Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
File: f_yCWF32m3yUsWphky_8i24zUVY.mft (raw, json)
Hash identifier: Cd7vlIM8C3hUdJUqauf1xbWHLZnx2EtBclqUZUldVvc=
Subject key identifier: 8A:B9:52:1A:98:80:47:C7:7A:41:6D:B2:3A:F0:5A:5C:93:3D:82:AE
Authority key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Certificate issuer: /CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Certificate serial: 019D99D0A514A581E6C111F47FECCD966F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
Manifest number: 1499
Signing time: Fri 17 Apr 2026 05:01:20 +0000
Manifest this update: Fri 17 Apr 2026 05:01:20 +0000
Manifest next update: Sat 18 Apr 2026 05:01:20 +0000
Files and hashes: 1: f_yCWF32m3yUsWphky_8i24zUVY.crl (hash: XZcD+OoSgQS2xK4pJSGImbsQO+f4UccxOMP6fBmI0cs=)
2: l6hhFXm91_1hUHfqAiTC3reWmvc.roa (hash: g7ZHYlhYjCzwKg6ri+src+vOXxkbh94Rt78zZvtYmJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:a5:14:a5:81:e6:c1:11:f4:7f:ec:cd:96:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Validity
Not Before: Apr 17 05:01:20 2026 GMT
Not After : Apr 18 05:01:20 2026 GMT
Subject: CN=8ab9521a988047c77a416db23af05a5c933d82ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a1:c1:9a:de:0d:b7:35:be:33:94:95:2d:9c:
10:01:52:41:46:42:76:af:43:57:ff:53:80:f8:5b:
72:65:8e:2c:ce:7d:52:f3:38:22:8d:80:4f:ab:49:
1c:6a:aa:18:fe:e2:44:1f:ab:70:1d:b9:da:59:8c:
ce:a8:d7:35:82:e5:3b:a1:00:9f:8f:89:2b:9d:9b:
20:a1:3d:12:34:52:af:3c:b5:33:e1:30:66:4d:53:
18:65:69:19:0e:c8:bf:75:29:2a:ef:73:e8:4d:84:
67:2c:36:17:6f:30:d1:ec:c2:1d:6b:36:f6:00:e3:
88:49:98:06:e9:c2:5b:a0:60:df:df:bf:55:aa:eb:
57:41:a5:2d:1a:92:6e:62:c6:00:8d:63:55:b5:a8:
9b:a7:49:45:a4:94:ac:53:bd:72:af:5d:da:f7:fe:
48:2a:75:e3:3c:6d:4a:c6:6e:18:8b:3f:24:96:fa:
19:c3:77:e4:17:e0:c7:70:36:ed:7b:58:2e:82:2d:
d5:b6:7f:3c:66:29:72:ad:bf:f9:a8:33:df:eb:2b:
b5:56:99:2c:3a:d0:66:47:07:3c:3b:fc:1a:c2:6e:
ce:96:d2:78:2d:07:09:de:ec:6c:64:19:f3:96:bb:
c0:c9:7c:32:c9:25:c6:cc:d6:ba:d7:19:96:ca:6d:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B9:52:1A:98:80:47:C7:7A:41:6D:B2:3A:F0:5A:5C:93:3D:82:AE
X509v3 Authority Key Identifier:
keyid:7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c0:76:f2:8e:f7:8e:bb:d3:e9:32:4f:97:7b:db:29:15:b0:
d5:b2:1c:d1:45:05:ab:23:d8:64:86:0b:7f:dd:3c:2e:7f:88:
35:d0:c4:62:8d:28:87:c5:8e:b1:d0:e1:66:41:5a:61:1d:c8:
75:6e:24:31:fe:db:3b:1b:77:4c:fc:90:49:b8:81:6b:c2:8c:
6b:44:95:c6:e6:3d:5d:c4:e7:fd:51:b6:8b:9e:fa:c6:53:00:
57:46:b5:ea:9c:e5:8f:d2:94:7d:c3:16:3e:d1:3e:20:ed:a9:
07:e6:02:1b:1a:7b:7c:7c:97:4b:0e:7b:7a:8e:40:6e:d4:eb:
06:da:e8:8a:15:e9:18:b5:35:b4:7d:7f:16:5c:88:f0:74:ac:
21:b5:ac:3a:a5:eb:e2:86:71:7d:86:38:36:e6:fd:ef:61:4a:
8f:b6:2e:d3:76:92:4d:11:27:cd:ca:8d:6c:a2:f4:58:23:53:
df:45:c8:51:46:33:9c:0c:b7:07:4c:34:9c:cf:8a:2e:ba:62:
57:c1:42:bd:2d:7f:2d:15:8f:4e:bf:1b:ab:a3:78:09:4b:aa:
a8:d1:21:e6:94:f0:60:15:d1:ce:62:dc:28:23:48:83:04:23:
2c:19:12:fc:fc:39:5e:0b:1a:c4:f6:4c:a2:e9:de:83:5b:36:
c6:d8:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:14 2026 by rpki-client