Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
File: yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft (raw, json)
Hash identifier: OFYu18+45AAqsTjp6s0JancHqPr8JgdXhnTQQllqFjM=
Subject key identifier: 68:5C:82:84:7F:E3:58:B2:F1:2D:13:2B:BF:17:2B:A5:26:6A:3C:56
Authority key identifier: C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
Certificate issuer: /CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Certificate serial: 019DCCAB247EA2A5D5C1CAADAFEA724A80C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
Manifest number: 0CFF
Signing time: Mon 27 Apr 2026 02:01:01 +0000
Manifest this update: Mon 27 Apr 2026 02:01:01 +0000
Manifest next update: Tue 28 Apr 2026 02:01:01 +0000
Files and hashes: 1: kmHpE0nIsqnNjXBHZzn8ghlLUAY.roa (hash: vHtrQdMnfFyM3Hed/jGaAR/NyxOc2xl8ZPzUXZL4Gvc=)
2: yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl (hash: DLZth7Ja5HVP5Q+EhdDkOrr95el18CGJlG2+BwgXa/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:ab:24:7e:a2:a5:d5:c1:ca:ad:af:ea:72:4a:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f9baab1a13df30eff0fcd780c4bbc54bc3e6d5
Validity
Not Before: Apr 27 02:01:01 2026 GMT
Not After : Apr 28 02:01:01 2026 GMT
Subject: CN=685c82847fe358b2f12d132bbf172ba5266a3c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:86:03:66:54:84:9d:49:b3:ba:65:74:04:
18:7f:9c:01:03:3f:05:41:d7:3e:44:43:7d:c2:ea:
ee:84:c0:28:4b:7b:21:80:81:d4:23:2b:97:b9:ca:
17:8c:4d:ea:7c:5c:66:ab:57:7c:c0:11:0c:f7:55:
30:9f:67:5f:88:fe:f3:9e:93:01:e4:3a:08:0f:c5:
4e:0a:70:a3:8b:54:a8:a0:82:a5:ea:09:3b:58:3f:
25:a8:05:f9:56:44:d6:c3:d7:17:1f:47:72:13:ce:
b6:73:15:7f:e3:79:3d:e7:e5:09:21:15:27:27:01:
94:85:e2:a1:28:05:b5:d4:44:3f:71:25:58:9f:dd:
86:03:24:d3:c5:53:33:ca:cb:bc:b8:f1:83:6e:1a:
4a:f6:ed:fd:3b:56:fa:f6:ee:e1:3e:aa:a3:ce:b2:
ac:0c:3a:84:70:a2:4e:ea:fe:48:a2:88:f7:cf:49:
e6:3d:b9:c5:2d:54:b9:f7:e2:be:27:f9:4a:ef:a9:
fd:ca:33:61:13:bf:85:f3:85:bb:13:60:f6:99:2b:
dc:42:80:26:4f:0a:47:b8:3c:a8:5c:71:8c:f6:76:
77:fd:ce:9a:ed:f7:80:3d:24:55:fc:7c:64:80:a8:
b7:53:8d:04:fa:42:3f:3c:90:23:43:86:e6:e8:f2:
3a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5C:82:84:7F:E3:58:B2:F1:2D:13:2B:BF:17:2B:A5:26:6A:3C:56
X509v3 Authority Key Identifier:
keyid:C8:F9:BA:AB:1A:13:DF:30:EF:F0:FC:D7:80:C4:BB:C5:4B:C3:E6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPm6qxoT3zDv8PzXgMS7xUvD5tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3e6762-0989-48ef-a8d2-db484cce7293/1/yPm6qxoT3zDv8PzXgMS7xUvD5tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:10:a1:2b:79:94:89:66:2c:37:fc:d8:63:4a:a0:04:6f:0c:
d3:d2:a8:30:36:e6:61:f9:a9:e6:8f:b2:e5:57:18:3c:41:02:
ea:74:38:ea:05:86:c9:6f:98:9b:99:d7:93:27:89:a3:06:3f:
a7:37:b0:2f:f8:19:0d:0e:59:e3:46:3d:95:eb:82:c7:ad:05:
42:da:7e:82:be:28:52:ec:c5:cd:af:1a:18:88:54:c6:17:1d:
e6:81:f9:5e:57:f2:61:08:d3:46:0e:f3:2a:2d:66:8d:79:e8:
fd:09:e0:2a:e4:9c:4e:39:af:1d:a4:06:f1:af:7a:ab:4b:04:
8a:44:a2:e7:0a:a1:96:40:4d:65:d8:1d:b5:63:8a:ba:2f:e3:
3f:16:23:ea:06:14:b1:56:4b:37:8f:68:51:d7:1d:b2:fb:f7:
d7:4a:a4:5c:6d:f7:10:50:09:66:7c:4c:f5:d9:11:ae:ce:11:
a0:a1:d1:af:86:f0:7f:0f:a5:5c:8a:78:87:ff:83:7f:73:67:
5b:be:e7:dc:f0:3f:e4:3c:80:a9:3d:09:39:da:ab:a3:56:a5:
97:ad:a8:86:b2:b6:ac:97:61:53:a3:d7:a3:d0:d9:ba:e2:ca:
e5:1f:bd:65:8e:90:ed:5f:95:9a:48:1f:4d:b5:d2:05:7f:95:
d1:61:1f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:29 2026 by rpki-client