Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: KcsOqdUQoble2FR4p5jn6UIoqopeT+jxLuaF6Urv9yo=
Subject key identifier: 9C:6B:85:3A:73:B6:63:5F:F5:10:53:DE:1E:8D:9A:8B:DB:D9:99:01
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 019DD19ADFB65E85DD7139CDAEB23275BB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 127E
Signing time: Tue 28 Apr 2026 01:01:21 +0000
Manifest this update: Tue 28 Apr 2026 01:01:21 +0000
Manifest next update: Wed 29 Apr 2026 01:01:21 +0000
Files and hashes: 1: 2N5xpRJZNXE8KzyralBufJCFAGk.roa (hash: Gqf6uvdiXISfNhnWADuNcf6vyOowNUUoaBaYKh4kdEc=)
2: sO9pZ5FwOgUvmAOslbboRpxPFe0.roa (hash: VzoA5+Tb86N+TDJqseTFSnd7RnKY9v3RHbW5iUpaNO4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: WRYSEIlfk6DmVa9SpLxL7Lxg9QuevXWs9b6Cf0s44dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:9a:df:b6:5e:85:dd:71:39:cd:ae:b2:32:75:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Apr 28 01:01:21 2026 GMT
Not After : Apr 29 01:01:21 2026 GMT
Subject: CN=9c6b853a73b6635ff51053de1e8d9a8bdbd99901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:fc:d0:f3:37:bf:e9:a0:af:42:46:ba:0b:
8f:22:67:76:07:33:af:ed:b6:49:6d:3b:56:c7:d1:
18:e8:a2:0b:de:d9:18:f0:e2:54:9d:10:56:6d:f4:
13:5c:d3:c3:43:b3:b8:7e:2c:3d:54:bc:30:65:5d:
11:6f:ec:a3:8a:f2:c7:be:56:e3:a4:03:5b:dc:6f:
00:6a:6a:68:2b:eb:a4:9b:ae:76:53:80:cc:d4:f7:
45:3c:a1:aa:a4:87:92:d3:fc:09:e8:e8:fa:40:d4:
e9:8a:7b:b0:0b:2c:1e:58:3c:ac:af:ee:2e:fc:97:
13:f4:9e:c5:2f:4d:08:cd:f3:b6:98:4e:c9:82:95:
d4:78:7a:8c:a6:2b:d4:0d:29:52:a7:97:3b:91:08:
77:de:f5:51:16:2b:dc:b9:8b:de:1e:ee:d1:58:dc:
e6:be:ef:db:92:d2:af:ab:51:32:ae:41:0e:4d:90:
cd:e9:0b:0c:35:90:83:d3:8f:83:2b:43:da:7c:9d:
cc:d7:b1:87:ce:71:75:f7:ed:0f:08:fc:6a:d3:9a:
e8:25:92:14:01:f4:5a:f5:86:0e:f0:5b:46:b5:60:
6e:5e:37:b5:d4:9a:f0:b9:2c:06:54:a5:6a:83:6d:
17:4b:75:20:bf:d6:41:7c:56:2f:27:93:3f:60:16:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6B:85:3A:73:B6:63:5F:F5:10:53:DE:1E:8D:9A:8B:DB:D9:99:01
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c2:e3:e6:80:2e:42:ae:87:9e:dc:82:56:fa:be:f3:92:d2:
35:bc:ff:17:37:0b:f8:c2:de:a7:05:01:63:8a:91:32:3b:cb:
24:45:94:19:a1:ed:b7:c6:88:15:bc:32:30:5e:70:36:af:5c:
5f:ec:6a:27:00:4f:0a:2b:8b:38:5a:18:12:2b:d0:20:ec:80:
b5:96:81:6a:57:c2:9e:09:5e:9e:81:0b:78:ca:36:c1:6c:92:
b8:ed:de:e0:5b:c6:e9:ed:8d:29:a9:78:3e:8a:09:f9:4e:01:
44:b2:fe:73:f0:c6:fe:f8:47:c4:e6:6b:71:0f:76:f5:a9:25:
8d:e4:b6:0d:dc:98:6c:99:98:8c:a5:2a:16:cc:bd:70:0c:e0:
f5:18:e8:b0:47:d6:53:b3:f4:28:6b:55:aa:ed:d2:b4:b6:32:
c3:29:c4:16:ce:b8:d2:46:08:99:0a:e5:8e:10:77:c6:34:45:
82:8d:77:59:c8:38:c2:e1:0d:18:6a:f6:22:8d:d6:69:83:41:
de:0e:5a:94:00:32:53:c0:68:f9:6a:cd:6d:8b:a5:bc:1f:e7:
5f:bd:4c:2a:29:fd:54:dc:72:0f:81:3e:c1:d6:38:0c:4f:43:
71:11:21:d3:05:13:6b:96:ee:eb:8d:42:36:a4:9f:01:0e:9b:
3d:58:59:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:22:51 2026 by rpki-client