Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: ZbftsDXD4xG4ErJHCMlmXCW3mVnXRGj/uBg9SngZjwM=
Subject key identifier: 21:8E:8C:89:16:DF:FC:FD:BD:31:F2:93:35:6E:7B:7C:D0:29:16:8E
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019DCD194B0CA61AD9FE471EC0D8011699B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 1261
Signing time: Mon 27 Apr 2026 04:01:20 +0000
Manifest this update: Mon 27 Apr 2026 04:01:20 +0000
Manifest next update: Tue 28 Apr 2026 04:01:20 +0000
Files and hashes: 1: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (hash: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: 0Fabq0IR6g7rwzmSpHmhyuAMgO4MGkZjdpHNJKJQYWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:4b:0c:a6:1a:d9:fe:47:1e:c0:d8:01:16:99:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Apr 27 04:01:20 2026 GMT
Not After : Apr 28 04:01:20 2026 GMT
Subject: CN=218e8c8916dffcfdbd31f293356e7b7cd029168e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:96:86:27:4b:94:a3:ea:ad:da:cd:18:78:
82:49:86:07:52:00:5b:ce:de:75:71:aa:a0:ef:a1:
8a:bd:6e:29:a2:06:f3:08:13:ee:79:94:1e:b4:86:
58:fb:8e:c7:ac:d5:7f:d2:83:a3:fb:20:3e:86:7e:
c4:5a:39:7c:60:a1:94:ee:9d:ea:fa:c0:f1:a7:2e:
d5:d9:e0:ca:97:15:90:17:00:82:3a:6d:0c:73:fc:
4c:82:7e:7e:99:fb:73:6f:e5:1a:e6:59:d1:a6:99:
61:1d:f3:e4:b2:9c:a6:7f:92:2c:5e:f3:1a:d6:35:
39:e3:79:cb:31:d2:c9:bf:bb:b4:7b:e7:3d:b2:66:
75:44:f3:38:b6:a6:da:27:5e:85:66:04:85:e6:21:
a4:72:8b:d4:39:bc:d4:63:70:5b:20:77:2b:d5:f1:
25:e4:c5:43:ec:c6:95:0d:f3:28:4c:b7:48:fe:4d:
ae:3a:cb:33:f6:ef:12:b1:6e:c4:09:40:43:16:9d:
4d:9e:ac:34:9a:e4:68:79:f0:bc:a5:38:8e:37:e5:
86:bc:5b:dc:4f:d0:3b:e6:1a:b1:b9:6c:a3:95:70:
f9:2f:da:a9:91:50:1d:66:71:da:05:2c:bc:eb:b7:
36:ba:8c:86:b9:05:c0:95:83:75:2b:0a:85:74:3a:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:8C:89:16:DF:FC:FD:BD:31:F2:93:35:6E:7B:7C:D0:29:16:8E
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:99:c1:3c:93:97:1b:ac:97:78:bf:b9:a7:79:66:e2:29:
65:08:c1:32:5f:94:07:ae:9a:4a:56:bb:9c:0d:c1:e3:d4:15:
72:6f:58:98:d3:4a:80:20:4b:80:f4:e3:66:99:f2:30:f0:d9:
e2:0b:95:04:fa:4f:24:dd:b2:4f:6d:1a:d7:3f:84:95:e4:c5:
4e:e9:d9:b6:dd:4d:a2:cb:b1:d0:04:02:d9:58:33:50:ba:d4:
de:a9:29:ac:63:b8:79:07:a2:d9:b5:d5:f8:bd:1d:b9:27:ad:
a1:ee:01:76:de:a1:eb:ff:e6:93:9c:69:7b:66:05:17:e1:5e:
a2:5b:e5:4d:16:b6:84:c1:ef:2d:d0:2c:45:e6:bf:28:1d:4c:
d2:4b:6f:92:e8:9c:b6:86:52:7c:41:8a:25:ca:58:7b:6b:58:
b6:2c:3c:79:81:44:ea:0f:be:44:35:b9:16:c5:fc:14:26:73:
ca:8b:52:3b:b9:ae:16:b7:5a:73:bb:56:14:89:9c:ff:48:e2:
0d:e7:96:51:f1:f1:fb:36:75:ca:0b:08:5b:22:5a:92:2a:16:
70:82:11:40:33:3a:3b:f6:1f:41:56:e3:47:37:7e:15:85:41:
5d:58:a8:fd:70:e9:ad:01:fc:d7:1c:83:ba:5e:4a:c4:99:54:
42:26:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:55:34 2026 by rpki-client