Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
File: 8yyk3zLccfQREE-UtRrBS2Z1gks.mft (raw, json)
Hash identifier: luBt/ArSsMZr8FkMWcWhNB11wiVEc6RiZSefvEclzy8=
Subject key identifier: 5A:EE:8F:69:08:D0:BC:84:B8:04:F4:88:C1:97:5E:39:C9:4B:26:25
Authority key identifier: F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
Certificate issuer: /CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Certificate serial: 019E1D90A0298D2A9234C32A5F320A39F6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
Manifest number: 0344
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: 8yyk3zLccfQREE-UtRrBS2Z1gks.crl (hash: 58R7wiRP4Upnb9pZcmBWtcm3XJYlJbC1mbo5PzzJLrk=)
2: svfbdlsbXDjgA-A5NXKRbfvSSU0.roa (hash: S4K6rQ06DpmFLzmXdsKn8rYW01MHbvPxeo9PGG/tM+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:a0:29:8d:2a:92:34:c3:2a:5f:32:0a:39:f6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32ca4df32dc71f411104f94b51ac14b6675824b
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=5aee8f6908d0bc84b804f488c1975e39c94b2625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b7:7f:ee:46:59:bc:59:e7:86:8c:b3:c0:5b:
db:6c:7a:b7:7f:7e:46:bd:1a:16:75:2c:0e:04:47:
ab:f2:74:e1:91:3b:2b:5d:f9:88:94:96:c9:d5:47:
6d:58:6b:91:e4:1a:89:38:16:35:aa:21:1a:60:5a:
c9:92:74:3b:a1:21:00:ee:3d:30:1a:bb:25:91:b3:
00:d2:1f:2a:a0:ab:4c:9a:ac:48:66:fe:f2:90:51:
e8:6e:09:ee:7a:fe:4d:f7:47:18:b7:7b:5f:13:b6:
ee:85:3d:91:28:b9:de:7e:1d:db:62:28:d5:e2:39:
9e:b9:8f:1d:ac:73:21:89:fe:45:3a:da:45:07:6e:
57:36:69:17:d4:8b:1d:c7:d5:c5:d2:b8:36:c1:f5:
5a:2c:9d:23:04:d0:87:ec:e3:0f:2f:0f:e5:c7:32:
5d:7f:0f:36:1b:ee:8d:fa:c5:eb:1c:c4:81:ae:77:
0e:8c:31:6e:b6:c8:65:25:b0:01:f9:de:b8:a4:41:
ce:eb:b6:ea:78:d7:c8:39:40:c6:de:7a:33:35:14:
25:2c:cd:5a:b9:11:9d:86:2c:ba:f4:75:8d:c1:d4:
bc:a9:6f:da:e2:22:77:32:03:2d:96:53:f6:06:45:
f3:1e:c2:8a:a4:02:a7:22:7f:9a:18:d4:6f:fb:67:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:8F:69:08:D0:BC:84:B8:04:F4:88:C1:97:5E:39:C9:4B:26:25
X509v3 Authority Key Identifier:
keyid:F3:2C:A4:DF:32:DC:71:F4:11:10:4F:94:B5:1A:C1:4B:66:75:82:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yyk3zLccfQREE-UtRrBS2Z1gks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/4edbec-ffea-4062-89cb-656600c9e440/1/8yyk3zLccfQREE-UtRrBS2Z1gks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e7:e4:20:dc:ea:4b:65:ca:df:4d:59:f9:1e:40:4e:84:cb:
9a:c8:c8:fd:d6:b6:9d:85:ca:05:43:fc:33:c3:e0:aa:1e:23:
0c:35:4b:9c:7f:a6:c4:9c:a3:bc:4c:37:3b:20:a1:de:fa:53:
0e:8d:da:2f:5a:d9:fa:6a:d3:f2:00:c8:82:f2:cf:6c:b0:9a:
57:e6:b3:c6:df:3d:42:ab:49:f3:60:f2:ee:13:46:08:c0:92:
73:7d:87:d8:dc:ff:2c:f5:45:5e:db:8e:c5:90:5f:24:0b:8f:
00:ed:94:43:79:85:da:ff:3a:44:99:c4:31:3c:c5:cd:b6:8c:
46:0b:4b:b2:37:34:4e:52:c0:4a:40:1b:70:9b:91:bf:c1:94:
b7:bb:51:cd:bf:98:00:82:be:8c:1e:ee:9c:d1:16:59:c5:08:
b6:91:6e:b6:45:8d:4b:a8:91:5d:aa:76:0d:a6:ef:74:86:50:
ff:5f:05:10:78:fd:b5:11:3b:7c:f8:4c:ca:ea:e1:8e:82:3d:
4c:b9:84:95:2b:11:65:cc:04:f3:81:e8:3b:eb:0e:01:c9:99:
f3:e6:79:dc:54:c1:8f:0a:6e:90:ef:4c:2e:8a:da:62:7f:1b:
43:37:62:a0:cb:06:0b:20:33:08:58:50:db:0e:90:e0:74:94:
6d:0e:0a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:23 2026 by rpki-client