
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier: Mdzhhq1tVYxsHSxk7/7EzOT56Q/J82/WI041uj6HF2Y=
Subject key identifier: 8D:2A:58:A4:88:1E:8D:B4:D3:88:7F:9A:D2:79:A4:1A:D8:A0:E3:22
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 019D996207E31FD5EA6EB7B1FFC05B66E1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number: 11CC
Signing time: Fri 17 Apr 2026 03:00:31 +0000
Manifest this update: Fri 17 Apr 2026 03:00:31 +0000
Manifest next update: Sat 18 Apr 2026 03:00:31 +0000
Files and hashes: 1: 1ZD-5sWPvLvF_F5r7aK4sjXeBa8.roa (hash: 9g3E8L94O35utFKdVj/OF7X+jv2TAGMuo7bfCk2FBWk=)
2: Jgh8TRgca-Yzk4zbDo1y-y8oAjA.roa (hash: 1YiIe3dsEVG85vOw2eS5VT5pNrhUblvJwxJsfNgGFh8=)
3: kpO4RG28fYYVmBuJSIXGaHvSxU0.roa (hash: i8inyU2Y1UbsH+wXnBk66d0sVuBHQPuFEaJpwKKuPzA=)
4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: VUUUfKHwobZHqNKUht+s/QCMUqSmbYz7YlK2QfbgRWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:07:e3:1f:d5:ea:6e:b7:b1:ff:c0:5b:66:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Apr 17 03:00:31 2026 GMT
Not After : Apr 18 03:00:31 2026 GMT
Subject: CN=8d2a58a4881e8db4d3887f9ad279a41ad8a0e322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7f:72:e6:d4:02:47:0b:40:51:5f:4c:f4:18:
7d:c9:a2:ea:bf:d7:95:bf:e4:94:4a:87:31:1c:83:
0f:4d:69:7f:c1:94:ed:aa:f7:79:80:93:32:9f:39:
55:34:37:66:cb:57:4e:f5:58:f7:dd:e0:39:79:12:
74:65:8f:17:80:f1:41:40:66:ba:eb:5b:e3:ff:09:
85:53:91:51:16:23:48:56:64:65:95:e5:33:38:bb:
29:42:de:c8:aa:95:4f:4d:ff:05:ad:cc:69:a5:8d:
82:98:02:42:c9:d0:77:c2:e9:5b:57:fa:1f:17:40:
c9:67:d0:c6:72:d9:f2:56:fc:7f:c6:83:3b:3d:f4:
28:2c:f7:39:a7:90:29:d2:c3:d7:ce:48:15:da:59:
b9:f5:1e:3a:23:86:1a:50:2a:17:50:40:71:e0:1a:
78:81:e4:cd:b0:cf:b9:f2:d7:1f:18:e1:4f:84:4b:
5d:f2:22:8a:d3:e4:cf:08:0a:39:15:74:15:e3:29:
09:53:93:f1:c6:9c:8c:dc:28:e8:b1:f0:9a:ea:70:
16:51:e7:19:b4:66:cd:04:2b:dd:27:42:dd:c6:17:
2a:ae:d7:a0:28:26:e6:ae:ea:e1:04:26:a8:0f:a2:
e4:2a:45:16:58:a5:18:22:1a:7d:76:f3:42:5e:de:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2A:58:A4:88:1E:8D:B4:D3:88:7F:9A:D2:79:A4:1A:D8:A0:E3:22
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f3:10:dc:a3:1c:15:71:84:78:83:75:85:53:36:22:46:ce:
4b:76:3b:7a:8d:32:5c:95:89:d4:1f:68:09:76:ea:ee:08:3e:
0e:ad:88:e8:dd:fb:e1:6b:77:60:e0:9b:0f:bf:80:ba:30:6d:
0a:6e:3a:3c:6d:bd:20:38:72:03:d9:ce:63:63:fb:87:35:34:
20:d9:9c:5b:b1:7c:73:29:90:55:5f:e6:01:0b:23:f8:0f:c4:
4e:5e:c5:b0:30:1f:ba:b1:03:08:a0:03:49:92:b9:20:98:9c:
58:26:90:e1:16:5f:95:3b:79:a9:6b:14:a4:c6:d0:c0:3f:a9:
89:f5:70:61:76:67:7d:dd:f1:4f:64:14:07:3b:a7:18:03:13:
6c:34:d6:10:67:58:9c:24:19:f8:35:09:4c:4c:c2:7a:99:09:
29:61:49:84:70:44:a4:8c:9a:a8:ac:58:29:52:11:89:08:b8:
df:ee:ed:20:57:49:2a:65:04:41:ce:a6:d8:c3:cb:60:3c:39:
c8:16:59:09:8c:f2:65:43:be:7e:30:18:38:07:3d:ad:57:0d:
ec:e7:bd:c6:d3:3d:ba:31:6f:3c:62:b7:05:41:b2:1e:89:43:
ad:72:75:44:a4:6a:42:cf:03:94:d9:f1:63:f6:11:92:e5:2b:
c3:bc:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:08 2026 by rpki-client