Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
File: rYg6hugtDZEPz1n4_5978aZxSHA.mft (raw, json)
Hash identifier: q/EINmizgEL2v0cGRLoWolB8HK2rd+nKhxYQhE4NFLk=
Subject key identifier: 65:AE:FD:CD:BF:DD:70:AB:A6:C3:4A:E3:26:8D:43:28:53:A5:71:F5
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 019D9B883066D66841F4FD4FC8245CA9F6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
Manifest number: 0B12
Signing time: Fri 17 Apr 2026 13:01:26 +0000
Manifest this update: Fri 17 Apr 2026 13:01:26 +0000
Manifest next update: Sat 18 Apr 2026 13:01:26 +0000
Files and hashes: 1: pfwLznvoYJJqfRCh4o2zmPQohuE.roa (hash: AfFbs4eSFCbfML477ZQsZuVVVQdsY3hUFmoLGoZMXTY=)
2: rYg6hugtDZEPz1n4_5978aZxSHA.crl (hash: pR3KgQUWxu7UzOCWszC0p+31hsqVZMba2OtMF19Por8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:88:30:66:d6:68:41:f4:fd:4f:c8:24:5c:a9:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Apr 17 13:01:26 2026 GMT
Not After : Apr 18 13:01:26 2026 GMT
Subject: CN=65aefdcdbfdd70aba6c34ae3268d432853a571f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:59:60:a0:d3:7c:89:56:45:3e:12:a8:da:
66:b7:c5:49:62:be:a4:a7:33:27:51:53:92:50:d8:
58:f3:00:5f:3f:c5:d3:68:c1:92:a1:85:60:2e:56:
d7:77:7d:75:49:38:d7:a5:5e:ec:71:0b:90:a3:ab:
bf:b1:3e:83:95:4c:a8:45:7c:62:f9:dc:84:11:ea:
01:ae:36:50:f5:a4:c9:b6:d0:43:41:36:54:07:d4:
37:da:fc:8e:36:23:cc:7d:76:de:af:11:53:d8:9b:
cf:fe:28:e2:7c:82:eb:6e:6d:d5:69:b0:30:f0:6c:
d9:b3:d4:b4:83:72:48:9d:3b:c6:1b:5d:c4:70:77:
25:af:8b:3c:d3:32:86:57:d3:f7:d1:78:2c:22:1c:
3f:c9:41:f8:bd:b6:ca:ba:46:a0:12:e8:1c:ca:88:
ee:bf:f5:00:69:ea:dc:ba:52:35:f6:00:8c:6b:97:
6d:18:cd:22:bd:38:77:09:0e:ac:8e:5a:a8:82:f7:
f1:a0:33:34:2c:51:9d:98:f0:9e:ae:98:41:cb:2a:
57:6d:7d:f1:17:fa:91:8b:18:02:87:6c:1b:8a:cf:
27:75:e9:b7:81:72:fd:1c:0f:48:43:1d:9f:d7:7b:
8b:14:e6:dc:94:34:97:5f:ce:4b:b8:16:1a:56:e8:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:FD:CD:BF:DD:70:AB:A6:C3:4A:E3:26:8D:43:28:53:A5:71:F5
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ec:4c:7f:c6:62:94:e8:0e:f9:68:b2:ca:a7:f2:01:be:37:
2b:c0:52:c0:3c:db:36:a6:52:01:d9:1c:bb:1d:a0:8d:b6:7d:
11:3e:a1:24:bf:b0:41:66:3a:37:c1:5f:c9:6d:2f:98:26:4e:
3c:7d:b9:d3:5e:37:7c:f6:90:10:3a:c1:eb:6d:2f:4d:1a:c6:
a3:03:f4:4e:29:90:0d:b2:a2:18:a9:99:ed:ea:f9:7d:2c:22:
6a:53:00:0e:28:9b:2d:db:dc:e7:45:74:78:94:c9:e7:16:d2:
23:ff:33:af:82:21:13:e0:0d:8e:fa:77:80:1d:6b:af:cc:f8:
54:6d:5c:b9:a1:98:55:d6:21:b9:5b:d9:b3:fa:79:77:3a:ba:
5f:86:e0:b4:e6:eb:50:bd:2e:b8:91:19:85:cd:6b:2f:4e:af:
5a:65:70:f1:81:a5:05:f1:65:82:c7:83:a6:44:98:df:42:17:
9d:05:9b:65:c5:2b:8a:e6:fa:28:05:03:3d:25:cb:68:93:c0:
03:9a:86:45:cb:20:5b:c4:df:d3:70:13:5f:c1:47:22:94:a1:
00:5e:a4:bf:4f:ca:6f:62:43:95:f4:01:96:83:5f:37:31:2e:
c9:47:e1:c6:da:b6:8f:56:b2:a5:c3:28:d1:5d:36:10:03:98:
3e:82:44:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2biDBm1mhB9P1PyCRcqfanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkODgzYTg2ZTgyZDBkOTEwZmNmNTlmOGZmOWY3YmYxYTY3
MTQ4NzAwHhcNMjYwNDE3MTMwMTI2WhcNMjYwNDE4MTMwMTI2WjAzMTEwLwYDVQQD
Eyg2NWFlZmRjZGJmZGQ3MGFiYTZjMzRhZTMyNjhkNDMyODUzYTU3MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs19ZYKDTfIlWRT4SqNpmt8VJYr6k
pzMnUVOSUNhY8wBfP8XTaMGSoYVgLlbXd311STjXpV7scQuQo6u/sT6DlUyoRXxi
+dyEEeoBrjZQ9aTJttBDQTZUB9Q32vyONiPMfXberxFT2JvP/ijifILrbm3VabAw
8GzZs9S0g3JInTvGG13EcHclr4s80zKGV9P30XgsIhw/yUH4vbbKukagEugcyoju
v/UAaerculI19gCMa5dtGM0ivTh3CQ6sjlqogvfxoDM0LFGdmPCerphByypXbX3x
F/qRixgCh2wbis8ndem3gXL9HA9IQx2f13uLFObclDSXX85LuBYaVugB0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWu/c2/3XCrpsNK4yaNQyhTpXH1MB8GA1UdIwQY
MBaAFK2IOoboLQ2RD89Z+P+fe/GmcUhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTIt
YTU2YmYwY2Y0Y2JlLzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni83YjA1NmQtMDlmNy00ZjEyLWIxYTItYTU2YmYwY2Y0Y2Jl
LzEvcllnNmh1Z3REWkVQejFuNF81OTc4YVp4U0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuxMf8Zi
lOgO+WiyyqfyAb43K8BSwDzbNqZSAdkcux2gjbZ9ET6hJL+wQWY6N8FfyW0vmCZO
PH250143fPaQEDrB620vTRrGowP0TimQDbKiGKmZ7er5fSwialMADiibLdvc50V0
eJTJ5xbSI/8zr4IhE+ANjvp3gB1rr8z4VG1cuaGYVdYhuVvZs/p5dzq6X4bgtObr
UL0uuJEZhc1rL06vWmVw8YGlBfFlgseDpkSY30IXnQWbZcUriub6KAUDPSXLaJPA
A5qGRcsgW8Tf03ATX8FHIpShAF6kv0/Kb2JDlfQBloNfNzEuyUfhxtq2j1aypcMo
0V02EAOYPoJEnA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:07 2026 by rpki-client