:
f2:58:92:32:11:54:9f:09:73:87:db:4f:c9:8a:ce:
ea:8e:e7:8f:68:aa:1e:55:e8:d9:09:fd:57:67:ce:
72:0d:8d:27:58:ee:9d:7a:86:e4:61:0b:f1:41:11:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:02:E0:6E:43:CC:9A:93:4A:D9:3B:82:07:31:90:F9:E6:98:9D
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:66:62:28:ef:03:ee:a7:4e:9c:a6:32:6e:97:c7:b6:cc:
93:7e:8f:f1:cf:8b:3b:42:b2:c0:81:07:d5:af:0d:78:d8:9e:
87:3f:c4:3e:cc:9a:b7:33:87:a4:cf:01:1f:14:ab:39:5a:79:
d1:3e:81:c2:76:80:d1:23:1d:56:5a:ea:c6:01:77:05:64:6e:
ef:ad:e3:db:8a:74:90:c7:d8:f3:47:f8:9c:97:15:57:ac:cd:
57:6c:9d:6a:9a:61:58:3a:51:1d:b1:f6:f5:49:fa:f0:9b:b3:
95:a4:95:de:b3:f6:4f:6e:82:5b:77:8c:ab:76:a9:b9:5d:ed:
82:2b:c2:b8:05:5e:fe:92:73:d6:42:60:11:d5:e1:60:25:26:
05:ec:da:fe:48:5d:3c:d1:6a:8b:1b:39:e1:a3:32:2a:24:73:
36:61:91:a1:e1:ec:fb:50:ba:b2:b6:ef:72:09:ac:f4:56:2f:
82:bd:2c:05:83:72:8b:3c:89:87:cc:8a:1a:26:3b:b0:d3:12:
d9:76:48:61:0e:92:5c:e6:23:65:dd:a6:5f:e7:36:6f:b9:db:
7c:20:d2:28:69:35:d0:d5:20:91:3e:f5:a1:f8:4d:e3:5c:32:
26:83:0b:58:bc:74:6a:d8:6e:84:d5:1e:66:56:69:18:86:b5:
eb:da:59:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:16 2026 by rpki-client