Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: RjPF+HY2CkWYNWnW7se5MdmjDnFS8b0ierwEpVyZSWk=
Subject key identifier: 3F:27:B9:E9:F8:4E:E6:68:C2:91:65:AA:45:62:DA:C9:03:A4:41:D8
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 019DA2D2EFB8CCBF10B3C4AB2179165E6D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 13A8
Signing time: Sat 18 Apr 2026 23:00:25 +0000
Manifest this update: Sat 18 Apr 2026 23:00:25 +0000
Manifest next update: Sun 19 Apr 2026 23:00:25 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: Udmt8IgHWXHzljUDEeqD2ZOcZCsig+7cReN2ZysT+6Y=)
2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d2:ef:b8:cc:bf:10:b3:c4:ab:21:79:16:5e:6d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Apr 18 23:00:25 2026 GMT
Not After : Apr 19 23:00:25 2026 GMT
Subject: CN=3f27b9e9f84ee668c29165aa4562dac903a441d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:64:58:d9:df:5e:9c:18:40:96:e2:54:b2:
cd:ee:c8:1f:20:4a:ff:ba:c1:38:a6:13:cc:f8:54:
ef:9f:c6:59:36:1b:e3:4a:cb:66:d6:2a:0a:91:b7:
74:a6:48:55:1d:8b:20:f4:e7:08:15:90:3b:fb:b8:
d8:8f:b8:e1:8b:c5:2f:93:49:b0:c5:e5:24:6a:5d:
18:95:8b:5a:c1:f3:e7:73:78:2c:5a:b7:d6:f7:42:
4e:29:80:94:6a:96:07:8f:37:bd:20:3a:c9:a7:7a:
4c:90:bb:77:6d:3e:c4:3a:fc:2c:16:4c:85:1f:32:
36:88:75:93:56:23:ff:55:9e:5c:63:aa:c9:d4:79:
49:a9:be:76:c3:40:db:37:3d:ea:68:77:73:46:d6:
23:91:34:90:2b:af:a4:a1:94:24:52:c2:4d:da:3d:
1f:66:56:de:ea:13:8f:bb:e1:01:0c:5b:fb:74:5f:
af:cb:a4:59:0a:bc:8e:22:83:0d:6a:1b:15:fb:7f:
15:d0:e9:5d:ae:56:51:4c:f0:28:3d:77:16:ed:58:
e1:a3:37:74:f2:94:6c:38:3f:90:33:ec:a3:8e:b2:
02:cf:1b:82:45:39:37:57:77:ca:d2:9a:f7:24:5f:
b0:a6:5c:d6:01:7a:06:68:55:ad:ef:4e:c7:8a:3d:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:27:B9:E9:F8:4E:E6:68:C2:91:65:AA:45:62:DA:C9:03:A4:41:D8
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c0:0b:45:9a:f2:8c:93:6e:11:69:cc:1c:3f:c2:83:a6:85:
b3:e3:20:f3:42:3d:90:b2:45:d0:1d:5e:2a:43:41:89:e6:0c:
d9:ba:58:08:5e:86:8f:77:6c:b2:02:ae:73:da:b0:8c:af:ad:
64:9c:4f:21:0f:cc:0a:95:1f:b3:e4:bd:4e:14:e4:67:f6:47:
88:70:e2:3b:d6:c5:4e:dc:f3:d8:60:ec:85:fd:59:bc:5e:68:
b0:4d:e9:c0:88:86:a5:c6:37:64:ad:c2:9d:06:01:0e:66:65:
91:15:c6:40:75:84:2a:50:08:ca:68:94:f4:90:9b:55:58:34:
16:81:ea:2c:76:62:b7:fa:cd:91:5c:ab:e3:7c:64:43:62:05:
7f:87:fc:8d:df:e4:e1:05:ff:c3:19:7c:21:cb:ba:36:95:de:
05:54:98:74:23:c5:ea:56:37:07:af:b9:6b:1d:1c:f5:d7:7a:
51:6b:15:24:3b:1d:52:0c:0c:32:4a:69:79:07:19:fc:b6:c3:
13:31:df:14:91:68:6b:03:6d:a0:69:6b:79:84:8f:18:40:ff:
d7:72:51:b5:31:74:cc:73:89:82:c9:d2:f1:30:07:0e:d6:6f:
2f:e7:bb:52:cc:be:d8:04:85:41:14:8c:80:d8:4e:6e:49:3b:
02:20:89:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i0u+4zL8Qs8SrIXkWXm1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh
MTk5MjYwHhcNMjYwNDE4MjMwMDI1WhcNMjYwNDE5MjMwMDI1WjAzMTEwLwYDVQQD
EygzZjI3YjllOWY4NGVlNjY4YzI5MTY1YWE0NTYyZGFjOTAzYTQ0MWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k5kWNnfXpwYQJbiVLLN7sgfIEr/
usE4phPM+FTvn8ZZNhvjSstm1ioKkbd0pkhVHYsg9OcIFZA7+7jYj7jhi8Uvk0mw
xeUkal0YlYtawfPnc3gsWrfW90JOKYCUapYHjze9IDrJp3pMkLt3bT7EOvwsFkyF
HzI2iHWTViP/VZ5cY6rJ1HlJqb52w0DbNz3qaHdzRtYjkTSQK6+koZQkUsJN2j0f
Zlbe6hOPu+EBDFv7dF+vy6RZCryOIoMNahsV+38V0OldrlZRTPAoPXcW7Vjhozd0
8pRsOD+QM+yjjrICzxuCRTk3V3fK0pr3JF+wplzWAXoGaFWt707Hij0+uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8nuen4TuZowpFlqkVi2skDpEHYMB8GA1UdIwQY
MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt
YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj
LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicALRZry
jJNuEWnMHD/Cg6aFs+Mg80I9kLJF0B1eKkNBieYM2bpYCF6Gj3dssgKuc9qwjK+t
ZJxPIQ/MCpUfs+S9ThTkZ/ZHiHDiO9bFTtzz2GDshf1ZvF5osE3pwIiGpcY3ZK3C
nQYBDmZlkRXGQHWEKlAIymiU9JCbVVg0FoHqLHZit/rNkVyr43xkQ2IFf4f8jd/k
4QX/wxl8Icu6NpXeBVSYdCPF6lY3B6+5ax0c9dd6UWsVJDsdUgwMMkppeQcZ/LbD
EzHfFJFoawNtoGlreYSPGED/13JRtTF0zHOJgsnS8TAHDtZvL+e7Usy+2ASFQRSM
gNhObkk7AiCJhA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:25 2026 by rpki-client