Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft (raw, json)
Hash identifier: r6KXHziGpnx7okLNnrfMWVUE2XIUL1wY2Xsl/ZyLv8E=
Subject key identifier: 8A:3C:2F:16:07:82:F2:C8:C7:46:6F:31:00:82:53:65:1E:A1:FF:D8
Authority key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Certificate issuer: /CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Certificate serial: 019DD05195BF3D6CE56FF9301B2FF51C13F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
Manifest number: 0EDF
Signing time: Mon 27 Apr 2026 19:01:40 +0000
Manifest this update: Mon 27 Apr 2026 19:01:40 +0000
Manifest next update: Tue 28 Apr 2026 19:01:40 +0000
Files and hashes: 1: LDt7gaxmt08mgFC-M4WkB6Rh2M4.roa (hash: GmZKtwbYE0ZQZpsBSkP4BAk8kkV/eLe4GNjMQ2lsJKY=)
2: Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl (hash: ONgC8wWIN6wV3LicZQ9VRXedDc0+4y4oJpoJJCIv6nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:95:bf:3d:6c:e5:6f:f9:30:1b:2f:f5:1c:13:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Validity
Not Before: Apr 27 19:01:40 2026 GMT
Not After : Apr 28 19:01:40 2026 GMT
Subject: CN=8a3c2f160782f2c8c7466f31008253651ea1ffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:84:31:7d:67:fb:c2:d1:d0:b9:68:13:fd:
e8:58:a5:55:33:56:29:e8:69:9b:0e:93:cb:87:55:
1e:25:ca:c8:49:fc:e6:3f:e3:e9:75:7e:27:60:d6:
c9:ad:64:c8:a8:43:b7:ca:de:2c:a2:ec:73:5b:4c:
69:ae:43:b6:5b:8f:5f:22:01:67:68:ab:da:ac:eb:
95:b9:17:80:bc:13:24:be:98:ca:ee:69:d4:90:bf:
8b:0d:cf:5c:c8:4a:d5:d5:27:82:c8:66:96:94:99:
72:7b:b7:f6:ce:97:cc:35:1d:6b:d4:8c:bc:6e:53:
1d:88:7a:77:3b:25:b1:50:0c:86:09:0c:df:24:40:
a7:2d:5f:0e:a1:25:d5:7f:5b:cd:31:5e:ab:59:e3:
99:f9:4c:4e:9b:c6:53:53:ae:f9:c9:3d:b7:f7:c4:
07:53:f0:e7:fa:1a:e8:e6:6c:90:c2:0a:43:d2:12:
60:86:e5:fb:d7:1b:b1:00:43:b4:49:23:9b:bd:ac:
8d:58:53:70:0b:1c:f8:38:d3:68:3a:b7:58:13:be:
7e:a4:cb:7a:29:48:45:6b:1e:a1:00:52:2d:2e:65:
05:17:d8:8e:5c:a3:0b:f4:e5:4a:7c:b2:06:52:dd:
98:e2:4b:1a:8f:45:9b:5b:c9:9f:1c:23:b2:66:19:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3C:2F:16:07:82:F2:C8:C7:46:6F:31:00:82:53:65:1E:A1:FF:D8
X509v3 Authority Key Identifier:
keyid:63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:46:c5:c7:6d:2e:02:90:d1:ef:ba:4b:b7:e3:a0:7a:97:fd:
28:45:d4:1b:e4:b9:e8:99:d3:f6:64:60:5b:52:2d:39:75:4e:
37:14:22:ee:6a:30:d6:8e:03:7b:0b:d8:56:1c:79:de:cd:59:
48:b7:8f:5e:a6:e5:36:ff:e0:c9:ec:a7:8b:ae:d0:2f:47:5a:
24:41:0f:93:7c:c2:6a:dd:71:82:95:64:90:3d:31:dc:b2:73:
e2:0b:86:77:88:6e:08:cb:6e:5a:35:6a:22:81:0d:8d:a7:9b:
58:3d:41:38:66:a6:5d:f0:b0:12:ae:c8:3a:c8:ef:2c:e3:3f:
fa:e2:19:40:b3:02:18:74:48:44:c1:e6:16:6b:13:50:a0:f5:
d9:33:ee:75:4d:13:08:ac:73:26:a7:8a:e1:b2:f3:32:01:cb:
1b:17:e4:ee:cb:de:9a:66:8d:ae:6b:e2:39:28:61:ee:2a:23:
0c:d0:c9:c9:f6:f0:b6:73:0f:9f:d7:fd:38:35:9a:a3:e8:4e:
03:a1:19:3d:b6:a2:4f:54:7e:dc:71:8e:ea:3e:cb:b4:12:37:
f3:32:f3:a1:7e:8e:b1:ec:0d:45:ec:8a:cf:64:cc:31:28:ad:
ba:89:4e:fc:86:99:1a:84:d4:79:20:9e:b0:d3:b7:a1:56:b1:
18:f1:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:06:41 2026 by rpki-client