Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
File: y2r1L3gkVTrztsuqc686F4wcWRM.mft (raw, json)
Hash identifier: Uolzfwb2w2VrIKFUB7YOK/cZZEglbAPWr7bVLHa9Jm4=
Subject key identifier: C3:DB:3D:C2:D6:74:15:B9:E6:29:34:FB:66:96:EC:73:BB:DA:33:E5
Authority key identifier: CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
Certificate issuer: /CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Certificate serial: 019DA9E7A6F81C4E0A367848590346D026A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
Manifest number: 0297
Signing time: Mon 20 Apr 2026 08:00:24 +0000
Manifest this update: Mon 20 Apr 2026 08:00:24 +0000
Manifest next update: Tue 21 Apr 2026 08:00:24 +0000
Files and hashes: 1: e0bzE7I798JyP17GLDFXPRJiVH0.roa (hash: Yhotc+UtqlhBqu0SRVQeqH+Q/Mp28/ftrNlXHzifKKU=)
2: y2r1L3gkVTrztsuqc686F4wcWRM.crl (hash: L53Btk/EmOxaeMnw8TqpugGhklgot2n/L2jBDbmkYGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:e7:a6:f8:1c:4e:0a:36:78:48:59:03:46:d0:26:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6af52f7824553af3b6cbaa73af3a178c1c5913
Validity
Not Before: Apr 20 08:00:24 2026 GMT
Not After : Apr 21 08:00:24 2026 GMT
Subject: CN=c3db3dc2d67415b9e62934fb6696ec73bbda33e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:3f:ca:4a:2e:f6:5b:8e:e8:6b:ab:72:b3:
05:5d:1a:e9:50:a3:33:9f:b4:4a:a1:72:89:46:f2:
bf:e9:44:76:b8:c4:a3:db:05:06:0e:f6:36:43:c2:
04:4e:2f:d9:21:99:71:64:05:36:ea:53:a3:04:e5:
92:13:3b:36:98:38:a5:60:5b:c9:70:51:ac:b8:9f:
47:2c:da:15:3e:65:f7:3b:20:e8:0c:8b:f1:9d:47:
5d:be:b8:d1:d7:5a:25:4e:69:d4:52:b8:d4:97:c5:
b0:d0:70:76:81:09:fb:06:b9:a1:40:b9:59:7f:0b:
58:40:4a:b4:f8:5f:3a:10:24:61:b0:80:6d:d6:82:
c4:75:f3:8c:9a:2e:5e:38:f0:bb:45:3e:5e:52:79:
b9:3d:df:a9:00:ac:06:71:b5:41:96:ac:8f:ef:08:
c2:87:96:f3:79:15:b1:33:83:01:1d:d4:e8:2f:bd:
14:ab:6e:ad:9c:d4:63:96:d3:4c:6a:33:0d:6b:ae:
86:cc:27:1b:9e:31:72:5b:53:98:74:7c:00:f6:7c:
78:aa:5f:1d:cb:42:82:e7:83:89:eb:24:13:be:09:
25:32:12:28:03:4b:74:62:c1:be:e9:10:60:10:75:
97:e1:35:9f:47:d4:9b:71:12:52:18:75:c6:38:c5:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:3D:C2:D6:74:15:B9:E6:29:34:FB:66:96:EC:73:BB:DA:33:E5
X509v3 Authority Key Identifier:
keyid:CB:6A:F5:2F:78:24:55:3A:F3:B6:CB:AA:73:AF:3A:17:8C:1C:59:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2r1L3gkVTrztsuqc686F4wcWRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a69f50-2740-4213-9616-1d4aa781b4d4/1/y2r1L3gkVTrztsuqc686F4wcWRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b2:b1:a4:cc:d2:e0:ec:25:13:fa:f9:1f:fe:42:df:67:8c:
b3:e5:fc:13:9e:5b:47:22:c2:1a:96:4c:53:38:1e:38:93:de:
f0:ed:a2:db:77:da:73:48:14:64:63:db:36:e0:42:09:3a:df:
7a:10:48:c4:7d:6e:2d:95:15:ec:56:9a:9b:cf:d4:4b:79:10:
f6:e0:51:df:50:3a:38:25:7b:0c:d0:cb:e4:9a:94:44:2a:e3:
33:46:52:2f:90:46:a9:97:6b:7a:69:24:b1:3a:3d:dd:cd:b2:
f6:07:54:44:d7:7a:21:b8:c6:39:33:33:14:bd:08:af:ce:f0:
8b:14:e7:d5:22:73:df:90:37:7d:99:11:ff:c2:ab:06:51:9c:
09:7b:9d:21:8f:85:5d:48:95:d9:e7:99:10:ac:3f:96:90:1c:
02:65:49:e9:ae:f0:e1:f9:4d:5a:61:00:5e:ef:3c:75:8e:31:
5f:bb:ad:79:23:ad:2b:01:23:eb:0a:f8:0d:7f:7b:4d:c6:14:
eb:94:9e:78:53:6c:36:49:78:09:fc:32:db:f3:53:b1:f5:a9:
67:bb:76:8e:a0:54:a0:cc:42:58:b9:a0:63:61:08:de:40:f8:
21:00:20:a4:61:b2:04:1d:c6:35:23:be:7f:b3:eb:e8:2e:4b:
6f:f2:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 17:12:31 2026 by rpki-client