Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
File: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft (raw, json)
Hash identifier: dpFtqMlYRfnreS4jNviVU0xG6olIt08oj6lyjzqzm88=
Subject key identifier: 29:BF:13:7F:87:E0:93:83:87:3D:39:88:C5:68:17:00:7D:F7:4B:4B
Authority key identifier: 63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
Certificate issuer: /CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Certificate serial: 019DCED0B2C5FE87B5C1F129A28A753B5D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
Manifest number: 0EF1
Signing time: Mon 27 Apr 2026 12:01:16 +0000
Manifest this update: Mon 27 Apr 2026 12:01:16 +0000
Manifest next update: Tue 28 Apr 2026 12:01:16 +0000
Files and hashes: 1: 1ucIqM3WJrp6fSAjkIA0n0TVtcs.roa (hash: shxMQ3h1iaMAoofuE3ugk4LgNhtgq4pRT6mevjRyS7k=)
2: Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl (hash: BmPORsGllpNMGjfLsVAPI72WeJWcTAaCljvL+d9lRqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:b2:c5:fe:87:b5:c1:f1:29:a2:8a:75:3b:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63c05afa0dc9a5f8f618c3ed2eec672ec38f6fef
Validity
Not Before: Apr 27 12:01:16 2026 GMT
Not After : Apr 28 12:01:16 2026 GMT
Subject: CN=29bf137f87e09383873d3988c56817007df74b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:b3:cb:14:fb:d0:bd:05:77:de:f1:c7:e2:
8d:ab:a8:e5:7f:c2:eb:17:a8:c0:22:02:97:2d:70:
5e:cb:64:17:88:aa:6c:e0:0a:f2:c2:b5:05:96:5c:
45:2b:cc:d4:47:b2:fe:65:88:11:7c:6c:65:8f:2a:
e7:41:e1:17:d1:f3:7c:cc:12:a8:fb:81:8a:f4:4f:
27:46:f4:9a:f2:55:ac:78:89:cf:4a:d4:be:ff:c8:
0f:e4:c0:d1:0b:ca:ec:88:8b:f8:3a:4e:72:bf:f1:
21:18:5e:5b:90:f7:09:25:e3:45:b7:90:66:be:98:
64:d0:0e:98:05:d3:ed:28:2c:e6:48:70:47:22:5a:
3e:c1:58:e3:7a:5a:b9:37:44:3a:f9:45:40:7e:89:
19:f1:71:bc:13:8d:a4:1d:6b:0a:f8:b8:7b:43:dd:
c5:0d:5f:12:8d:28:c4:11:b0:c8:64:f8:48:f8:67:
f8:bc:97:10:ca:47:73:79:cc:69:70:86:7a:23:19:
11:6d:8e:c7:4c:c1:8f:2b:71:f1:1c:8b:24:e0:90:
3b:fe:42:4d:65:9f:b1:23:15:5c:9b:8b:2c:d8:f9:
1a:65:68:a0:b6:4b:62:c0:94:17:94:5a:7a:dd:24:
d9:3b:db:51:f9:e1:d5:ce:e3:e1:c2:1e:9a:ff:38:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BF:13:7F:87:E0:93:83:87:3D:39:88:C5:68:17:00:7D:F7:4B:4B
X509v3 Authority Key Identifier:
keyid:63:C0:5A:FA:0D:C9:A5:F8:F6:18:C3:ED:2E:EC:67:2E:C3:8F:6F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c4a70e-f7a8-4aa0-98c6-23e09652b3d8/1/Y8Ba-g3Jpfj2GMPtLuxnLsOPb-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:7a:07:03:0e:dc:92:34:26:05:4b:2c:79:70:71:b7:aa:59:
55:d9:f9:9b:b6:4b:ff:d7:f9:3b:67:b7:05:e0:99:15:44:51:
2a:21:3b:80:a0:45:4f:52:7a:58:b1:c1:84:ac:53:00:66:48:
47:4d:52:65:81:a5:a0:98:51:a4:27:34:23:a8:d3:d8:00:f4:
13:56:92:4e:39:ae:2f:13:63:25:7d:a1:6f:ac:79:e0:ad:24:
3c:23:17:49:a6:29:e7:13:1f:b1:4d:89:84:4c:f3:9a:43:a7:
0a:16:4c:03:a0:21:87:f9:df:72:7a:dd:60:1b:99:a7:86:55:
bb:02:38:52:f4:c8:1e:33:6a:7b:c6:68:f3:de:1b:8d:ad:7a:
a2:e6:d0:9b:d5:20:50:ec:fb:a6:a5:5e:2a:ed:d6:c4:30:56:
ca:5a:70:16:17:68:1e:5b:8a:84:65:3a:15:db:b0:9b:fa:87:
96:13:6d:d7:3d:7f:85:bf:fd:6f:86:04:f9:bf:14:a4:37:ff:
4d:e8:18:cb:aa:e6:be:df:ff:ec:57:4c:69:1a:21:98:69:9b:
22:dd:ae:3f:a9:72:54:00:29:af:e8:c2:c4:f8:06:6a:d3:0a:
a0:a6:f0:d4:b3:18:0b:ef:67:e2:b0:e8:e8:63:9a:67:b6:c1:
39:99:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:08:35 2026 by rpki-client