Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
File: yL68_oKyYn6o3oFhy5J7JFsFjmk.mft (raw, json)
Hash identifier: 3KVZioGk63ACnLUlDzRdF7pZe8FmRxQdAo3M98+qJsQ=
Subject key identifier: 38:7D:18:9D:CD:FD:80:55:08:C5:7F:ED:0B:C2:46:0D:83:E1:BF:6A
Authority key identifier: C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
Certificate issuer: /CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Certificate serial: 019D98BD1FE0D375818F7748B8D30970A6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
Manifest number: 1483
Signing time: Fri 17 Apr 2026 00:00:24 +0000
Manifest this update: Fri 17 Apr 2026 00:00:24 +0000
Manifest next update: Sat 18 Apr 2026 00:00:24 +0000
Files and hashes: 1: 1Xm89aaBpVMV9cKG43MJiEDRyXM.roa (hash: xvK5vKdtM3Q6AqquyM/QFwGngU91NCTC/sOOpP25kiI=)
2: yL68_oKyYn6o3oFhy5J7JFsFjmk.crl (hash: 7htqErRHOuQU0ChAvebOuckNN9A6r1QFiz+YiN5Wp+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:1f:e0:d3:75:81:8f:77:48:b8:d3:09:70:a6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8bebcfe82b2627ea8de8161cb927b245b058e69
Validity
Not Before: Apr 17 00:00:24 2026 GMT
Not After : Apr 18 00:00:24 2026 GMT
Subject: CN=387d189dcdfd805508c57fed0bc2460d83e1bf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:5a:ad:29:2f:05:2d:63:20:6a:1c:4c:03:
cf:16:47:30:a6:1e:dd:a5:e7:3b:87:7c:20:22:0f:
27:ba:f4:b8:d3:4a:c3:62:f5:ff:c8:36:98:1f:88:
c3:d9:18:ee:86:35:8b:48:94:ca:e6:6b:c6:3f:5c:
3b:ca:da:2c:c1:a0:1e:dc:cf:ae:51:45:a0:75:c5:
c0:76:eb:21:4b:15:e1:cb:84:5f:db:d0:6b:a3:56:
bc:03:d9:59:47:15:52:34:7d:c7:89:d5:7c:af:d1:
01:0f:b1:b7:13:25:28:8f:aa:01:fd:98:6f:20:65:
a7:87:d5:b3:d4:cc:a2:41:2e:71:99:dd:8a:ba:7d:
58:32:4a:02:1a:d3:05:a8:13:7b:4d:a6:d5:54:b6:
5d:39:37:b2:3a:36:5d:4a:bd:02:59:20:2d:b8:8f:
f1:90:d5:e3:5e:29:01:20:7b:ea:06:af:cb:bf:70:
f3:e6:fd:18:e3:e2:5e:51:68:22:62:d2:c4:0d:d1:
33:96:f2:63:df:04:ce:8c:52:95:df:01:bd:9f:17:
f9:a2:f0:75:1c:03:b1:25:3a:81:6f:d9:b9:8e:a0:
9c:62:7e:4e:16:97:d0:38:79:da:c9:9a:b8:4b:70:
56:70:51:96:c5:f3:5f:95:1d:08:5e:32:d4:a0:53:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7D:18:9D:CD:FD:80:55:08:C5:7F:ED:0B:C2:46:0D:83:E1:BF:6A
X509v3 Authority Key Identifier:
keyid:C8:BE:BC:FE:82:B2:62:7E:A8:DE:81:61:CB:92:7B:24:5B:05:8E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yL68_oKyYn6o3oFhy5J7JFsFjmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ea17b3-d54e-4279-ad98-deef7f151e8e/1/yL68_oKyYn6o3oFhy5J7JFsFjmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2a:f4:43:ab:cf:22:5b:31:d4:b8:bb:26:44:1b:48:0a:3e:
a1:af:e3:0e:19:d0:07:7c:ea:ba:31:3d:a0:7b:a9:19:ed:70:
90:10:bb:3a:46:eb:28:25:bd:52:2a:48:ea:c7:53:91:e5:e5:
c8:11:04:d5:6c:34:53:70:fb:20:c5:25:ca:a1:3d:34:79:67:
aa:5c:47:13:e6:e6:6f:4a:72:96:b5:23:0d:bf:c9:4b:3e:bb:
5a:8f:88:16:5f:db:d6:68:eb:1d:d5:3b:f2:dc:35:a4:f2:4e:
11:11:22:20:da:11:d4:2e:7d:66:e6:b5:58:de:61:82:e0:b3:
ee:3d:ad:b5:57:63:b4:31:d7:81:4f:40:fc:de:aa:ab:12:92:
94:e0:d8:6d:cf:06:15:2d:4b:d5:14:3c:af:ea:5f:8d:1b:3b:
bf:b0:84:02:0e:82:58:96:58:28:c5:ee:7f:ed:4d:f6:23:66:
5b:31:fd:0d:c7:be:c0:e9:cb:92:9a:25:35:7d:2c:3a:8a:63:
37:97:25:e7:ad:72:79:17:8e:32:1e:05:2e:e0:cb:00:f2:6e:
53:9b:41:eb:44:05:a3:65:ca:42:e1:c6:14:96:f6:67:6d:33:
23:87:17:4a:c3:18:de:dc:3d:6a:52:33:fa:d5:3b:e0:93:83:
10:58:40:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:10 2026 by rpki-client