Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: S5zJY4I43uNCx5bgnCWqx4PYwP+0qlOgifEBdgX+sYs=
Subject key identifier: 8D:AF:F8:C3:B9:19:26:61:A3:53:CE:32:79:14:A9:CF:AD:4A:BA:24
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 019D9818940DA161B4E9D29A0453228872A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 0AD2
Signing time: Thu 16 Apr 2026 21:00:40 +0000
Manifest this update: Thu 16 Apr 2026 21:00:40 +0000
Manifest next update: Fri 17 Apr 2026 21:00:40 +0000
Files and hashes: 1: 0vGrMxojgcPt9P0KUJob_C_cA4U.roa (hash: fVAae7Y5Zz2XdpZ74Up9h49RGw16VEUvuuQIWLhSejw=)
2: KbmQvdtw005bLkDFKvnTpXFlk4g.roa (hash: dXlkajMu1mbeHv48NSi0zEYpzy7e58YEKKA2joNBYBw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: KD18ZY+lvDGy+BgRXQLhF6Bjvj1eU+tOcY5RDZKz8l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:94:0d:a1:61:b4:e9:d2:9a:04:53:22:88:72:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Apr 16 21:00:40 2026 GMT
Not After : Apr 17 21:00:40 2026 GMT
Subject: CN=8daff8c3b9192661a353ce327914a9cfad4aba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:9d:b8:c3:ca:11:99:d4:9d:ee:d9:8e:3a:
41:ee:35:89:98:39:3b:f0:03:e9:c0:63:7b:95:b9:
43:2c:4d:1b:1f:a4:f0:1a:42:12:7c:c8:3a:3e:7a:
d4:3e:06:63:19:9d:fe:fb:6f:81:52:0b:65:2e:62:
84:62:71:01:b7:47:5f:c3:35:14:ca:ae:7f:ff:80:
23:0e:1b:3b:6c:a8:d7:fc:84:dd:4e:cc:3c:7a:c0:
64:0a:5b:a1:80:b6:72:c8:3d:19:ba:40:85:ab:49:
be:e8:90:e3:ac:74:fe:e9:24:1c:c5:32:a5:ff:15:
07:e6:3b:49:31:4d:8a:42:70:0e:d1:61:60:f6:73:
a2:7e:69:f1:55:d8:43:00:30:bc:6d:99:8e:d6:d0:
bf:45:3d:a4:c7:97:16:a9:18:4d:32:01:26:c2:65:
f9:1b:fb:09:70:05:3b:35:e2:fa:c0:65:47:56:46:
6c:08:e0:8e:a6:b8:6d:c6:bc:46:a9:96:7d:88:33:
58:f3:2c:ee:37:1f:50:6f:1d:f9:57:0b:7a:bf:71:
ad:b4:4c:e1:1b:f6:ed:8d:b2:49:b7:53:af:36:62:
11:88:2f:59:6a:e5:4f:ae:19:43:56:73:c7:59:f1:
c0:6b:e7:a9:d2:b9:16:17:54:08:ee:bb:16:6e:bf:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:F8:C3:B9:19:26:61:A3:53:CE:32:79:14:A9:CF:AD:4A:BA:24
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:96:8d:36:fa:7f:8e:f8:37:5f:82:5a:c8:36:8e:37:19:f8:
4d:a5:fd:21:35:56:2f:85:84:30:ee:22:17:c1:08:5b:96:2d:
a6:f8:2b:62:7c:9d:d0:09:8c:d0:5b:95:59:a4:4c:28:42:d6:
ab:02:ff:16:49:d8:c0:54:31:48:0b:c4:f5:34:65:35:ec:be:
d4:83:e0:a7:c3:06:05:6e:c8:45:57:ad:30:a5:a9:5e:21:65:
0a:18:3c:18:d4:ac:03:10:2b:2b:13:cc:bc:fd:00:53:de:4a:
97:19:8c:4d:24:d1:55:bf:04:d8:4c:54:a9:93:ac:d4:59:63:
47:d4:5a:3b:f3:92:5b:00:93:3f:8e:33:d2:65:f1:5a:30:21:
3f:96:73:cc:39:57:7d:07:17:2f:3f:6a:60:8a:1f:e5:49:0f:
99:2c:d4:6d:5e:1a:70:26:0e:ae:98:5f:48:26:a7:62:9d:5f:
e6:d2:69:8e:f9:c5:6b:9a:e5:69:74:3a:c0:25:35:c2:2e:3a:
d1:bc:e6:ca:ca:2c:96:11:50:b3:b9:ff:fa:e2:3a:a4:f6:56:
ee:10:9e:19:42:73:a6:57:38:82:a0:68:e9:b0:14:0b:97:0e:
a7:b5:d1:07:e2:9e:55:ea:66:f9:82:15:35:cd:84:56:9d:d4:
80:53:0c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:18:38 2026 by rpki-client