Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
File: l-y52NNIlBZmfumV9fTiGje2-fg.mft (raw, json)
Hash identifier: ulvgiDKHsmzyuCaC3W52f0OUHPXHyRU4xtkiFRRK/mA=
Subject key identifier: 24:FF:AB:68:27:F7:9A:72:5F:D0:4C:E2:B0:BD:04:79:DF:6E:00:12
Authority key identifier: 97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
Certificate issuer: /CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Certificate serial: 019D98F537194DDE0F5CD6BD7611065C328F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
Manifest number: 094B
Signing time: Fri 17 Apr 2026 01:01:40 +0000
Manifest this update: Fri 17 Apr 2026 01:01:40 +0000
Manifest next update: Sat 18 Apr 2026 01:01:40 +0000
Files and hashes: 1: D4QkBgdPUCYkDN2lY5ivsqhXB8M.roa (hash: jViXNh0mGGwVxxVrUk5eRxQ1z7TU/R1eWWRkMk+2l7U=)
2: l-y52NNIlBZmfumV9fTiGje2-fg.crl (hash: LiinMysO4ZBmc/mXof/xFftLfsjlMpIoc11+jIJd85A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:37:19:4d:de:0f:5c:d6:bd:76:11:06:5c:32:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ecb9d8d3489416667ee995f5f4e21a37b6f9f8
Validity
Not Before: Apr 17 01:01:40 2026 GMT
Not After : Apr 18 01:01:40 2026 GMT
Subject: CN=24ffab6827f79a725fd04ce2b0bd0479df6e0012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:70:29:4e:89:82:df:13:73:ce:d5:2e:35:
a5:44:73:9a:de:c5:3b:cc:3e:f0:41:b1:2f:b2:67:
b9:63:63:08:4c:3b:36:78:47:a4:01:18:7e:0d:47:
14:25:2a:22:9b:73:fb:2c:bc:94:7a:3e:ac:e0:97:
9e:ef:49:20:41:c6:f7:cb:f6:52:da:70:92:95:7f:
a5:62:27:39:c8:ec:1b:4f:c8:34:6a:a2:f1:86:9e:
28:a2:18:e4:1b:5b:30:a3:bb:23:6c:9d:6d:bb:ec:
e1:1d:69:a9:23:06:7b:5d:e6:60:f2:d0:6e:94:a8:
d0:62:53:4b:10:7b:ab:52:ed:1a:b4:75:b1:f2:f1:
49:c1:e7:72:f6:ce:60:3e:b9:bc:28:d6:8a:53:0b:
cb:17:37:7a:d5:ae:9f:c1:bc:b2:2d:69:64:93:86:
cc:b0:78:ff:9e:23:8d:36:69:7e:ef:ad:ef:fd:5b:
66:50:61:41:f6:1d:9c:ff:5a:0f:11:e8:f5:3a:ab:
93:6b:10:e0:9a:f6:ec:d1:a5:d4:d8:a7:db:a0:29:
ee:ba:27:81:e7:ab:de:40:64:11:9a:93:7e:98:52:
e2:ea:c7:3f:cc:19:07:14:ad:c6:a6:27:c7:3a:e5:
ef:a8:ca:46:4d:7f:db:71:42:d9:49:ad:44:9d:0c:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FF:AB:68:27:F7:9A:72:5F:D0:4C:E2:B0:BD:04:79:DF:6E:00:12
X509v3 Authority Key Identifier:
keyid:97:EC:B9:D8:D3:48:94:16:66:7E:E9:95:F5:F4:E2:1A:37:B6:F9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-y52NNIlBZmfumV9fTiGje2-fg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4750ee-1bbb-4570-bb83-59d9d48ea3b1/1/l-y52NNIlBZmfumV9fTiGje2-fg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9f:b8:76:3e:2b:db:8a:85:1e:17:44:72:1b:55:2f:25:45:
d6:a4:d9:c5:6c:b9:db:67:e7:c5:fd:dc:25:ae:98:87:63:ed:
71:8b:0b:b2:f7:c2:2c:f6:18:58:fc:03:7e:5b:a3:c9:23:48:
a4:86:98:5d:60:7f:74:57:8b:c6:75:af:6b:68:1d:76:08:dc:
6d:d9:84:50:e4:6e:94:c4:60:4d:f3:f4:88:88:f6:85:a3:28:
2b:0c:c1:04:d8:07:a7:8e:81:b1:91:5a:1e:9c:5d:86:cc:f6:
37:5b:fd:c2:b7:4e:e8:04:67:e7:fe:3a:81:85:56:52:bd:cc:
9f:80:51:34:ff:07:0f:42:a1:7c:37:0e:f9:3d:fe:3c:9d:cd:
75:13:bd:46:b7:1e:3b:5d:2c:a5:4b:b3:98:04:2e:c5:4c:be:
7d:2f:75:1c:9e:78:42:c2:c7:2b:5d:ee:df:34:76:c1:e4:8a:
c4:b9:85:26:a0:f8:66:b0:18:ad:12:8f:65:72:7d:6a:73:18:
65:84:63:9b:f2:68:5c:5c:8c:a2:2d:90:84:7d:da:52:32:9b:
c5:7f:c3:73:fd:84:e0:f4:24:52:ec:3a:fa:c7:4b:1e:ef:64:
82:5d:4a:44:9a:d4:85:51:32:7b:6f:dd:48:7a:32:7c:06:75:
09:ff:57:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9TcZTd4PXNa9dhEGXDKPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZWNiOWQ4ZDM0ODk0MTY2NjdlZTk5NWY1ZjRlMjFhMzdi
NmY5ZjgwHhcNMjYwNDE3MDEwMTQwWhcNMjYwNDE4MDEwMTQwWjAzMTEwLwYDVQQD
EygyNGZmYWI2ODI3Zjc5YTcyNWZkMDRjZTJiMGJkMDQ3OWRmNmUwMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK5wKU6Jgt8Tc87VLjWlRHOa3sU7
zD7wQbEvsme5Y2MITDs2eEekARh+DUcUJSoim3P7LLyUej6s4Jee70kgQcb3y/ZS
2nCSlX+lYic5yOwbT8g0aqLxhp4oohjkG1swo7sjbJ1tu+zhHWmpIwZ7XeZg8tBu
lKjQYlNLEHurUu0atHWx8vFJwedy9s5gPrm8KNaKUwvLFzd61a6fwbyyLWlkk4bM
sHj/niONNml+763v/VtmUGFB9h2c/1oPEej1OquTaxDgmvbs0aXU2KfboCnuuieB
56veQGQRmpN+mFLi6sc/zBkHFK3GpifHOuXvqMpGTX/bcULZSa1EnQwOpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCT/q2gn95pyX9BM4rC9BHnfbgASMB8GA1UdIwQY
MBaAFJfsudjTSJQWZn7plfX04ho3tvn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMt
NTlkOWQ0OGVhM2IxLzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NzUwZWUtMWJiYi00NTcwLWJiODMtNTlkOWQ0OGVhM2Ix
LzEvbC15NTJOTklsQlptZnVtVjlmVGlHamUyLWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAop+4dj4r
24qFHhdEchtVLyVF1qTZxWy522fnxf3cJa6Yh2PtcYsLsvfCLPYYWPwDflujySNI
pIaYXWB/dFeLxnWva2gddgjcbdmEUORulMRgTfP0iIj2haMoKwzBBNgHp46BsZFa
Hpxdhsz2N1v9wrdO6ARn5/46gYVWUr3Mn4BRNP8HD0KhfDcO+T3+PJ3NdRO9Rrce
O10spUuzmAQuxUy+fS91HJ54QsLHK13u3zR2weSKxLmFJqD4ZrAYrRKPZXJ9anMY
ZYRjm/JoXFyMoi2QhH3aUjKbxX/Dc/2E4PQkUuw6+sdLHu9kgl1KRJrUhVEye2/d
SHoyfAZ1Cf9XRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:16 2026 by rpki-client