Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
File: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft (raw, json)
Hash identifier: ovZ6X1VlmuZep6d1lavi390Jmo+4qC+B5rUC2WufF48=
Subject key identifier: 3E:B0:2B:F1:CD:C4:EE:FA:34:41:48:08:CA:D1:A0:26:D2:B2:14:0F
Authority key identifier: 63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
Certificate issuer: /CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Certificate serial: 019D9A3E2E6AB9995B5F9219275228C5F02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
Manifest number: 0BF7
Signing time: Fri 17 Apr 2026 07:00:59 +0000
Manifest this update: Fri 17 Apr 2026 07:00:59 +0000
Manifest next update: Sat 18 Apr 2026 07:00:59 +0000
Files and hashes: 1: ORD5CVRl8fHNkrGDCcDgKgiB4nA.roa (hash: SAvELpe3u4u8sy1W4tmIPkF/1bK/o7riGyIeb81WOH8=)
2: Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl (hash: W0B0lDW1HsY7PiERQFdEH/KEqdJMvbtIybGemjvQEAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2e:6a:b9:99:5b:5f:92:19:27:52:28:c5:f0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa715c2f4b9008c8f4b60654f7f3c76353ae67
Validity
Not Before: Apr 17 07:00:59 2026 GMT
Not After : Apr 18 07:00:59 2026 GMT
Subject: CN=3eb02bf1cdc4eefa34414808cad1a026d2b2140f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:3b:a4:cd:a9:e6:33:26:cf:88:ad:49:17:
10:38:86:ad:4a:8a:3a:bb:cd:55:6e:6c:00:16:1e:
e5:03:5a:e0:51:e8:89:2f:82:31:2c:8d:02:7d:32:
15:82:01:0f:d8:4f:aa:97:5d:f2:39:32:c6:4a:99:
32:1c:90:e7:a0:b4:58:ac:31:1a:e9:85:b2:64:84:
7a:1b:6a:5a:ed:2d:6b:4b:bc:3e:7a:54:64:cb:83:
da:51:f9:ab:fa:b7:f7:c1:e1:4a:55:ee:d3:bb:15:
86:b9:a4:f2:97:75:73:dd:82:bd:40:7f:ac:79:2e:
54:9d:8a:d5:17:cb:cf:76:c6:5b:76:b1:35:51:03:
50:70:07:8a:14:7c:78:12:c9:b9:f4:2e:84:e7:c9:
c3:92:b9:4b:be:5a:a8:ec:7c:f4:b4:cb:b8:32:f1:
56:4d:e2:7d:06:67:e4:7c:a8:a3:db:69:4d:b5:4b:
41:f0:5a:bd:09:b3:31:19:7c:18:fe:96:66:bc:6e:
40:07:05:3a:5c:60:72:61:49:b0:64:92:b4:37:65:
cf:68:d9:4f:62:65:e1:98:c1:c0:0d:0d:d5:c4:b2:
8b:94:4f:75:40:0e:4b:6f:ae:33:73:eb:2c:e8:1f:
9d:5d:39:d6:27:05:34:83:43:1c:70:da:bb:5e:4f:
66:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:2B:F1:CD:C4:EE:FA:34:41:48:08:CA:D1:A0:26:D2:B2:14:0F
X509v3 Authority Key Identifier:
keyid:63:FA:71:5C:2F:4B:90:08:C8:F4:B6:06:54:F7:F3:C7:63:53:AE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bf9cdb-6e87-479f-93a1-65a5ef0af0b4/1/Y_pxXC9LkAjI9LYGVPfzx2NTrmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7a:1f:13:0c:23:7e:20:dd:ca:e2:33:db:b5:e9:77:a9:49:
f2:73:d4:49:2b:cd:4e:ed:dd:ad:76:1a:81:a5:5b:8e:f7:fc:
23:52:9c:2d:84:91:e2:05:5a:14:81:78:e2:8e:1e:8f:d9:51:
f6:f2:8e:f0:62:35:e5:70:48:9e:0b:f8:a0:2e:1e:25:da:24:
0a:46:60:f5:0b:94:b4:1e:c6:23:4d:50:73:58:ac:dd:39:c1:
2a:7c:92:a7:6f:a5:25:e9:30:85:00:6c:ba:d9:d8:61:4e:9b:
63:af:d3:30:50:ff:c2:f7:70:7c:4b:db:a5:1d:22:9f:4b:08:
66:4e:bd:77:7e:db:fc:ab:af:70:07:63:56:a8:e4:ba:5c:25:
67:92:08:7d:1b:f1:e4:d0:7c:02:86:ff:1b:d2:e6:7d:c1:1b:
2f:b2:07:94:7c:ae:9e:9a:16:da:36:d9:2e:f2:88:c6:61:c2:
a1:7c:8b:d1:cc:a8:26:ee:bc:e9:df:0a:5f:c3:55:57:be:99:
fe:52:25:27:eb:0a:48:00:f8:e3:97:b4:c4:99:00:1b:8e:77:
07:e3:97:2e:46:ae:8e:93:18:20:b1:5d:f1:e6:55:2a:f1:d6:
25:ab:95:a7:63:4d:b5:ff:11:12:cb:4a:8b:c3:cd:be:b8:15:
0b:fb:0c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPi5quZlbX5IZJ1IoxfAqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE3MTVjMmY0YjkwMDhjOGY0YjYwNjU0ZjdmM2M3NjM1
M2FlNjcwHhcNMjYwNDE3MDcwMDU5WhcNMjYwNDE4MDcwMDU5WjAzMTEwLwYDVQQD
EygzZWIwMmJmMWNkYzRlZWZhMzQ0MTQ4MDhjYWQxYTAyNmQyYjIxNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC07pM2p5jMmz4itSRcQOIatSoo6
u81VbmwAFh7lA1rgUeiJL4IxLI0CfTIVggEP2E+ql13yOTLGSpkyHJDnoLRYrDEa
6YWyZIR6G2pa7S1rS7w+elRky4PaUfmr+rf3weFKVe7TuxWGuaTyl3Vz3YK9QH+s
eS5UnYrVF8vPdsZbdrE1UQNQcAeKFHx4Esm59C6E58nDkrlLvlqo7Hz0tMu4MvFW
TeJ9BmfkfKij22lNtUtB8Fq9CbMxGXwY/pZmvG5ABwU6XGByYUmwZJK0N2XPaNlP
YmXhmMHADQ3VxLKLlE91QA5Lb64zc+ss6B+dXTnWJwU0g0MccNq7Xk9mvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6wK/HNxO76NEFICMrRoCbSshQPMB8GA1UdIwQY
MBaAFGP6cVwvS5AIyPS2BlT388djU65nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEt
NjVhNWVmMGFmMGI0LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iZjljZGItNmU4Ny00NzlmLTkzYTEtNjVhNWVmMGFmMGI0
LzEvWV9weFhDOUxrQWpJOUxZR1ZQZnp4Mk5Ucm1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXofEwwj
fiDdyuIz27Xpd6lJ8nPUSSvNTu3drXYagaVbjvf8I1KcLYSR4gVaFIF44o4ej9lR
9vKO8GI15XBIngv4oC4eJdokCkZg9QuUtB7GI01Qc1is3TnBKnySp2+lJekwhQBs
utnYYU6bY6/TMFD/wvdwfEvbpR0in0sIZk69d37b/KuvcAdjVqjkulwlZ5IIfRvx
5NB8Aob/G9LmfcEbL7IHlHyunpoW2jbZLvKIxmHCoXyL0cyoJu686d8KX8NVV76Z
/lIlJ+sKSAD445e0xJkAG453B+OXLkaujpMYILFd8eZVKvHWJauVp2NNtf8REstK
i8PNvrgVC/sMFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:06 2026 by rpki-client