Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File: y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier: Y3RVm+/TKaicRXU7V2LgZ8HtIOaTKzfImF/Z63f0qW8=
Subject key identifier: 24:A6:CB:A4:21:DF:8C:07:68:A7:7B:12:AD:D4:84:8E:E8:2A:27:8B
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer: /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial: 019D985004A62920F840D378F9DA2A798079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number: 09EF
Signing time: Thu 16 Apr 2026 22:01:13 +0000
Manifest this update: Thu 16 Apr 2026 22:01:13 +0000
Manifest next update: Fri 17 Apr 2026 22:01:13 +0000
Files and hashes: 1: kqpRs8PQ33xnPlP-Fdc6LgO-EXI.roa (hash: oPLgkHy5uqEh77+OXee0sAfzK1xOwlBFgn/lM+qBthY=)
2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: fFtA4KXU7sJNPM4guA0RBeLZWfJUtEL0tHhPDOFBQGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:04:a6:29:20:f8:40:d3:78:f9:da:2a:79:80:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
Validity
Not Before: Apr 16 22:01:13 2026 GMT
Not After : Apr 17 22:01:13 2026 GMT
Subject: CN=24a6cba421df8c0768a77b12add4848ee82a278b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:ec:a2:db:13:88:e8:06:e2:43:27:10:6c:
89:27:54:71:82:cb:65:54:4b:50:70:a2:34:5d:c3:
92:f2:1c:b0:15:b2:e0:33:7d:3e:0b:a5:57:2b:24:
4d:12:2e:06:10:e6:f5:0d:da:a4:4f:c3:49:64:7d:
4b:01:b8:08:db:a1:7a:bb:26:79:41:37:46:8b:f1:
a0:4e:7b:22:78:12:2a:f5:d9:18:53:72:9f:b6:00:
0b:9d:b8:4f:e2:04:2e:f4:1e:28:ca:1f:c4:c4:56:
b0:0a:60:2f:6e:79:e0:f0:6d:a1:72:34:c4:31:14:
ec:7f:e2:ba:6a:98:8e:d0:01:bb:0a:cf:4c:f6:be:
a6:a1:1f:0d:fd:39:d4:8d:06:27:17:2e:7a:45:cc:
b8:8f:6b:4d:a3:35:e8:ad:ad:1d:a7:7f:7c:f3:dd:
a6:8d:e3:f1:10:1e:de:5b:20:6c:01:89:ae:88:10:
4d:73:d5:9f:d8:9a:5e:2e:9d:3b:b5:aa:b1:11:a0:
aa:0d:67:57:4a:41:b6:cc:11:ec:ce:15:4c:dd:6d:
2e:9f:e4:43:22:0d:b0:3e:37:e0:5d:f7:cb:35:9d:
e5:39:11:bb:39:62:8d:9b:dd:89:f3:dc:46:aa:21:
11:d7:48:55:fc:2b:0e:e9:0d:b8:30:75:e6:a3:2e:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A6:CB:A4:21:DF:8C:07:68:A7:7B:12:AD:D4:84:8E:E8:2A:27:8B
X509v3 Authority Key Identifier:
keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:22:98:31:0a:78:89:05:d7:24:f7:3a:bf:e7:c1:b2:a8:16:
2c:63:e3:f4:d0:05:92:d8:c8:24:b7:bc:eb:49:a3:73:7b:fd:
06:78:11:cc:b4:5c:42:71:31:68:87:68:35:90:78:e2:01:b3:
95:b9:11:67:68:8d:00:bf:d9:88:af:42:45:40:5d:86:f1:99:
08:08:01:3c:dd:22:ae:cd:bf:60:7c:83:c2:a3:f3:32:79:75:
dc:b6:0a:ca:83:52:42:42:08:e4:b1:08:77:23:62:bb:f3:4b:
ff:45:b0:4a:3b:fd:13:b7:bd:a9:c9:84:39:dd:83:fa:f5:25:
c9:02:f9:d6:77:95:93:89:c7:00:0e:4d:b8:be:3e:1e:e3:bb:
06:05:a1:53:7e:13:4b:cc:83:b4:11:28:25:47:aa:8f:66:cf:
61:45:d2:48:04:dc:b9:13:91:d9:51:b7:23:ef:65:d5:55:05:
ce:e9:f5:9e:ba:58:2f:3b:d7:58:cb:4d:f7:ac:15:be:11:1f:
c5:dd:31:20:10:e2:ff:2e:25:0b:d2:80:33:21:e1:cd:7b:22:
91:24:74:41:1e:b9:1f:14:3a:73:75:d2:ae:81:aa:2e:d6:ed:
5e:96:d2:c8:f4:f8:d3:c9:7d:93:48:bb:1c:4b:3b:2d:39:62:
4a:a8:3d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUASmKSD4QNN4+doqeYB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDIxNmIwMDU3NDRjMThjYjM4NGQzZDA5ZDEyNDA2NmQ1
NWY2MmQwHhcNMjYwNDE2MjIwMTEzWhcNMjYwNDE3MjIwMTEzWjAzMTEwLwYDVQQD
EygyNGE2Y2JhNDIxZGY4YzA3NjhhNzdiMTJhZGQ0ODQ4ZWU4MmEyNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLnsotsTiOgG4kMnEGyJJ1Rxgstl
VEtQcKI0XcOS8hywFbLgM30+C6VXKyRNEi4GEOb1DdqkT8NJZH1LAbgI26F6uyZ5
QTdGi/GgTnsieBIq9dkYU3KftgALnbhP4gQu9B4oyh/ExFawCmAvbnng8G2hcjTE
MRTsf+K6apiO0AG7Cs9M9r6moR8N/TnUjQYnFy56Rcy4j2tNozXora0dp398892m
jePxEB7eWyBsAYmuiBBNc9Wf2JpeLp07taqxEaCqDWdXSkG2zBHszhVM3W0un+RD
Ig2wPjfgXffLNZ3lORG7OWKNm92J89xGqiER10hV/CsO6Q24MHXmoy7hlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSmy6Qh34wHaKd7Eq3UhI7oKieLMB8GA1UdIwQY
MBaAFMvSFrAFdEwYyzhNPQnRJAZtVfYtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2Qt
MDViYmU0ZWYwNmMwLzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9jNWViOTktNzI4OS00ZTNlLWE4Y2QtMDViYmU0ZWYwNmMw
LzEveTlJV3NBVjBUQmpMT0UwOUNkRWtCbTFWOWkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSKYMQp4
iQXXJPc6v+fBsqgWLGPj9NAFktjIJLe860mjc3v9BngRzLRcQnExaIdoNZB44gGz
lbkRZ2iNAL/ZiK9CRUBdhvGZCAgBPN0irs2/YHyDwqPzMnl13LYKyoNSQkII5LEI
dyNiu/NL/0WwSjv9E7e9qcmEOd2D+vUlyQL51neVk4nHAA5NuL4+HuO7BgWhU34T
S8yDtBEoJUeqj2bPYUXSSATcuROR2VG3I+9l1VUFzun1nrpYLzvXWMtN96wVvhEf
xd0xIBDi/y4lC9KAMyHhzXsikSR0QR65HxQ6c3XSroGqLtbtXpbSyPT408l9k0i7
HEs7LTliSqg96A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:49:09 2026 by rpki-client