Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
File: 1yuCN7P20dG-rCnSlpZAs53LlD4.mft (raw, json)
Hash identifier: mGjLm3eywGJoRiENMHebh0kGLnAWigIW/yxd1J3WCus=
Subject key identifier: 28:3D:5E:51:8A:6C:6F:AA:03:D0:CE:07:C8:A0:55:53:E0:69:FC:A6
Authority key identifier: D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
Certificate issuer: /CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Certificate serial: 019D9AAC3CEE027D19762003764F3761F2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
Manifest number: D4
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: 1yuCN7P20dG-rCnSlpZAs53LlD4.crl (hash: ErNqMfzS0xIXBXdFwLePiJccHq7IfqqMUl3GDrxljE8=)
2: 2ww4Tbxu8yxvwyCs4G733_97l4o.roa (hash: XS/S+oEr6KaVoIO89k+53yIi1peHV8tqEuixKZpqvUM=)
3: r9C6v0mqJc6AkdJfQ094m9sdd5k.roa (hash: 3Wm3ENOGC3Sjvo6Btm3L9HncovHv1CWJ0l5JCzPL+GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3c:ee:02:7d:19:76:20:03:76:4f:37:61:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d72b8237b3f6d1d1beac29d2969640b39dcb943e
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=283d5e518a6c6faa03d0ce07c8a05553e069fca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5e:c4:ea:34:b4:8a:d5:68:2f:6b:84:3e:e3:
f5:fa:66:73:51:41:2b:56:8f:84:f2:7f:64:16:3a:
ee:5e:e2:ba:29:bc:fe:a7:53:1e:2b:ce:c0:bf:b6:
90:0b:35:f6:cc:77:27:10:2d:f4:6a:5e:86:d9:eb:
34:fd:aa:fa:db:7d:e3:5e:9b:c9:3c:b0:0f:bb:24:
70:9a:57:6b:46:ed:16:bf:72:ad:ac:6e:25:6f:49:
8b:63:c1:cd:4d:5d:13:bf:87:69:84:71:35:12:08:
86:7a:17:0a:06:f5:1c:8e:92:3e:ab:43:12:df:51:
70:3d:25:d9:0f:3e:4a:c3:9d:29:4d:0b:fa:f6:16:
c1:cf:f2:c0:5e:14:dc:b2:a7:03:81:81:b5:e0:ce:
f3:9f:d4:f0:74:80:ce:14:a6:19:8a:f5:f3:85:4d:
f9:2a:84:3f:44:f5:13:a0:3e:1d:61:cc:ab:aa:5b:
cd:bf:ca:3e:e2:49:2c:6c:82:14:10:ee:74:7f:c1:
ca:29:0d:43:2a:12:79:ec:0c:7a:00:a6:99:68:e9:
27:3d:1a:65:d6:63:d1:e0:ca:90:0a:04:a9:11:0c:
77:25:15:d5:71:20:0b:2d:e6:07:cd:bd:55:c4:ab:
ac:4d:01:e9:3d:1f:70:d8:dd:41:dc:99:c4:af:bf:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3D:5E:51:8A:6C:6F:AA:03:D0:CE:07:C8:A0:55:53:E0:69:FC:A6
X509v3 Authority Key Identifier:
keyid:D7:2B:82:37:B3:F6:D1:D1:BE:AC:29:D2:96:96:40:B3:9D:CB:94:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yuCN7P20dG-rCnSlpZAs53LlD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6a1638-1ea6-4661-8ce8-e68d9a56452c/1/1yuCN7P20dG-rCnSlpZAs53LlD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:05:a9:7d:5b:98:05:37:72:53:d4:ea:47:73:63:a1:46:02:
bd:ef:85:cb:18:82:2a:f9:14:76:43:89:2e:06:26:a9:81:a2:
7b:b6:4c:8b:51:6e:f0:87:08:a6:00:d4:1b:ff:68:ed:26:fe:
83:d7:6e:3d:5f:60:ca:84:c8:6d:f1:0a:b0:a2:09:fe:c5:68:
e9:66:8c:80:b3:d2:94:ca:12:ad:89:e0:e9:90:c0:ca:1a:12:
d7:08:e1:7a:66:87:12:9e:b2:99:f4:2f:9a:46:0b:da:31:a9:
f8:1b:f3:ee:dd:26:db:d3:cf:b2:da:cd:04:ad:1f:d2:52:54:
ca:c5:99:dd:22:c0:80:c7:d1:38:9f:01:bc:b9:a2:b0:f6:48:
01:0a:9c:d5:36:51:6e:4e:1a:7b:cb:17:13:0c:0e:57:b9:de:
13:50:f1:ae:64:09:b9:dc:65:79:e7:25:dc:bc:85:75:1e:d5:
f3:03:aa:27:18:94:1f:0c:ef:ea:fc:0a:a0:ca:fb:28:e5:02:
f0:e3:67:4e:04:45:50:29:4f:7d:42:69:4b:1b:06:c8:92:09:
63:f9:29:5f:69:3b:9e:65:77:08:91:2e:31:14:d9:78:4a:18:
86:50:ba:b5:98:1b:6a:95:bb:43:84:15:29:f2:76:55:a8:4c:
68:a7:72:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arDzuAn0ZdiADdk83YfLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MmI4MjM3YjNmNmQxZDFiZWFjMjlkMjk2OTY0MGIzOWRj
Yjk0M2UwHhcNMjYwNDE3MDkwMTEyWhcNMjYwNDE4MDkwMTEyWjAzMTEwLwYDVQQD
EygyODNkNWU1MThhNmM2ZmFhMDNkMGNlMDdjOGEwNTU1M2UwNjlmY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V7E6jS0itVoL2uEPuP1+mZzUUEr
Vo+E8n9kFjruXuK6Kbz+p1MeK87Av7aQCzX2zHcnEC30al6G2es0/ar6233jXpvJ
PLAPuyRwmldrRu0Wv3KtrG4lb0mLY8HNTV0Tv4dphHE1EgiGehcKBvUcjpI+q0MS
31FwPSXZDz5Kw50pTQv69hbBz/LAXhTcsqcDgYG14M7zn9TwdIDOFKYZivXzhU35
KoQ/RPUToD4dYcyrqlvNv8o+4kksbIIUEO50f8HKKQ1DKhJ57Ax6AKaZaOknPRpl
1mPR4MqQCgSpEQx3JRXVcSALLeYHzb1VxKusTQHpPR9w2N1B3JnEr78/vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCg9XlGKbG+qA9DOB8igVVPgafymMB8GA1UdIwQY
MBaAFNcrgjez9tHRvqwp0paWQLOdy5Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgt
ZTY4ZDlhNTY0NTJjLzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy82YTE2MzgtMWVhNi00NjYxLThjZTgtZTY4ZDlhNTY0NTJj
LzEvMXl1Q043UDIwZEctckNuU2xwWkFzNTNMbEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwWpfVuY
BTdyU9TqR3NjoUYCve+FyxiCKvkUdkOJLgYmqYGie7ZMi1Fu8IcIpgDUG/9o7Sb+
g9duPV9gyoTIbfEKsKIJ/sVo6WaMgLPSlMoSrYng6ZDAyhoS1wjhemaHEp6ymfQv
mkYL2jGp+Bvz7t0m29PPstrNBK0f0lJUysWZ3SLAgMfROJ8BvLmisPZIAQqc1TZR
bk4ae8sXEwwOV7neE1DxrmQJudxleecl3LyFdR7V8wOqJxiUHwzv6vwKoMr7KOUC
8ONnTgRFUClPfUJpSxsGyJIJY/kpX2k7nmV3CJEuMRTZeEoYhlC6tZgbapW7Q4QV
KfJ2VahMaKdyPw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:34:56 2026 by rpki-client