Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: AiA+/5qKBb5rBlDNQVZLb0ejDkgeArfSkpryKEd/VAg=
Subject key identifier: BA:4D:FF:68:5F:34:0B:19:C7:7E:FA:D7:8B:D1:44:29:0E:FC:94:1D
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 019DD91DB1E62F734E2223703B7DEC74F8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 07F4
Signing time: Wed 29 Apr 2026 12:01:35 +0000
Manifest this update: Wed 29 Apr 2026 12:01:35 +0000
Manifest next update: Thu 30 Apr 2026 12:01:35 +0000
Files and hashes: 1: 1xRS3NEJjEx5UZbwpqmlKAt2jws.roa (hash: js9Axf4ESCujTVZU7VYFjkx4kXDlOUsMLJ+P9IJ0OBk=)
2: FGHSySotSpOKaNLpsAxEZbVXQws.roa (hash: nxZE3ZEDAfrFSYoAOUMwq235qoOhi9CvADpYdOkFcZU=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: qOoF7doQUy+Yg7eFZFxRJ17uH0p7W2ntpGo3VSo5Kt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:1d:b1:e6:2f:73:4e:22:23:70:3b:7d:ec:74:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Apr 29 12:01:35 2026 GMT
Not After : Apr 30 12:01:35 2026 GMT
Subject: CN=ba4dff685f340b19c77efad78bd144290efc941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:be:45:df:32:2d:c0:f2:3c:8e:f5:d5:9c:
b1:74:1f:1f:3a:d3:00:4d:65:f5:f9:c7:2c:c5:74:
54:93:be:e7:4d:79:d4:ec:94:3e:9b:1d:88:90:5a:
cc:e6:84:85:93:32:6b:e3:1b:17:e8:03:88:37:c9:
ae:05:6e:af:c4:3d:bc:30:1f:b9:e6:84:04:7c:7d:
2c:cb:03:29:dc:27:04:70:ad:63:ee:a6:b6:2b:be:
68:2c:a5:ed:35:91:42:07:8c:b7:60:13:e1:26:e1:
cc:e8:01:1e:43:68:46:e1:ca:dd:a8:af:ec:d1:cb:
2e:92:82:f8:19:37:4b:60:62:b2:90:c7:62:db:11:
ae:e7:73:75:1c:62:9e:cb:5b:cd:88:df:cb:d1:a2:
35:c7:81:59:d0:17:4e:10:8b:df:66:62:c7:26:c8:
19:fb:47:95:d8:24:6f:85:70:ca:a4:e0:ac:6a:43:
8e:40:5f:c8:55:b0:b1:ac:cd:54:cc:d8:c3:29:76:
37:68:b6:1c:32:28:23:83:42:32:9d:1b:aa:95:24:
0f:fd:38:1b:ca:02:27:85:67:11:d8:76:89:3c:7a:
03:3a:cf:99:9c:42:a2:0b:81:4d:73:93:af:71:dd:
4e:77:e6:31:a6:e6:b3:14:44:1a:1b:4f:07:06:a4:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4D:FF:68:5F:34:0B:19:C7:7E:FA:D7:8B:D1:44:29:0E:FC:94:1D
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:aa:2d:eb:77:36:c5:d6:c4:28:5c:29:c3:83:af:78:3c:75:
5c:e5:2b:ee:2e:4f:69:d9:01:a1:88:74:9f:a6:85:03:7d:ba:
cc:62:f1:9f:b7:98:66:90:da:d9:18:c4:a7:95:71:a5:10:2c:
84:85:c4:b5:21:3b:ef:0a:78:fa:bb:d7:29:5d:87:7d:eb:ec:
ba:6b:c5:3d:ba:1d:ce:a2:43:62:3a:56:33:7d:a4:8d:09:ca:
e4:c9:a7:b5:74:0a:95:80:b5:4b:8b:45:84:fb:5a:3a:25:7e:
56:5a:3d:fe:8c:44:46:78:a6:5a:6a:99:59:6d:8d:9c:b3:77:
f5:1f:08:8b:bd:2a:2c:87:93:37:34:7e:d4:8c:31:2a:47:21:
ce:7d:ed:f5:fc:de:0a:ab:f8:9a:2c:c5:5e:2c:0e:ca:79:e3:
76:71:91:86:7f:0b:1d:42:05:af:56:fd:7b:50:4f:e3:17:73:
71:31:0b:2c:b3:60:ef:6d:13:5a:6b:b0:5e:b4:4f:6c:c7:29:
52:46:2e:af:3b:89:92:58:84:5e:ad:da:ae:92:73:72:d5:df:
14:a7:3f:f8:3e:76:04:91:71:17:db:15:29:99:01:80:06:5c:
c9:5f:3a:c2:cc:b7:ff:5d:61:0d:7b:98:05:12:03:34:c5:4e:
7f:4e:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 18:10:11 2026 by rpki-client