Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File: Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier: 2p59v31czCVOOlpO2ZWKHH3wNpJk0ybt3Cb0qGWcyfI=
Subject key identifier: C6:08:CE:D5:CE:B3:D4:3B:C9:05:EB:BD:D6:E6:04:BA:16:21:A7:47
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer: /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial: 019D9BBE8D8DB9801F9D86DDAE8E4D66D1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number: 0EF3
Signing time: Fri 17 Apr 2026 14:00:49 +0000
Manifest this update: Fri 17 Apr 2026 14:00:49 +0000
Manifest next update: Sat 18 Apr 2026 14:00:49 +0000
Files and hashes: 1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: OIoYmjlgSvg/rreaWeK6mK4V+4fPLg3sSyYfI6xRW6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:8d:8d:b9:80:1f:9d:86:dd:ae:8e:4d:66:d1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Validity
Not Before: Apr 17 14:00:49 2026 GMT
Not After : Apr 18 14:00:49 2026 GMT
Subject: CN=c608ced5ceb3d43bc905ebbdd6e604ba1621a747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:b4:a7:50:3a:7a:c2:30:06:c4:de:d8:34:
80:4d:3f:ce:91:c1:a3:92:bd:78:a6:dc:c0:85:05:
3b:c1:3f:a0:40:4b:62:be:80:b0:4c:d8:1a:15:a4:
b6:5e:63:13:45:41:a9:57:df:46:cc:e5:7f:cc:a7:
5b:ed:dc:e3:2f:7e:99:87:23:48:70:79:59:2a:b8:
04:4b:d4:1f:40:c9:cd:4c:39:f3:15:d7:36:4f:0c:
23:65:1b:98:58:e0:25:dd:32:da:4a:74:c2:1b:be:
af:69:a8:4f:fd:82:70:2d:fd:95:9e:66:a4:56:e9:
ac:3d:13:df:3c:46:fb:2a:74:02:5f:ef:f9:42:e6:
d0:b7:25:7f:ce:6f:c3:04:de:bf:96:18:9b:14:d1:
6d:09:e7:24:7b:1c:1d:19:d2:61:28:a2:0a:d6:1e:
9c:2c:84:c5:86:16:6e:ee:4a:7b:fc:4f:5d:82:27:
e7:34:8f:f4:65:5c:03:54:f9:c7:99:ac:9a:e5:a8:
0d:8b:a2:0f:a3:b7:fd:5f:5a:e3:ce:da:61:12:3a:
e4:f1:93:16:89:6e:7d:4c:65:1e:60:83:e7:5d:89:
d6:6c:d9:c6:f5:2a:f9:8a:b9:26:21:e7:10:49:3b:
67:7f:bc:06:61:2e:00:a7:04:0e:71:3e:ca:f7:b8:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:08:CE:D5:CE:B3:D4:3B:C9:05:EB:BD:D6:E6:04:BA:16:21:A7:47
X509v3 Authority Key Identifier:
keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:e0:c4:3e:6e:1a:41:3c:e3:23:cf:78:02:18:03:df:76:
29:72:a1:10:fc:36:1e:09:63:f1:b9:14:22:27:f2:e3:db:12:
77:df:0c:8f:5d:21:2b:ec:72:d5:5b:94:b7:e6:4c:25:b7:d7:
9a:ec:8c:70:7c:7a:ac:89:c0:17:70:f0:3b:43:80:91:64:ae:
a4:db:7e:93:35:f6:d4:c5:26:56:3f:31:04:49:5b:5b:bf:2e:
5a:e6:72:6b:fe:1e:e7:65:88:92:27:38:70:c7:a8:8c:ef:d4:
58:67:14:a6:28:45:1e:a9:ae:73:8c:ea:d8:29:7e:a1:ae:83:
5c:e2:4c:42:db:dd:45:3c:ef:87:26:4c:91:d1:a3:60:6f:92:
54:d5:f3:2f:62:28:e0:8b:d7:72:b6:33:73:00:83:97:00:43:
f2:1f:81:fd:ad:82:03:85:63:f3:14:ed:4c:90:6a:28:b8:a0:
6f:6c:dc:25:e5:d7:70:c2:a5:3d:19:97:5c:93:9f:e5:73:b7:
d7:51:14:b7:27:d2:bf:74:92:72:f4:37:9e:28:ef:82:ac:c2:
71:1b:b6:f4:5a:5d:a9:c7:f4:b4:de:3c:e7:67:f0:c3:7e:56:
30:3a:0f:16:0b:cd:75:35:99:31:f7:a1:f0:80:33:76:92:47:
0d:33:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:06 2026 by rpki-client