Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
File: y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft (raw, json)
Hash identifier: TFtFHmq/ZHhBHA1MFeLYYgvUXul9AU30FftZU3APnrY=
Subject key identifier: 96:F5:D8:4D:3B:7C:02:8F:89:AB:5D:A2:76:45:C7:89:19:E2:9B:5A
Authority key identifier: CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
Certificate issuer: /CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Certificate serial: 019D9BBED88747CDA23A2BA2DC5C8B79460F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:01:08 +0000
Manifest this update: Fri 17 Apr 2026 14:01:08 +0000
Manifest next update: Sat 18 Apr 2026 14:01:08 +0000
Files and hashes: 1: kRt9bUyJdFBB9Urf88wqGCyD9z8.roa (hash: ru+g8q6Q2p0jDg0nGr5M9c3LVV0Tl9BDqYju45TyK18=)
2: y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl (hash: DgnX9MJYgJVyYQVJo9vAQgub1+SPH/Gt9+k9CjMpdME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:d8:87:47:cd:a2:3a:2b:a2:dc:5c:8b:79:46:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd085027dd3d2b9012533adffc9305e5ff0a548
Validity
Not Before: Apr 17 14:01:08 2026 GMT
Not After : Apr 18 14:01:08 2026 GMT
Subject: CN=96f5d84d3b7c028f89ab5da27645c78919e29b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:06:6d:8c:6a:63:9a:27:ea:b3:95:cb:c7:
67:e7:bd:a0:67:21:15:e0:6a:bf:0f:26:16:0c:b1:
1d:00:8d:67:c6:52:f5:0f:8f:ae:36:e6:5e:b3:a0:
3a:b7:2a:0c:43:c4:94:62:3e:7b:69:cc:c2:f2:fa:
c1:0f:77:94:68:b5:72:1b:91:62:3a:4f:c1:59:c9:
13:eb:f6:68:49:73:56:e7:24:18:74:1f:3b:59:c1:
fb:47:7f:b4:77:bd:90:27:f8:92:31:44:cf:34:db:
36:49:d6:65:70:9b:0f:27:aa:1d:53:cf:8c:d2:f0:
02:47:6b:d6:e6:a0:79:dd:99:e9:69:32:54:05:dd:
6a:e8:16:a7:75:87:f4:00:0b:c2:f6:90:70:1c:50:
b2:af:6c:2e:f5:73:59:df:d0:48:25:f1:56:de:f5:
31:bc:9b:9f:0e:e0:ca:60:99:c0:7a:7d:e7:43:af:
7b:8a:57:ca:0d:03:f7:c6:09:79:1b:67:cd:b9:20:
33:65:4e:12:57:87:9e:b6:25:e6:a1:df:49:63:21:
f3:6a:e5:ea:88:b3:09:6b:1b:ac:50:33:0b:5a:28:
c0:db:03:21:33:f1:83:3d:95:87:38:48:e8:6d:28:
f6:8f:9f:a1:7e:56:f0:52:30:9e:bb:4d:39:c6:8d:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F5:D8:4D:3B:7C:02:8F:89:AB:5D:A2:76:45:C7:89:19:E2:9B:5A
X509v3 Authority Key Identifier:
keyid:CB:D0:85:02:7D:D3:D2:B9:01:25:33:AD:FF:C9:30:5E:5F:F0:A5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9CFAn3T0rkBJTOt_8kwXl_wpUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cc2083-f966-4e07-9207-79c410cb6458/1/y9CFAn3T0rkBJTOt_8kwXl_wpUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4d:83:35:de:e7:c9:c4:1d:d7:a5:48:6a:70:32:58:13:95:
25:8f:1a:51:e5:79:31:a5:f9:1f:ff:9f:92:68:d3:75:6e:5b:
69:e7:66:8e:57:c8:aa:e1:8e:f9:f6:e0:9d:f8:ec:58:3e:7c:
84:9c:0c:56:aa:19:12:bc:53:0a:23:e3:64:38:ef:9d:95:25:
df:d9:0b:01:67:26:c0:0c:68:9c:1f:51:31:80:3f:b3:d4:24:
8a:5a:ca:2d:71:e8:81:c3:80:09:ae:50:ee:31:41:09:1f:43:
f0:d3:a3:b9:78:76:ae:d0:d1:b2:a9:83:fa:16:d5:73:04:75:
ea:69:a5:05:34:9c:71:43:1b:ab:ab:1d:60:4f:4d:0f:09:53:
88:1e:8c:24:29:78:fc:4c:74:24:f0:5e:e2:b6:ba:ff:bf:97:
2e:c3:47:b3:d0:e6:56:27:0a:1a:3d:c8:e3:cd:28:ba:24:d8:
18:7e:dd:ce:7d:21:aa:59:c1:69:bb:39:9d:37:11:6c:95:dd:
bc:a2:cb:9e:78:cd:87:24:9c:85:bf:a5:85:85:7a:83:ca:f5:
5a:d9:87:cf:37:8a:29:b0:02:bb:b0:18:0e:40:62:d5:68:88:
e7:8c:7e:22:9e:d8:c3:22:89:c7:f2:76:fc:a2:63:9f:14:85:
4a:5b:e1:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvtiHR82iOiui3FyLeUYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDA4NTAyN2RkM2QyYjkwMTI1MzNhZGZmYzkzMDVlNWZm
MGE1NDgwHhcNMjYwNDE3MTQwMTA4WhcNMjYwNDE4MTQwMTA4WjAzMTEwLwYDVQQD
Eyg5NmY1ZDg0ZDNiN2MwMjhmODlhYjVkYTI3NjQ1Yzc4OTE5ZTI5YjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhYGbYxqY5on6rOVy8dn572gZyEV
4Gq/DyYWDLEdAI1nxlL1D4+uNuZes6A6tyoMQ8SUYj57aczC8vrBD3eUaLVyG5Fi
Ok/BWckT6/ZoSXNW5yQYdB87WcH7R3+0d72QJ/iSMUTPNNs2SdZlcJsPJ6odU8+M
0vACR2vW5qB53ZnpaTJUBd1q6BandYf0AAvC9pBwHFCyr2wu9XNZ39BIJfFW3vUx
vJufDuDKYJnAen3nQ697ilfKDQP3xgl5G2fNuSAzZU4SV4eetiXmod9JYyHzauXq
iLMJaxusUDMLWijA2wMhM/GDPZWHOEjobSj2j5+hflbwUjCeu005xo1y3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb12E07fAKPiatdonZFx4kZ4ptaMB8GA1UdIwQY
MBaAFMvQhQJ909K5ASUzrf/JMF5f8KVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDct
NzljNDEwY2I2NDU4LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYzIwODMtZjk2Ni00ZTA3LTkyMDctNzljNDEwY2I2NDU4
LzEveTlDRkFuM1QwcmtCSlRPdF84a3dYbF93cFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlU2DNd7n
ycQd16VIanAyWBOVJY8aUeV5MaX5H/+fkmjTdW5baedmjlfIquGO+fbgnfjsWD58
hJwMVqoZErxTCiPjZDjvnZUl39kLAWcmwAxonB9RMYA/s9QkilrKLXHogcOACa5Q
7jFBCR9D8NOjuXh2rtDRsqmD+hbVcwR16mmlBTSccUMbq6sdYE9NDwlTiB6MJCl4
/Ex0JPBe4ra6/7+XLsNHs9DmVicKGj3I480ouiTYGH7dzn0hqlnBabs5nTcRbJXd
vKLLnnjNhySchb+lhYV6g8r1WtmHzzeKKbACu7AYDkBi1WiI54x+Ip7YwyKJx/J2
/KJjnxSFSlvhGg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:55 2026 by rpki-client