Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: YVvLqlInnAbuKih8F2I2A4yveGT5qUIBtExG431EKaw=
Subject key identifier: CF:07:96:D6:6C:E5:01:7B:24:54:48:57:98:58:D8:97:5B:BD:18:81
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 019D9A3DE268346C1195AED75408867CAB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 1557
Signing time: Fri 17 Apr 2026 07:00:39 +0000
Manifest this update: Fri 17 Apr 2026 07:00:39 +0000
Manifest next update: Sat 18 Apr 2026 07:00:39 +0000
Files and hashes: 1: u2N7udWHL38xXKaM9zlWB4W-ME4.roa (hash: SRPpRQyERN5FsdBAYlcVxUC95a7rxraNn372ElkInaA=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: IjW1n+3PSsoBzAsQpDLSEmYG4P9recKsGaEaHiRzKSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e2:68:34:6c:11:95:ae:d7:54:08:86:7c:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Apr 17 07:00:39 2026 GMT
Not After : Apr 18 07:00:39 2026 GMT
Subject: CN=cf0796d66ce5017b245448579858d8975bbd1881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:80:78:58:65:62:ae:99:26:a5:e3:d3:b8:
d5:d3:cf:64:34:cd:b9:55:5d:b1:a5:b4:a6:8a:ee:
f3:d9:ad:cd:d6:10:0d:cd:11:4a:e4:14:5b:be:cb:
03:8f:b7:2b:fe:00:f5:8e:40:41:1a:50:93:0f:08:
cb:2e:b7:c6:4f:58:f7:41:cc:37:1d:94:1f:b3:34:
b9:8f:77:ce:99:7b:a9:29:b6:62:54:c1:04:e2:d6:
c3:7f:21:fe:39:50:db:d0:ab:11:43:50:fe:15:cd:
a9:65:84:c8:c6:f7:d1:b9:16:60:d0:39:e2:1b:c4:
9a:d8:b0:29:4c:11:a8:50:e9:aa:48:5e:84:46:c1:
18:b0:05:25:31:44:1b:d1:0f:c7:cb:e1:93:ea:76:
84:74:28:e6:be:4c:3d:a1:6a:44:4b:68:47:e2:ac:
c6:45:ad:41:c0:77:a8:a1:49:1a:76:de:22:44:ef:
32:44:fe:39:c3:8d:4c:75:04:30:bf:55:8f:57:13:
4d:5d:d8:4c:73:94:5f:71:b9:09:33:86:e0:d2:c7:
3b:fc:aa:b4:d1:f1:0e:d2:70:b9:99:79:71:d6:e7:
d9:04:05:00:a6:34:82:b5:51:e4:ea:bf:08:b2:f7:
07:ee:80:84:81:40:c5:7e:cb:16:00:32:74:99:4d:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:96:D6:6C:E5:01:7B:24:54:48:57:98:58:D8:97:5B:BD:18:81
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7b:d5:7c:be:ab:f4:ba:83:2a:c2:d4:e2:d4:12:41:b3:38:
92:5d:d3:a6:fd:e5:f8:c6:b8:e5:b8:d8:df:5d:ea:f1:5f:fc:
c1:cf:73:3b:fa:5d:d4:38:f5:f1:e1:3a:ba:4c:cc:af:88:0c:
39:f9:ba:fd:c1:16:1c:52:a5:a7:b0:a3:eb:e5:e0:a6:7e:e5:
54:b9:58:8d:c3:e5:0d:89:47:53:0b:3d:8b:55:f9:d0:9d:13:
07:26:32:73:39:2e:0f:bf:1f:4d:c5:57:00:6f:a4:e7:56:cf:
7f:0b:17:e7:70:0f:6c:2d:4f:e3:62:43:59:ee:82:8f:ae:4d:
b4:42:38:fc:47:96:66:47:98:9e:6e:0c:c1:5f:98:b0:9f:42:
af:71:fe:c4:57:72:88:3f:79:af:48:22:36:9e:15:9d:73:d9:
df:eb:2f:f7:72:c9:fb:d0:a0:60:46:28:9b:86:c9:f4:d4:be:
3d:79:e2:10:83:08:ff:15:27:bf:95:9c:ca:8b:a0:c9:8d:7f:
7e:5a:1e:a1:77:40:6a:dc:c1:3f:03:ea:9e:4a:ad:c7:50:ff:
ab:c2:56:2e:e6:f2:8c:6f:1a:53:5c:63:1d:52:8d:0a:0c:48:
fb:ee:fb:0c:f5:e4:89:4b:f3:97:86:cc:5f:79:85:ca:74:50:
74:0a:bd:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPeJoNGwRla7XVAiGfKtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDI1ZmRlNzQ3YWE3ZmVhOGU3YjMzNWI0NmM4OGQyMzg4
NTBhYmUwHhcNMjYwNDE3MDcwMDM5WhcNMjYwNDE4MDcwMDM5WjAzMTEwLwYDVQQD
EyhjZjA3OTZkNjZjZTUwMTdiMjQ1NDQ4NTc5ODU4ZDg5NzViYmQxODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJKAeFhlYq6ZJqXj07jV089kNM25
VV2xpbSmiu7z2a3N1hANzRFK5BRbvssDj7cr/gD1jkBBGlCTDwjLLrfGT1j3Qcw3
HZQfszS5j3fOmXupKbZiVMEE4tbDfyH+OVDb0KsRQ1D+Fc2pZYTIxvfRuRZg0Dni
G8Sa2LApTBGoUOmqSF6ERsEYsAUlMUQb0Q/Hy+GT6naEdCjmvkw9oWpES2hH4qzG
Ra1BwHeooUkadt4iRO8yRP45w41MdQQwv1WPVxNNXdhMc5RfcbkJM4bg0sc7/Kq0
0fEO0nC5mXlx1ufZBAUApjSCtVHk6r8IsvcH7oCEgUDFfssWADJ0mU2wJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8HltZs5QF7JFRIV5hY2JdbvRiBMB8GA1UdIwQY
MBaAFMtCX950eqf+qOezNbRsiNI4hQq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYt
YmJmNzE5YzNjYTc0LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS85ZTM5ZGEtMTkyNS00NDY0LTk1NzYtYmJmNzE5YzNjYTc0
LzEveTBKZjNuUjZwXzZvNTdNMXRHeUkwamlGQ3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3vVfL6r
9LqDKsLU4tQSQbM4kl3Tpv3l+Ma45bjY313q8V/8wc9zO/pd1Dj18eE6ukzMr4gM
Ofm6/cEWHFKlp7Cj6+Xgpn7lVLlYjcPlDYlHUws9i1X50J0TByYyczkuD78fTcVX
AG+k51bPfwsX53APbC1P42JDWe6Cj65NtEI4/EeWZkeYnm4MwV+YsJ9Cr3H+xFdy
iD95r0giNp4VnXPZ3+sv93LJ+9CgYEYom4bJ9NS+PXniEIMI/xUnv5WcyougyY1/
floeoXdAatzBPwPqnkqtx1D/q8JWLubyjG8aU1xjHVKNCgxI++77DPXkiUvzl4bM
X3mFynRQdAq9Wg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:50 2026 by rpki-client