Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier: WMPQEZvME240V4F0PjZ3y4+RJbICEoS1lrP1/JGjHpk=
Subject key identifier: 8F:FB:3B:80:08:A3:0E:B5:46:E1:5F:3D:5B:57:AC:81:6B:07:72:11
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 019DDDD659306222C2B0509BE249B3CB9EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number: 0856
Signing time: Thu 30 Apr 2026 10:01:45 +0000
Manifest this update: Thu 30 Apr 2026 10:01:45 +0000
Manifest next update: Fri 01 May 2026 10:01:45 +0000
Files and hashes: 1: 97cc-LB3rG13dxTaENx-7JYBPe0.roa (hash: iCkgIpMzGk+/4CscuxSSD1lD7KaBFSyKku9u86QVkmw=)
2: 9aVW5Ze1o0Y4oVgHxgnUhn1RdhQ.roa (hash: BRrYLjxdA6J0znC7g9IK6bOs3/hTtVjuCxhtd6Laps4=)
3: EAaF92d1woQzsy8VU5JNPGG08e4.roa (hash: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk=)
4: KoSeXgfi6kdR60VA93UZ9REi_2M.roa (hash: VBbggabUlX8/caVzOmeZ8ptR/8qvA/cVBY2qiQj/eDc=)
5: gNO67GK1qIXcKgWQtr1Qlsfj3EU.roa (hash: 0NL39gDdKaZi0Q/uf08EWD/dEXGEVZqSIXvpRv/MWdc=)
6: gYxZPFksv4lSJcSXaTgYs67dhTw.roa (hash: Hl6M0EKBwCjHwIUsIeYI571biGIt0pR0cCNjY3LbJoU=)
7: iw7slNo1slt0urw_BCAUMgfe2b8.roa (hash: cT+hxmNlxZH6dKmkQNHvAP1HWpFqKzDkr41jDnNp5qM=)
8: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: Y3RWAj/Ks0fCRXghFj6W1A/soeQDEVQkPFBiACyoVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:59:30:62:22:c2:b0:50:9b:e2:49:b3:cb:9e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Apr 30 10:01:45 2026 GMT
Not After : May 1 10:01:45 2026 GMT
Subject: CN=8ffb3b8008a30eb546e15f3d5b57ac816b077211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:77:30:e7:45:4c:bc:81:e7:27:b0:59:9d:
09:0a:88:cd:f0:e1:ec:5d:57:41:c3:33:1d:ba:e5:
72:9e:f3:53:23:c1:13:06:bf:4e:19:cb:25:b6:6f:
e3:b8:b4:b9:71:61:fe:e5:ae:e4:8c:64:69:ad:5c:
dd:dd:9f:e8:8e:b4:0f:98:4a:6e:1b:05:f5:bf:2f:
9e:9c:01:17:8b:b6:87:98:c5:1e:b5:b9:7e:60:32:
d7:0f:7d:03:f3:20:61:5f:b1:b1:e2:10:83:04:10:
c4:12:90:34:4d:61:f6:65:6d:49:fe:29:cf:72:64:
b9:b4:29:fa:6a:b6:4e:e0:2c:e9:05:fc:3e:8f:b8:
79:7d:03:9b:23:c6:34:63:90:d8:64:3f:b3:66:1d:
e9:7e:9f:67:e3:77:9d:b7:ea:67:8c:a2:b9:48:8f:
fd:00:cb:a9:e1:44:ba:a9:fb:ae:8a:75:61:67:e8:
f2:79:90:50:e5:f8:fa:00:1f:d1:58:f7:1e:c9:aa:
c4:e5:98:9e:f4:52:4d:1f:ca:cb:1c:81:8d:9a:44:
58:3f:7b:c6:b6:6e:f9:c4:78:a5:b8:d7:e2:2b:1d:
85:a6:aa:38:0d:af:4c:78:0d:ab:d4:35:ee:01:d2:
06:e4:f9:c7:6d:35:60:0c:cf:9a:41:77:3d:c9:ac:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:3B:80:08:A3:0E:B5:46:E1:5F:3D:5B:57:AC:81:6B:07:72:11
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fb:59:a4:40:91:d7:f5:38:0f:6e:c4:85:38:9d:cf:c3:4c:
da:de:96:dd:d2:e4:33:89:5d:ed:15:a0:3f:54:48:75:ed:6d:
46:17:eb:33:5d:83:30:df:1c:40:e8:eb:d7:f0:5f:f4:a6:fb:
29:31:0c:22:ac:e8:3a:3a:25:de:40:27:8e:11:32:ac:3a:da:
d4:a3:07:8f:ea:52:bb:7f:67:20:08:96:3c:60:1e:d6:70:37:
5a:85:28:24:82:f5:be:f9:b5:1e:e6:53:28:64:c7:eb:2f:86:
0b:d5:25:69:18:7b:5d:96:30:7c:02:0d:0f:39:f4:8e:aa:7f:
88:25:06:38:89:cc:73:4f:f6:dd:c2:85:10:5f:31:d3:ac:23:
0a:52:b7:b8:84:03:07:48:10:ed:eb:e4:bd:a5:f8:4d:db:1b:
5d:36:65:31:68:1d:b4:ae:14:ee:c5:fc:93:b5:b7:ff:2d:30:
5b:17:0b:d4:4c:4b:dc:3d:12:10:67:f0:c4:66:41:bb:62:6c:
34:54:1c:5a:99:cd:2e:97:19:57:3d:bf:a3:90:0c:fb:bc:43:
ef:bf:60:02:ae:84:f4:d9:b1:39:0c:7d:19:fe:b8:38:02:c3:
7b:af:54:11:8b:25:74:51:d9:da:e5:8e:0e:da:5e:10:e0:f0:
58:31:cd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:48:36 2026 by rpki-client