Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: Hqip00oX/Mr3URKUTqCumu+2JHUPxa80FHWjHSG0Kio=
Subject key identifier: 6C:5D:FD:51:17:A1:35:3C:76:B7:CD:F6:48:90:01:80:3A:39:DF:E9
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 019D9BF5A7B11D3602640E120194D870F71C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 099B
Signing time: Fri 17 Apr 2026 15:01:00 +0000
Manifest this update: Fri 17 Apr 2026 15:01:00 +0000
Manifest next update: Sat 18 Apr 2026 15:01:00 +0000
Files and hashes: 1: OZwTEhhz89DG-d3VUUmj7RDclB0.roa (hash: VGKfh4SeFwSQNLUtXLKPpcLTHLslj6UGjADg7S741KI=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: n3Ad+HcvgIHfdr5EjY45Ck8Cet+XAowplrgyk5A+wlY=)
3: _cO3dPrIFou0SkBFKvSED_RiaEA.roa (hash: l5NyYi26dL87o5NLg8E85DjdFhJOd6MAl45991rZZ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:a7:b1:1d:36:02:64:0e:12:01:94:d8:70:f7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Apr 17 15:01:00 2026 GMT
Not After : Apr 18 15:01:00 2026 GMT
Subject: CN=6c5dfd5117a1353c76b7cdf6489001803a39dfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:0c:6e:e6:74:d7:db:c9:a3:80:e6:f2:bc:
b7:e7:97:28:63:cc:a6:dc:4b:a7:4a:41:42:bd:b3:
4b:60:0b:57:69:bd:61:3e:28:d4:70:63:46:9d:28:
15:60:55:6a:b0:f1:1c:74:30:5a:50:a9:9e:30:12:
86:65:29:11:f6:4c:9d:73:f3:58:4c:60:5f:1d:f2:
f4:7c:f9:d2:59:76:b7:45:9e:5d:60:5a:16:3d:15:
49:7f:50:c1:ac:a2:70:49:66:73:e6:a2:c9:f3:04:
f6:42:93:31:c6:cd:c7:f5:21:93:5b:29:ad:81:b5:
4b:35:d2:d1:98:e5:1a:c4:ed:c9:7a:1e:12:f6:c0:
61:28:5d:cf:d0:c3:44:fd:fc:9a:fa:a5:6a:07:be:
a8:a8:53:cd:fb:09:ac:8a:d2:25:ad:ef:4a:80:7e:
c2:c1:53:44:ed:a8:1d:ee:19:30:ce:c4:60:79:b9:
f2:b5:3e:49:c2:9d:10:0a:4d:0f:3e:00:d9:d6:04:
56:9f:af:44:c1:7e:9e:3a:b8:24:7e:11:6c:44:0f:
54:bf:63:3b:e7:75:7a:3b:86:90:9a:71:bd:aa:72:
b2:ed:90:3c:f3:2b:23:30:3f:72:dd:fc:3b:48:56:
24:6e:56:b5:a3:62:89:38:19:5b:d4:33:f1:fc:20:
4c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5D:FD:51:17:A1:35:3C:76:B7:CD:F6:48:90:01:80:3A:39:DF:E9
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:8a:72:37:7d:58:ce:54:36:26:5b:ea:8e:28:b0:d4:93:
cd:18:d3:d6:89:55:32:af:fe:8b:72:b1:89:c3:96:7a:ce:d1:
3b:36:97:0d:5b:cf:9b:2e:db:8d:7d:7a:d1:1c:6c:c3:c8:ad:
db:98:e6:f3:e8:6d:b6:f6:4b:6b:43:5d:8b:9b:fc:80:18:31:
12:3e:73:a8:81:69:63:0b:98:9d:cd:ee:d5:ff:d8:5f:31:55:
ed:25:a0:fe:d8:cf:d6:e9:04:b5:e9:d2:cb:e6:74:61:05:fb:
1f:e8:27:fe:34:dd:0f:30:1a:5b:16:d5:4a:c0:93:87:f9:b7:
ed:cc:04:44:71:f0:ed:c6:64:2c:3a:0c:cf:61:5d:cc:6e:fc:
c2:58:07:7c:df:b9:0d:3b:5c:26:3e:6e:0f:23:84:3d:eb:b2:
91:82:60:1c:0a:3d:80:1e:1b:b2:22:e6:36:41:26:0a:07:29:
82:a1:a4:10:41:74:cd:65:bb:1d:e1:4b:79:2d:f8:e3:c1:c5:
55:72:92:1d:5a:b8:f1:12:4d:0e:ad:b8:e9:67:31:78:3b:55:
9a:38:f3:c1:2c:38:36:17:21:19:c5:4d:60:ae:77:f2:6a:a0:
36:60:30:13:7f:41:cf:d8:85:a9:fa:0e:6d:6f:22:bc:2d:20:
74:e9:78:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9aexHTYCZA4SAZTYcPccMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzYTc1OWIwNmU2ZmVkMDNiMDkzMDc0OTE1M2ZjMTZhMTJh
NTAxZTAwHhcNMjYwNDE3MTUwMTAwWhcNMjYwNDE4MTUwMTAwWjAzMTEwLwYDVQQD
Eyg2YzVkZmQ1MTE3YTEzNTNjNzZiN2NkZjY0ODkwMDE4MDNhMzlkZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1sMbuZ019vJo4Dm8ry355coY8ym
3EunSkFCvbNLYAtXab1hPijUcGNGnSgVYFVqsPEcdDBaUKmeMBKGZSkR9kydc/NY
TGBfHfL0fPnSWXa3RZ5dYFoWPRVJf1DBrKJwSWZz5qLJ8wT2QpMxxs3H9SGTWymt
gbVLNdLRmOUaxO3Jeh4S9sBhKF3P0MNE/fya+qVqB76oqFPN+wmsitIlre9KgH7C
wVNE7agd7hkwzsRgebnytT5Jwp0QCk0PPgDZ1gRWn69EwX6eOrgkfhFsRA9Uv2M7
53V6O4aQmnG9qnKy7ZA88ysjMD9y3fw7SFYkbla1o2KJOBlb1DPx/CBMdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxd/VEXoTU8drfN9kiQAYA6Od/pMB8GA1UdIwQY
MBaAFGOnWbBub+0DsJMHSRU/wWoSpQHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMt
OWUyNDk2OGU2NjY0LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xMzE1MGMtODVkYS00NThkLWJjNmMtOWUyNDk2OGU2NjY0
LzEvWTZkWnNHNXY3UU93a3dkSkZUX0JhaEtsQWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/6Kcjd9
WM5UNiZb6o4osNSTzRjT1olVMq/+i3KxicOWes7ROzaXDVvPmy7bjX160Rxsw8it
25jm8+httvZLa0Ndi5v8gBgxEj5zqIFpYwuYnc3u1f/YXzFV7SWg/tjP1ukEtenS
y+Z0YQX7H+gn/jTdDzAaWxbVSsCTh/m37cwERHHw7cZkLDoMz2FdzG78wlgHfN+5
DTtcJj5uDyOEPeuykYJgHAo9gB4bsiLmNkEmCgcpgqGkEEF0zWW7HeFLeS3448HF
VXKSHVq48RJNDq246WcxeDtVmjjzwSw4NhchGcVNYK538mqgNmAwE39Bz9iFqfoO
bW8ivC0gdOl4mw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:41 2026 by rpki-client