Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
File: yzJFVZQK5Rr10fQr1axxWGT6GCk.mft (raw, json)
Hash identifier: CsaFmFjZtgyJ2gPDEzdas4UlICn58Y8nIabzxGM9J/4=
Subject key identifier: 6C:2F:50:BE:2D:B0:37:A4:1D:5E:23:40:46:46:26:49:FF:94:09:88
Authority key identifier: CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
Certificate issuer: /CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Certificate serial: 019DDBB076EFF7177D54DB6EBFF39A86C1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
Manifest number: 0935
Signing time: Thu 30 Apr 2026 00:01:08 +0000
Manifest this update: Thu 30 Apr 2026 00:01:08 +0000
Manifest next update: Fri 01 May 2026 00:01:08 +0000
Files and hashes: 1: 1-kjmng8g4ned1jrB9NFdtyqe9mM.roa (hash: vHRUVNFuySdUhd0UHIiFZU/Y6jX046RcW/mUgeD/VsA=)
2: ULhfeft8ruaAOSycLGgspsB9WDM.roa (hash: YhwNNP4dPs6tEXJFWm3JKl3sMP3qxhh6F+89COgcPeM=)
3: yzJFVZQK5Rr10fQr1axxWGT6GCk.crl (hash: XwMtlHtwoXK6fBvXcqHzdwaRt0zsq/bjZEy8d8Rku68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:db:b0:76:ef:f7:17:7d:54:db:6e:bf:f3:9a:86:c1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb324555940ae51af5d1f42bd5ac715864fa1829
Validity
Not Before: Apr 30 00:01:08 2026 GMT
Not After : May 1 00:01:08 2026 GMT
Subject: CN=6c2f50be2db037a41d5e234046462649ff940988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:80:cb:07:72:35:d7:52:fc:fd:da:23:0d:26:
c7:8a:be:72:da:d5:6f:1b:37:2b:94:74:4f:a5:4a:
2c:7c:7c:33:fc:e0:da:91:9f:41:c2:92:b0:47:6b:
d0:1b:ef:45:3a:0c:df:22:3e:f1:21:29:34:d7:20:
1b:64:83:b4:80:b4:d4:78:d0:4f:13:c8:0e:fd:4e:
ef:ff:1b:fe:9c:d3:6e:87:ea:84:7f:0c:34:d9:27:
8e:7d:6a:70:16:bc:82:12:b6:bc:f4:53:e3:fb:e2:
53:e7:d9:4d:6f:45:42:1a:c4:65:37:c6:43:54:75:
1b:42:b4:ed:58:39:96:81:b5:8c:1d:a0:3b:82:c2:
2f:c1:65:98:bb:e2:21:38:72:58:fd:19:5f:dc:d0:
3c:a1:c1:b2:4f:a7:e3:ff:46:46:27:d7:40:40:d0:
00:36:6d:6a:70:97:9b:47:ba:07:50:88:c3:48:9a:
40:73:60:99:9f:a8:8a:c1:f9:ef:6d:2c:57:4b:af:
39:f7:21:02:cc:17:7d:b0:9f:4d:53:b8:d9:50:82:
d1:c2:e1:4a:84:42:ed:12:1f:7e:ce:57:81:f2:a6:
0c:29:ef:b0:ca:3d:d7:89:9a:18:d5:90:cc:cb:2f:
39:f7:16:70:b9:d4:0f:3c:a8:c1:c1:f1:c7:ff:5d:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2F:50:BE:2D:B0:37:A4:1D:5E:23:40:46:46:26:49:FF:94:09:88
X509v3 Authority Key Identifier:
keyid:CB:32:45:55:94:0A:E5:1A:F5:D1:F4:2B:D5:AC:71:58:64:FA:18:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzJFVZQK5Rr10fQr1axxWGT6GCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/300983-4dfd-419c-bc20-202c2689dfa0/1/yzJFVZQK5Rr10fQr1axxWGT6GCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:72:1b:5e:77:f0:99:5f:68:72:13:e8:d1:82:7f:0a:10:d3:
80:3c:92:e5:7c:9f:ff:96:6c:2d:1a:7e:48:19:1e:23:2d:55:
35:85:1f:66:e0:9d:54:66:8d:42:a7:bc:64:30:bc:1f:a5:70:
af:cd:b0:be:c5:4d:e1:07:dd:a6:d8:11:05:08:ed:be:fc:c6:
3e:49:de:d1:c7:ed:45:df:ec:13:e7:24:ab:44:3c:2f:b9:5a:
01:26:54:04:2c:1f:43:f7:9b:f8:09:f0:c0:22:ff:d5:59:52:
fa:60:5a:b6:14:fd:13:98:b3:a2:47:2f:c2:32:64:0d:9b:0b:
6d:5b:ed:d8:ac:14:56:84:37:e4:51:7a:8a:1b:27:56:a6:ae:
53:9d:8c:17:0d:fd:57:ca:46:70:88:f0:e2:cd:cd:1c:d3:b9:
bb:78:d6:33:57:8b:8e:1e:86:65:40:78:60:2c:12:02:f7:31:
0f:6e:c8:30:b1:17:59:8a:75:15:df:91:23:e2:64:42:7a:45:
c7:0b:97:ac:11:7b:28:f7:a0:6b:54:50:74:ec:db:d4:e8:13:
0e:bb:99:fa:ae:bb:70:f1:59:aa:b3:aa:b7:5e:eb:1a:e6:ff:
15:41:7b:7d:4a:7d:17:83:d0:5c:7e:3d:e2:ab:f9:ed:ec:53:
e6:cf:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 03:34:08 2026 by rpki-client