Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: A4P6jsgZsPMDiPTAKjCLqLqWOmlUCW2f/vfxeN4VxWo=
Subject key identifier: 53:D2:8E:23:70:C7:63:02:99:19:F0:2A:81:EF:5F:3F:23:61:7E:09
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 019DD05107CD37B81BEAAC31EEFAC11381E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 031C
Signing time: Mon 27 Apr 2026 19:01:04 +0000
Manifest this update: Mon 27 Apr 2026 19:01:04 +0000
Manifest next update: Tue 28 Apr 2026 19:01:04 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: VPIYSvboDnkJsn9itxq3MaW+TdYt5sGDGGxXiV5f6Ys=)
2: svfbdlsbXDjgA-A5NXKRbfvSSU0.roa (hash: S4K6rQ06DpmFLzmXdsKn8rYW01MHbvPxeo9PGG/tM+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:51:07:cd:37:b8:1b:ea:ac:31:ee:fa:c1:13:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: Apr 27 19:01:04 2026 GMT
Not After : Apr 28 19:01:04 2026 GMT
Subject: CN=53d28e2370c763029919f02a81ef5f3f23617e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:cf:4e:25:ec:b2:4e:4c:57:f9:ac:f4:3f:
8c:98:6f:7c:b5:36:3f:a9:4e:be:66:f5:9c:62:24:
68:fe:46:57:75:ec:0d:8e:7d:77:7d:5b:e4:7a:61:
46:60:7b:d5:ef:9a:55:ae:a3:36:8d:a4:a8:7c:73:
0d:dd:d5:b5:d6:b1:01:09:a2:b0:5c:64:63:99:5a:
a3:37:22:25:df:09:3e:77:d8:83:d9:50:29:2b:48:
3a:b1:c3:b1:a6:0a:d2:24:7d:70:c9:ea:6e:e4:b2:
fb:5f:0e:37:68:0e:1b:15:77:b2:6b:a5:ac:3a:85:
9c:d9:62:5a:80:2a:3a:74:9d:49:99:1b:3b:fa:69:
15:88:44:71:74:a7:c8:41:70:5a:7e:cc:25:e2:a3:
cd:7a:ce:7d:f7:10:bf:de:60:27:32:03:89:52:34:
d1:e6:67:ca:c4:c9:c2:47:e4:57:58:ef:53:83:9a:
d9:17:c7:e8:7d:98:6c:1f:28:08:42:03:3c:b5:9c:
78:f3:d1:e7:28:6a:98:2d:d2:1e:ed:52:ce:80:89:
dd:d8:a6:c6:74:75:6e:37:85:ec:84:d1:3c:64:bc:
a8:bc:09:da:87:bb:d8:ef:e1:e2:52:54:3a:4e:74:
df:05:70:7e:a2:7b:fe:3b:73:30:1b:32:26:4e:64:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D2:8E:23:70:C7:63:02:99:19:F0:2A:81:EF:5F:3F:23:61:7E:09
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:03:72:ac:04:cb:32:0a:b7:26:c8:48:8d:64:10:f9:91:51:
d3:6c:21:27:23:81:7b:38:c2:e2:99:c0:09:af:cb:bb:03:44:
4a:bf:1e:42:c2:a4:dd:fe:39:63:22:81:c2:9e:1d:f7:a4:39:
c2:3b:1a:27:41:91:9c:21:a7:b0:50:1c:c4:15:5b:90:1f:de:
ac:84:2b:48:61:f6:56:5a:15:ee:08:a5:97:7c:69:88:35:d7:
94:b8:b0:ba:ea:68:f2:40:d3:f3:d0:fa:da:f1:00:63:ee:ff:
a5:c7:8e:f7:7a:4d:f4:7d:ac:a8:68:d6:da:fd:d0:26:b4:c5:
d9:a1:50:c2:75:87:ab:8e:f2:6b:9d:74:d1:cb:4b:a4:c5:51:
2e:54:28:1c:3d:c6:1e:b3:b6:6f:a8:24:c1:05:e4:3e:41:d9:
76:bb:91:a7:38:4a:e5:4e:dd:3c:22:4a:90:33:5a:f8:da:d3:
96:76:46:0f:28:3b:97:5e:ae:8d:31:b3:29:72:3e:3c:f7:0b:
a9:68:16:0d:b4:c4:a0:e7:20:1f:d0:3e:76:bc:4f:50:a2:47:
a9:9a:6a:a3:5e:f8:77:2e:3e:9f:82:45:29:62:5a:6f:d7:3a:
a7:6b:80:90:ba:61:8d:45:fb:08:f4:bc:0e:84:fa:d1:5c:5e:
53:60:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:34 2026 by rpki-client