Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: oXT0IUCCN1z3TKzCRocvn5M0nedREFeEb6Q/o+pherU=
Subject key identifier: B9:A9:52:04:86:DA:00:D5:92:9A:9D:1C:48:7F:88:B0:F3:E4:F8:CE
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 019D97AA73F077710D3E4E7EB3CD5FCA8A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 128D
Signing time: Thu 16 Apr 2026 19:00:23 +0000
Manifest this update: Thu 16 Apr 2026 19:00:23 +0000
Manifest next update: Fri 17 Apr 2026 19:00:23 +0000
Files and hashes: 1: tnlT3WguTIaBPQyXQdyvdPZTqq0.roa (hash: OdNtfnb+ps4t4Tb3faIsE6ujGrvLv+3p6hrL7wNeeB4=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: 1gH07jmLgDxnWfgDd//+z0SHhwfID9KmTHDCgZs08fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:73:f0:77:71:0d:3e:4e:7e:b3:cd:5f:ca:8a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Apr 16 19:00:23 2026 GMT
Not After : Apr 17 19:00:23 2026 GMT
Subject: CN=b9a9520486da00d5929a9d1c487f88b0f3e4f8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:26:37:b9:c3:1e:d2:54:34:4e:6f:1b:8f:4b:
81:f5:fa:a8:d6:93:44:bc:4a:3a:0e:f3:b8:15:38:
75:7c:33:d8:31:ee:3b:67:e9:24:3b:ad:3c:3f:1d:
b7:34:fa:02:3d:be:fa:65:54:ec:76:e2:82:0b:a4:
ba:05:e0:85:a4:b2:7b:d3:34:f6:8d:41:f1:8b:17:
fc:57:2c:d0:7d:b7:22:86:2b:56:ab:e1:2a:7b:d1:
72:dd:67:fb:9c:87:ef:cf:aa:c7:4e:f0:5e:6d:29:
a3:ef:29:b2:cb:0f:88:53:47:c0:9c:5e:47:78:9c:
27:8d:3f:89:fb:df:74:56:d7:e6:5a:f2:97:dc:b0:
7a:2a:e5:60:dc:e7:bd:8e:b6:0c:50:2b:c7:17:6f:
1e:b2:f9:a1:78:9f:6c:8f:84:93:29:da:0c:f6:d4:
8a:2c:7c:ec:36:bf:65:2a:9d:97:be:cf:b7:02:9a:
6f:3f:52:1e:4a:0a:d3:54:9f:ac:45:e6:3e:7d:92:
02:6c:29:fa:64:56:f4:b0:dd:47:bb:a9:51:d1:87:
fc:a1:b8:c3:f1:a1:bf:b3:64:fb:dc:e5:3b:bd:e7:
a0:64:dd:35:62:de:85:52:fd:82:0c:55:f2:24:1a:
80:33:23:fe:95:b1:f5:87:42:82:48:04:56:18:5b:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A9:52:04:86:DA:00:D5:92:9A:9D:1C:48:7F:88:B0:F3:E4:F8:CE
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:76:84:89:31:18:4b:67:87:4d:89:de:f9:ba:63:fd:5e:bf:
ab:5b:d7:2b:18:36:f0:e7:14:74:0f:96:4e:1a:d9:5d:27:a4:
8b:01:1b:00:c9:59:f2:ac:cf:06:35:18:e8:7f:ad:6a:45:f0:
25:26:d7:04:62:6f:6b:a0:01:95:70:d7:8c:d5:ef:1b:63:fd:
fd:6b:3d:ec:93:d0:db:a4:f6:d1:d6:55:46:f4:95:ee:fe:9c:
a0:eb:05:8e:fb:09:5e:32:c0:a5:4e:15:5a:ca:3f:39:e7:b6:
86:ee:dd:84:19:79:7f:24:12:54:1a:60:83:a5:b7:1a:16:b3:
7d:cb:35:d7:53:e3:3b:43:ee:66:c8:32:2d:29:e5:35:de:4b:
3c:a3:5e:68:f7:b7:92:a8:73:6d:d7:03:3d:9b:f8:5c:15:d9:
66:d1:35:5e:fc:71:c2:47:f2:76:a3:b7:77:07:34:c9:00:89:
96:49:ef:87:22:15:f1:12:26:f6:56:b3:58:e1:bd:5e:7a:56:
f6:a5:8c:63:06:2a:fd:9f:cc:89:4a:88:ed:a5:7e:79:7a:e1:
a4:ac:be:e5:80:b4:f3:83:48:f0:2d:6f:a5:46:d9:e6:d5:ba:
bd:04:3c:aa:a8:78:b2:9d:26:ff:d1:ec:a1:33:f2:e9:61:8a:
58:3d:48:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:02 2026 by rpki-client