Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
File: y38v-zmqLfIAS3yhVz0RMXqPt0o.mft (raw, json)
Hash identifier: fG7ZtdIJgCMRwJKD0ESr9i19ZHtUWTX3DTAXpt7qO5M=
Subject key identifier: 2F:90:C3:AC:46:06:56:6D:83:C3:BF:5E:57:18:8C:D4:8A:61:C9:51
Authority key identifier: CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
Certificate issuer: /CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Certificate serial: 019DA3E5DFBF6C719757893DD9E6197E6014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 04:00:44 +0000
Manifest this update: Sun 19 Apr 2026 04:00:44 +0000
Manifest next update: Mon 20 Apr 2026 04:00:44 +0000
Files and hashes: 1: 6Ns2Tq-n87jQpr-uT64fUsVKUX0.roa (hash: z05GfLGcIJ87A3P7XPgnZqPOo0sEQDgBgR5Fwhr1K/M=)
2: vBFUgAPrb_za250_sAWNgAKVaak.asa (hash: b0gKI4/m0v9gKs9clAAyF8VJb5SwiSpATYcLJDL8KGc=)
3: y38v-zmqLfIAS3yhVz0RMXqPt0o.crl (hash: GETUWuPAbDQJ8LbYAnErbpFcHzRS5Cp+t8bKfmpEOz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:df:bf:6c:71:97:57:89:3d:d9:e6:19:7e:60:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7f2ffb39aa2df2004b7ca1573d11317a8fb74a
Validity
Not Before: Apr 19 04:00:44 2026 GMT
Not After : Apr 20 04:00:44 2026 GMT
Subject: CN=2f90c3ac4606566d83c3bf5e57188cd48a61c951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0e:0b:24:aa:02:60:71:e2:28:ba:72:24:8e:
68:0a:eb:e3:a0:3d:5b:bc:18:57:cd:56:c7:b8:a2:
c5:21:4e:6f:46:82:20:f7:68:45:41:33:e1:79:0b:
28:da:91:73:a9:f7:32:ce:ed:ce:2c:af:5e:44:69:
cc:03:86:31:3d:93:25:a9:6b:87:b9:72:44:29:5a:
7e:25:7e:58:ff:44:55:2e:4e:46:17:8b:25:65:ef:
d9:fb:46:9d:2d:47:47:0a:05:3e:53:27:75:46:ce:
b2:de:11:5a:dd:2b:d9:0d:84:f5:ee:3a:11:2c:99:
58:06:35:29:a4:9e:73:2c:b4:5e:3f:2f:e2:85:58:
61:16:34:42:57:e2:56:90:87:a1:a1:c1:eb:f1:03:
eb:91:97:e5:06:3a:88:1f:cf:3a:b5:a8:cd:64:31:
c5:b6:17:e4:1e:cc:2e:81:63:a5:ea:32:b9:cc:a0:
88:00:62:b2:c2:89:24:fe:26:4e:82:0a:71:43:43:
d6:60:1d:c4:01:e9:2a:9b:d1:83:8d:c6:c9:96:46:
f0:0c:a0:79:36:db:e5:e9:93:f9:b9:9c:5c:65:57:
27:c9:ad:33:12:0a:e1:24:0e:0e:0c:a2:69:fb:3b:
2b:07:1c:7d:3f:2a:fe:2c:53:44:a3:2d:2b:85:ca:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:90:C3:AC:46:06:56:6D:83:C3:BF:5E:57:18:8C:D4:8A:61:C9:51
X509v3 Authority Key Identifier:
keyid:CB:7F:2F:FB:39:AA:2D:F2:00:4B:7C:A1:57:3D:11:31:7A:8F:B7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y38v-zmqLfIAS3yhVz0RMXqPt0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3b17f-07d2-4f45-be1d-c8fba0b310a9/1/y38v-zmqLfIAS3yhVz0RMXqPt0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5b:07:be:b7:45:24:2b:56:71:fb:e7:38:9c:43:68:01:f3:
d4:bb:bc:e8:64:7e:cc:1d:98:28:1e:cd:b9:bc:08:d4:99:84:
59:20:ee:17:e4:d0:86:04:45:ef:ec:eb:88:50:59:96:71:76:
2a:af:9e:21:1d:65:34:f2:de:0d:53:f7:7f:0b:64:e6:8c:04:
c5:0c:b4:17:5f:8a:fc:81:c8:0b:c6:44:bd:52:31:94:f6:d4:
87:5f:50:b2:8c:57:6a:29:0d:51:d7:31:68:d0:b2:37:7d:d5:
c6:71:c3:15:fc:ee:c8:d6:3e:be:df:9d:2e:4f:8f:cb:86:28:
75:eb:2e:25:11:2b:fc:26:8b:04:a0:8f:ca:b1:6f:87:81:2a:
58:22:d5:ba:34:ee:27:63:b2:a2:f5:cb:76:3e:93:8c:26:29:
6e:58:34:a2:a0:dc:19:fe:fb:d8:b7:50:19:a8:02:55:67:a0:
06:fe:aa:6e:48:90:74:a2:77:06:f7:a2:93:42:d0:8a:ba:56:
f1:9b:60:ea:92:e7:95:46:98:69:30:4a:c5:36:df:f5:93:08:
6c:ce:66:45:ac:72:d8:ad:f6:8b:f1:33:6a:c9:8b:8f:af:b8:
28:9d:0d:2f:24:a9:f4:ac:6d:eb:26:8d:d0:07:0d:1d:d4:00:
b2:5f:ea:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5d+/bHGXV4k92eYZfmAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiN2YyZmZiMzlhYTJkZjIwMDRiN2NhMTU3M2QxMTMxN2E4
ZmI3NGEwHhcNMjYwNDE5MDQwMDQ0WhcNMjYwNDIwMDQwMDQ0WjAzMTEwLwYDVQQD
EygyZjkwYzNhYzQ2MDY1NjZkODNjM2JmNWU1NzE4OGNkNDhhNjFjOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Q4LJKoCYHHiKLpyJI5oCuvjoD1b
vBhXzVbHuKLFIU5vRoIg92hFQTPheQso2pFzqfcyzu3OLK9eRGnMA4YxPZMlqWuH
uXJEKVp+JX5Y/0RVLk5GF4slZe/Z+0adLUdHCgU+Uyd1Rs6y3hFa3SvZDYT17joR
LJlYBjUppJ5zLLRePy/ihVhhFjRCV+JWkIehocHr8QPrkZflBjqIH886tajNZDHF
thfkHswugWOl6jK5zKCIAGKywokk/iZOggpxQ0PWYB3EAekqm9GDjcbJlkbwDKB5
Ntvl6ZP5uZxcZVcnya0zEgrhJA4ODKJp+zsrBxx9Pyr+LFNEoy0rhcqyHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+Qw6xGBlZtg8O/XlcYjNSKYclRMB8GA1UdIwQY
MBaAFMt/L/s5qi3yAEt8oVc9ETF6j7dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQt
YzhmYmEwYjMxMGE5LzEveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hM2IxN2YtMDdkMi00ZjQ1LWJlMWQtYzhmYmEwYjMxMGE5
LzEveTM4di16bXFMZklBUzN5aFZ6MFJNWHFQdDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVsHvrdF
JCtWcfvnOJxDaAHz1Lu86GR+zB2YKB7NubwI1JmEWSDuF+TQhgRF7+zriFBZlnF2
Kq+eIR1lNPLeDVP3fwtk5owExQy0F1+K/IHIC8ZEvVIxlPbUh19QsoxXaikNUdcx
aNCyN33VxnHDFfzuyNY+vt+dLk+Py4YodesuJREr/CaLBKCPyrFvh4EqWCLVujTu
J2OyovXLdj6TjCYpblg0oqDcGf772LdQGagCVWegBv6qbkiQdKJ3Bveik0LQirpW
8Ztg6pLnlUaYaTBKxTbf9ZMIbM5mRaxy2K32i/EzasmLj6+4KJ0NLySp9Kxt6yaN
0AcNHdQAsl/qEA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:28 2026 by rpki-client