Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
File: y2bnZjRVc9cVnWeU7a7bc5okH48.mft (raw, json)
Hash identifier: U0QJYdaoul68Q7vulz25n/iOSEoDLS7SqnVmcZOag8c=
Subject key identifier: 4A:1F:55:C5:8E:E2:55:91:AA:63:E3:EB:24:8C:E0:70:7E:D7:12:A7
Authority key identifier: CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
Certificate issuer: /CN=cb66e766345573d7159d6794edaedb739a241f8f
Certificate serial: 019D992B8B4FEFDAC12B0F0AA50B83801F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
Manifest number: 0910
Signing time: Fri 17 Apr 2026 02:01:00 +0000
Manifest this update: Fri 17 Apr 2026 02:01:00 +0000
Manifest next update: Sat 18 Apr 2026 02:01:00 +0000
Files and hashes: 1: y2bnZjRVc9cVnWeU7a7bc5okH48.crl (hash: XDPKMOlK1IYXxYEvv7pcI4U+H7CNhAnEsokd3gCoOAk=)
2: zyxH_ZayU87vTJX81fgX-DVJmTk.roa (hash: v7IX/ua2uQXhjGalwVPCerFWeIG3hQEbj9ssotgdfjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:8b:4f:ef:da:c1:2b:0f:0a:a5:0b:83:80:1f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb66e766345573d7159d6794edaedb739a241f8f
Validity
Not Before: Apr 17 02:01:00 2026 GMT
Not After : Apr 18 02:01:00 2026 GMT
Subject: CN=4a1f55c58ee25591aa63e3eb248ce0707ed712a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:d6:4e:62:eb:5d:72:8d:59:0d:5e:2a:6a:
c0:d9:3f:e3:64:a5:0f:6b:52:9d:82:89:ef:41:f7:
0b:e7:cb:d0:e2:b8:53:98:e9:31:b1:12:1c:82:6b:
22:c0:f3:5e:bc:6e:0d:c2:1b:1f:76:4e:a5:80:97:
85:b7:9f:7a:9d:7a:b4:b4:c7:85:8b:21:08:ea:a8:
d3:54:2c:5d:09:50:cd:74:73:ec:1a:6a:45:51:d2:
b6:4a:c2:45:ae:0e:62:35:fc:cb:9c:85:0c:ea:d3:
dc:44:c3:a4:c0:0e:f5:7d:72:b6:d9:e2:f3:2d:03:
b1:78:9e:16:d2:1e:b8:ae:91:13:41:22:fe:2c:7b:
a6:a7:06:58:57:fc:ce:98:d5:84:ed:d0:fd:f9:fa:
6c:40:27:a4:b4:55:b6:1c:b1:60:82:dc:7f:7b:b7:
fd:0c:ac:0c:71:26:e3:87:5d:ec:52:56:a6:d0:aa:
c0:30:7c:22:6f:fd:37:a6:64:db:c8:03:33:48:5e:
f5:ad:f7:84:e8:42:22:18:59:2a:6f:da:92:25:bf:
cc:2f:73:58:b8:45:83:0c:ba:7c:4c:a2:da:5b:2a:
b7:55:e3:88:04:a8:cc:95:95:db:24:dc:a2:37:e6:
78:8a:cb:5d:7f:00:e9:7c:7a:41:08:77:4f:60:91:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:55:C5:8E:E2:55:91:AA:63:E3:EB:24:8C:E0:70:7E:D7:12:A7
X509v3 Authority Key Identifier:
keyid:CB:66:E7:66:34:55:73:D7:15:9D:67:94:ED:AE:DB:73:9A:24:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2bnZjRVc9cVnWeU7a7bc5okH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/45890e-6f71-4d36-988a-65bf79b0a989/1/y2bnZjRVc9cVnWeU7a7bc5okH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7e:be:f9:10:54:2b:c2:ee:ff:5f:4c:ff:c8:11:1b:ce:06:
d4:81:b8:6f:51:e1:57:4a:b7:35:61:bd:48:9e:11:61:c9:7e:
9c:3e:0a:f7:2c:53:9c:4c:0f:49:de:93:57:11:45:aa:b7:c8:
6d:d8:c3:4e:7a:63:fa:7f:35:cf:53:4f:78:57:f1:8f:f8:17:
99:aa:a6:1d:6e:d1:58:c4:6f:16:79:0b:c8:e0:a9:6b:45:cb:
64:37:9c:6f:b6:5b:32:45:47:b6:49:f4:47:8d:39:ac:6d:52:
da:a4:fb:4a:80:a8:49:44:ed:5f:ed:23:20:ad:db:1a:ad:ba:
73:f4:1d:d4:06:0e:94:eb:07:4a:99:ea:c3:b0:d2:c4:5d:e0:
c1:3a:c1:ce:64:33:1b:ab:ee:26:da:eb:a3:34:3c:7b:5d:7f:
ea:0c:8c:f3:71:2a:cc:30:5b:e9:60:a2:d2:9a:0a:00:c6:f2:
9f:ea:80:73:8f:8d:7e:72:ce:6a:83:eb:c9:43:2e:4a:35:48:
1e:b5:c8:6b:50:40:bd:df:a5:0c:89:ad:70:3d:60:3f:ac:97:
a8:d4:ae:71:87:ad:c3:bb:a3:e6:af:bf:e7:8d:7a:38:d2:78:
2d:4a:9b:a5:9b:14:4f:3a:6d:27:f0:b5:d3:dc:04:82:a5:6d:
c8:88:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:01 2026 by rpki-client