Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: /Yp98ra3JHX2yqeSocGowDvTi8nLnC9PGbvLQ/u8q0c=
Subject key identifier: 8A:DB:B1:4E:45:EB:4C:54:06:C2:D8:A5:06:99:9B:5A:2F:25:19:49
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 019D9A3DF73197C7886A5E4046E9FFDE3035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 0300
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Sat 18 Apr 2026 07:00:45 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: H8x4g6Z//m6aIb0ZMH1NAFJ5iwGER5MC5Vwbk932M5A=)
2: svfbdlsbXDjgA-A5NXKRbfvSSU0.roa (hash: S4K6rQ06DpmFLzmXdsKn8rYW01MHbvPxeo9PGG/tM+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f7:31:97:c7:88:6a:5e:40:46:e9:ff:de:30:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 18 07:00:45 2026 GMT
Subject: CN=8adbb14e45eb4c5406c2d8a506999b5a2f251949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:f0:13:3f:d7:1d:37:62:2b:13:2d:8a:fb:
a2:68:9e:92:d6:64:d8:ae:2e:85:0c:a4:84:20:cd:
55:96:0d:2a:e4:4b:12:13:5f:9c:13:28:4d:ba:b0:
90:b8:05:0c:8a:a4:48:61:5f:5e:10:a8:53:65:a3:
79:bd:19:14:7e:57:f7:33:fb:21:5b:d4:86:50:80:
df:d3:73:c7:77:57:15:92:7d:20:62:cf:2e:34:6c:
d8:55:dc:d6:c9:43:66:58:9e:ef:4d:c3:fd:e4:24:
1f:13:1a:45:80:72:21:91:20:cd:d7:2a:c7:e4:05:
36:8a:dc:7e:fe:05:12:20:65:1d:87:b1:33:f5:29:
c2:1f:16:09:72:18:12:73:8a:ab:72:db:6d:67:e7:
16:04:7d:50:b8:db:3f:ae:96:0e:7b:82:cd:27:25:
fb:82:c0:ba:1e:50:ab:2a:e4:7a:01:02:47:f4:40:
81:80:a9:2f:78:3c:7f:d1:e0:1f:ca:f1:31:87:02:
5b:88:73:71:b4:17:13:b5:77:32:28:4e:8c:6f:71:
eb:e1:01:9c:7a:8c:6b:d6:3b:2f:df:e0:45:19:92:
ba:08:6f:dd:ac:84:8d:8a:ec:89:95:60:64:53:16:
47:45:66:ee:de:71:d4:55:46:ee:04:22:9d:22:a2:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:B1:4E:45:EB:4C:54:06:C2:D8:A5:06:99:9B:5A:2F:25:19:49
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bd:78:04:91:4a:03:17:64:00:fe:ce:90:80:20:b1:c8:1a:
fb:b8:4f:37:39:d5:34:94:18:79:fd:6d:97:9c:6d:f9:bc:98:
dc:12:ef:fe:c0:57:29:18:f1:c8:f3:65:85:31:ae:13:f4:9d:
70:46:a0:2d:ee:5e:20:22:22:1a:f5:3f:44:6c:13:27:7b:76:
8a:68:12:6e:cc:3a:b9:33:96:23:95:49:66:86:01:57:8d:69:
06:30:2f:4b:80:10:0f:55:9e:dd:d0:31:d5:a4:ee:8a:2d:b8:
58:b9:1a:d2:47:94:09:b3:b7:4d:6c:9b:09:6d:55:25:7d:5e:
f2:28:c1:1a:e9:91:fa:34:04:e7:b7:23:77:02:cd:e7:f0:67:
64:b8:0d:37:90:e8:73:4c:4d:18:cd:ee:37:e8:1e:ae:82:35:
9f:45:49:32:1b:6e:17:d1:66:e6:88:9a:7c:5b:d2:ed:7d:e5:
50:59:cc:a6:48:31:5e:9a:e5:3b:53:e5:76:15:dd:f4:31:1d:
72:a2:33:6a:48:2e:dd:10:3d:96:0a:cc:3e:57:9e:24:80:73:
75:c3:cb:11:22:27:4e:c3:a9:f9:f5:04:94:54:51:ec:8e:ab:
12:1e:67:db:2e:55:e6:22:53:6b:b8:38:c1:a7:7e:fa:97:32:
3e:bf:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:52 2026 by rpki-client