Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
File: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft (raw, json)
Hash identifier: XJtjmQdt3DH+hoaLtYFpY8lZCz374HBhtn6TIae6LHk=
Subject key identifier: 1E:38:71:B3:63:3D:96:3C:DA:1D:11:0B:38:B8:D8:5D:D7:F2:B2:0F
Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Certificate serial: 019DA52FECB67B90A72FFE8BC15F31355F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
Manifest number: 047B
Signing time: Sun 19 Apr 2026 10:01:14 +0000
Manifest this update: Sun 19 Apr 2026 10:01:14 +0000
Manifest next update: Mon 20 Apr 2026 10:01:14 +0000
Files and hashes: 1: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (hash: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI=)
2: y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl (hash: ZqSv5gL2egC4XksKm33GtYulkGXxefvfK/puR3j5DmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:ec:b6:7b:90:a7:2f:fe:8b:c1:5f:31:35:5f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64
Validity
Not Before: Apr 19 10:01:14 2026 GMT
Not After : Apr 20 10:01:14 2026 GMT
Subject: CN=1e3871b3633d963cda1d110b38b8d85dd7f2b20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:3b:16:2c:01:27:dc:f1:34:36:ab:cb:09:
bf:2d:61:a3:b4:8d:93:a4:1e:3b:70:d1:53:5a:f9:
06:aa:c3:5f:c0:1c:ce:14:8f:e4:bc:a9:e0:ae:55:
e1:ac:14:1a:fe:54:57:86:cc:d5:e1:86:15:91:78:
18:4d:9d:88:b3:84:cc:ad:ef:4f:7f:fb:5e:2c:f9:
3d:3e:c3:42:e7:4c:54:dc:d6:94:23:a4:09:af:d7:
31:d5:54:8b:1a:96:bb:41:d9:1a:39:74:a5:49:58:
d1:88:8a:5e:37:b6:2e:e3:de:67:6c:1c:61:89:7a:
ae:60:b1:7f:e8:d3:50:02:91:90:67:e0:98:59:6f:
38:37:8a:87:20:02:03:1b:73:31:1e:c9:92:3d:94:
16:d8:25:8a:c2:83:ed:45:1b:58:dc:0f:09:a7:36:
bf:17:5d:7c:cf:dc:61:45:66:64:9b:1e:b7:e6:91:
b8:d5:57:bd:32:b3:f5:a7:ca:01:cf:60:c4:7f:85:
83:28:33:f5:9e:c6:93:fd:cc:6b:0f:81:ac:c1:af:
d2:d6:fc:0a:76:59:83:4c:8e:0a:97:fe:7a:8d:4e:
3b:15:3f:44:ef:91:ce:b4:13:a8:aa:3b:75:66:fb:
84:2e:51:15:07:ea:4f:48:37:29:98:cb:7d:c5:69:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:38:71:B3:63:3D:96:3C:DA:1D:11:0B:38:B8:D8:5D:D7:F2:B2:0F
X509v3 Authority Key Identifier:
keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d0:68:0a:84:b9:c9:94:84:32:76:d1:30:9a:0a:75:cf:91:
dc:63:3b:a5:4b:56:b2:03:58:a6:34:70:8e:fe:3b:b5:3e:48:
ea:fc:f3:bf:04:71:30:dd:9b:e3:22:45:69:05:9a:fa:5f:db:
41:09:8a:42:19:18:a2:3f:ec:b8:d1:49:4a:50:68:8f:29:a3:
f9:23:cc:f9:04:de:5e:9e:da:3e:7f:2b:1f:3a:a0:ab:b2:08:
82:2d:6b:0e:32:07:de:c0:fc:80:81:11:07:c9:4a:fa:f8:73:
fe:1f:a7:c8:8a:68:84:98:a0:04:60:8b:d2:c2:0c:bb:7d:23:
e6:70:87:34:81:87:0b:d1:32:31:07:45:8e:fd:a6:17:3f:f1:
2e:f6:1c:7b:c4:e5:62:bf:fb:d3:78:cb:5e:22:ee:9a:bb:0b:
7c:e5:89:e6:45:91:b7:1d:59:e9:74:02:88:8c:7b:54:d7:c2:
09:71:8d:93:42:90:bd:8e:86:cd:24:f2:03:df:b0:fe:33:83:
c7:3e:fc:78:6e:52:d3:08:e1:41:51:34:b1:31:f6:16:25:a2:
49:58:4a:68:e0:ae:1f:dd:41:24:bb:9b:07:4e:bd:f8:51:96:
ab:c5:2e:fe:58:2b:d2:49:c1:05:2a:38:cb:8c:96:24:35:e9:
af:68:88:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL+y2e5CnL/6LwV8xNV+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5
ZTViNjQwHhcNMjYwNDE5MTAwMTE0WhcNMjYwNDIwMTAwMTE0WjAzMTEwLwYDVQQD
EygxZTM4NzFiMzYzM2Q5NjNjZGExZDExMGIzOGI4ZDg1ZGQ3ZjJiMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj07FiwBJ9zxNDarywm/LWGjtI2T
pB47cNFTWvkGqsNfwBzOFI/kvKngrlXhrBQa/lRXhszV4YYVkXgYTZ2Is4TMre9P
f/teLPk9PsNC50xU3NaUI6QJr9cx1VSLGpa7QdkaOXSlSVjRiIpeN7Yu495nbBxh
iXquYLF/6NNQApGQZ+CYWW84N4qHIAIDG3MxHsmSPZQW2CWKwoPtRRtY3A8Jpza/
F118z9xhRWZkmx635pG41Ve9MrP1p8oBz2DEf4WDKDP1nsaT/cxrD4Gswa/S1vwK
dlmDTI4Kl/56jU47FT9E75HOtBOoqjt1ZvuELlEVB+pPSDcpmMt9xWnM/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB44cbNjPZY82h0RCzi42F3X8rIPMB8GA1UdIwQY
MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt
ZTM1ZGI1MjU2N2YwLzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw
LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNBoCoS5
yZSEMnbRMJoKdc+R3GM7pUtWsgNYpjRwjv47tT5I6vzzvwRxMN2b4yJFaQWa+l/b
QQmKQhkYoj/suNFJSlBojymj+SPM+QTeXp7aPn8rHzqgq7IIgi1rDjIH3sD8gIER
B8lK+vhz/h+nyIpohJigBGCL0sIMu30j5nCHNIGHC9EyMQdFjv2mFz/xLvYce8Tl
Yr/703jLXiLumrsLfOWJ5kWRtx1Z6XQCiIx7VNfCCXGNk0KQvY6GzSTyA9+w/jOD
xz78eG5S0wjhQVE0sTH2FiWiSVhKaOCuH91BJLubB069+FGWq8Uu/lgr0knBBSo4
y4yWJDXpr2iI6A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:57 2026 by rpki-client