Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
File: y748bZmBGBnO3dzSfkviW8DPUG8.mft (raw, json)
Hash identifier: tEilu9/TF+orcm5SjsnzbNVgoebzq/vPVeze62C1wfg=
Subject key identifier: F3:66:F2:63:87:52:7D:22:DC:44:7F:D0:30:79:65:11:79:1F:C8:2A
Authority key identifier: CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
Certificate issuer: /CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Certificate serial: 019D98F47C29F9A1C57A47BC56C69F51E8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
Manifest number: 13ED
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: SRftmv9sQMTlSJPXfowLnAaGrnE.roa (hash: HYcUVT7S2MMJhQf2Ty7rezIr8XBfCmUq2EwYkkh9kE0=)
2: UdthD-mHKRSAmhucefcr8Jq7Psc.roa (hash: lVsaOqAelHfvqHNn/6/Wb6tKGvQfaZI6JG0LsDpyxOY=)
3: gqOpS-28u42YNGKEB_JVnGai9oM.roa (hash: IToAx5jrtAZ+cIDNcVkiQZZOuWe9Knt1GiJD5XkMVss=)
4: y748bZmBGBnO3dzSfkviW8DPUG8.crl (hash: KQks1JDXGucCEZblJGKETsi7WcTU68wPimv7fMVJJA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7c:29:f9:a1:c5:7a:47:bc:56:c6:9f:51:e8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbbe3c6d99811819cedddcd27e4be25bc0cf506f
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=f366f26387527d22dc447fd030796511791fc82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:1f:e1:d3:d7:6e:42:1e:d8:c5:01:f9:8c:
4d:86:8e:03:34:06:ab:f3:60:00:5e:9b:0e:3f:59:
85:7f:2a:20:0b:11:12:65:88:bc:a2:c2:55:61:ec:
49:c5:89:45:5d:f5:2f:77:08:d8:62:ad:5d:22:f0:
1d:99:0f:ab:d3:df:e5:ec:6b:d0:2e:ab:fd:f1:37:
4d:f5:9e:10:9f:aa:e6:39:71:e7:6c:9d:85:6f:88:
46:a6:0f:2f:a2:8f:10:4c:c8:c4:b9:83:70:ca:a0:
86:78:55:a5:2b:03:c2:6a:47:da:e8:0c:8a:44:b8:
df:4c:13:dd:a2:f4:a6:3d:e8:02:2e:f3:4f:89:0f:
23:f9:2a:9b:33:23:c6:c2:c8:7f:ab:fa:b2:f5:a5:
53:b9:89:6a:94:72:27:1b:1d:ee:a8:d4:6c:44:bf:
09:85:8a:b3:52:20:e2:e1:37:31:49:87:7c:7c:08:
32:77:45:5a:ae:90:c8:df:bb:a1:2e:85:93:f3:15:
12:7c:f0:9f:c3:05:a4:ca:12:fe:b6:ea:a3:3b:7e:
5b:32:a1:c6:f8:33:b2:9a:0f:7b:34:e6:ca:8e:80:
ed:38:06:b3:ca:86:ba:7c:ca:b8:d2:a2:11:ae:21:
d1:c4:10:9c:b0:64:9f:2a:e1:11:09:bf:a8:13:67:
65:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:F2:63:87:52:7D:22:DC:44:7F:D0:30:79:65:11:79:1F:C8:2A
X509v3 Authority Key Identifier:
keyid:CB:BE:3C:6D:99:81:18:19:CE:DD:DC:D2:7E:4B:E2:5B:C0:CF:50:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y748bZmBGBnO3dzSfkviW8DPUG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/848c8b-0e9c-4d6e-873e-8cf7d4493358/1/y748bZmBGBnO3dzSfkviW8DPUG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:46:5e:46:94:95:e4:62:00:79:31:ec:bf:c2:96:a9:93:42:
41:00:af:ef:98:27:05:a2:c6:35:20:03:2e:d0:93:83:94:ba:
b9:31:11:cb:dd:88:d4:4f:ea:06:68:f5:06:ba:1b:97:0f:5d:
ce:2d:64:c7:d6:7e:b5:7b:be:fb:7b:5c:25:98:15:bf:aa:09:
40:ca:de:b5:93:36:85:89:d4:0d:a1:83:de:d6:60:99:a5:fa:
4d:12:33:18:f4:6a:7d:2b:1c:ed:51:8b:09:c6:9e:52:23:6b:
47:de:6b:b6:88:ba:b3:ff:42:fa:e8:80:14:e7:37:e5:2c:b3:
b1:cf:bd:c0:67:ef:c6:ab:fa:0a:a8:4b:af:7a:8c:d4:fc:fb:
08:4c:8e:23:58:25:ad:f9:c6:3f:5c:60:f8:36:fb:b0:53:77:
65:2d:f2:61:61:4e:18:4f:0c:11:24:b0:2c:17:eb:ca:75:f0:
06:8e:8f:37:20:b2:52:9c:6c:ad:75:8d:d6:4c:e1:2f:f4:76:
a1:f1:20:73:c8:e5:cc:23:5d:a2:e7:22:96:db:f4:66:0b:dc:
bf:27:09:e1:d2:b2:c6:1e:2f:22:1c:72:46:75:eb:df:39:3b:
7f:60:34:ef:c2:13:1b:3c:b0:d1:1c:c2:36:2a:43:0d:f0:42:
43:f9:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:08 2026 by rpki-client