Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
File: y4HR86wUr1DcBmV0T5B2t_rbH5s.mft (raw, json)
Hash identifier: BgGYeINSddJsC1ZnuH9WVoaA+UvnPVpbqLhYSg7qmNs=
Subject key identifier: C3:C4:D8:2D:18:0D:C4:A8:5F:28:06:B8:4C:DE:78:C4:6C:BC:26:B7
Authority key identifier: CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
Certificate issuer: /CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Certificate serial: 019D9BF5CFA69060188C13429F581F3A915D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
Manifest number: 0731
Signing time: Fri 17 Apr 2026 15:01:11 +0000
Manifest this update: Fri 17 Apr 2026 15:01:11 +0000
Manifest next update: Sat 18 Apr 2026 15:01:11 +0000
Files and hashes: 1: GxNglowBB-qM4SyLCUpB8DxSym4.roa (hash: cXQ7oNvmgTnLy87CiQWasUFcfBCcYezCe1uKaHJSwpY=)
2: y4HR86wUr1DcBmV0T5B2t_rbH5s.crl (hash: 1cBkiEiLSWbVP8l5jZar+bj3mw9d2kqltjgTJvxNvM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:cf:a6:90:60:18:8c:13:42:9f:58:1f:3a:91:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb81d1f3ac14af50dc0665744f9076b7fadb1f9b
Validity
Not Before: Apr 17 15:01:11 2026 GMT
Not After : Apr 18 15:01:11 2026 GMT
Subject: CN=c3c4d82d180dc4a85f2806b84cde78c46cbc26b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:ab:fc:c5:a5:3f:e7:5a:cd:8b:4c:a4:41:
5f:b1:53:37:56:28:f3:86:bb:1d:14:78:fd:e1:b9:
6c:d6:21:a8:14:4e:bc:6f:2b:1e:45:49:fa:b6:4c:
3f:28:4a:52:26:5d:b1:6e:8e:fd:2f:42:12:bb:5c:
c9:8d:97:a7:ac:be:bb:bf:6c:48:24:f0:ea:bd:e7:
a0:97:07:2c:0c:21:1f:7a:59:c7:a8:a3:7e:70:f5:
0d:2f:46:16:23:f2:6a:5c:40:67:92:57:32:c9:c9:
7f:ad:4b:b3:09:61:97:5a:2d:82:a0:4f:e5:e8:16:
a7:eb:83:29:fb:c8:98:71:1e:32:06:8d:c8:9a:f3:
ed:64:73:ce:27:ec:69:c6:fc:15:cb:2e:0a:90:8b:
10:38:ce:42:e4:45:61:22:fe:3c:88:40:29:6f:03:
fb:f7:f1:fe:fb:cf:19:0b:00:6d:0f:3e:7e:f6:f0:
c1:fe:5d:86:30:e2:83:e6:ce:a4:3e:32:8c:d5:78:
99:96:e4:74:0c:11:90:59:78:97:8c:b6:51:67:de:
08:6b:26:d7:d2:1b:31:a5:60:72:3c:05:ae:0d:bc:
dd:de:fc:5f:2b:b7:65:4c:13:a3:44:d8:7e:3b:c7:
e8:d7:58:74:8d:b6:b4:e9:23:45:4c:3d:ac:dc:ac:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C4:D8:2D:18:0D:C4:A8:5F:28:06:B8:4C:DE:78:C4:6C:BC:26:B7
X509v3 Authority Key Identifier:
keyid:CB:81:D1:F3:AC:14:AF:50:DC:06:65:74:4F:90:76:B7:FA:DB:1F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4HR86wUr1DcBmV0T5B2t_rbH5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f842c1-9a96-44f1-a36f-b1081750ce15/1/y4HR86wUr1DcBmV0T5B2t_rbH5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a0:56:c0:ec:f1:7b:1f:ce:52:d6:ee:d9:c8:3a:20:30:f4:
d2:bc:ca:63:be:69:80:2a:12:67:8f:9f:e6:ff:a5:86:a3:c6:
fc:34:36:a0:81:ca:bb:44:84:27:a5:01:3e:1e:fe:be:9d:fb:
e9:b9:0f:ee:3e:0a:61:f0:ce:0c:8e:e1:81:47:38:bb:e8:67:
67:24:98:fc:8c:24:f1:ac:ff:95:d5:e2:d1:2a:34:36:fe:67:
3c:83:26:c2:a3:68:f3:23:10:2e:1d:c0:e0:61:0e:3a:b1:1e:
bf:16:5d:c7:f1:15:d7:db:44:ec:92:ed:1b:bc:f1:8f:b3:1d:
1a:c3:c2:ee:a3:ec:07:1a:59:e5:62:10:36:8e:30:bb:17:ef:
48:a8:f8:77:27:ab:b7:07:1e:59:29:a1:94:7f:84:99:56:dd:
5b:81:92:b3:34:4d:b2:29:ea:4a:d2:c5:8c:71:bf:70:3a:bd:
3a:49:25:b7:62:d0:df:2d:12:76:e8:f5:5b:49:ae:b7:2e:ae:
73:53:eb:82:53:92:91:c7:bb:54:33:8b:c8:8b:c2:54:a6:2d:
17:cd:66:c7:59:1f:72:c0:36:10:d5:f0:c0:d5:c9:bf:5d:9e:
5e:99:53:cd:f3:3f:35:64:85:51:13:10:4e:5f:90:e0:90:6d:
0c:57:c9:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2b9c+mkGAYjBNCn1gfOpFdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiODFkMWYzYWMxNGFmNTBkYzA2NjU3NDRmOTA3NmI3ZmFk
YjFmOWIwHhcNMjYwNDE3MTUwMTExWhcNMjYwNDE4MTUwMTExWjAzMTEwLwYDVQQD
EyhjM2M0ZDgyZDE4MGRjNGE4NWYyODA2Yjg0Y2RlNzhjNDZjYmMyNmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qSr/MWlP+dazYtMpEFfsVM3Vijz
hrsdFHj94bls1iGoFE68byseRUn6tkw/KEpSJl2xbo79L0ISu1zJjZenrL67v2xI
JPDqveeglwcsDCEfelnHqKN+cPUNL0YWI/JqXEBnklcyycl/rUuzCWGXWi2CoE/l
6Ban64Mp+8iYcR4yBo3ImvPtZHPOJ+xpxvwVyy4KkIsQOM5C5EVhIv48iEApbwP7
9/H++88ZCwBtDz5+9vDB/l2GMOKD5s6kPjKM1XiZluR0DBGQWXiXjLZRZ94IaybX
0hsxpWByPAWuDbzd3vxfK7dlTBOjRNh+O8fo11h0jba06SNFTD2s3KzjDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPE2C0YDcSoXygGuEzeeMRsvCa3MB8GA1UdIwQY
MBaAFMuB0fOsFK9Q3AZldE+Qdrf62x+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYt
YjEwODE3NTBjZTE1LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9mODQyYzEtOWE5Ni00NGYxLWEzNmYtYjEwODE3NTBjZTE1
LzEveTRIUjg2d1VyMURjQm1WMFQ1QjJ0X3JiSDVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKBWwOzx
ex/OUtbu2cg6IDD00rzKY75pgCoSZ4+f5v+lhqPG/DQ2oIHKu0SEJ6UBPh7+vp37
6bkP7j4KYfDODI7hgUc4u+hnZySY/Iwk8az/ldXi0So0Nv5nPIMmwqNo8yMQLh3A
4GEOOrEevxZdx/EV19tE7JLtG7zxj7MdGsPC7qPsBxpZ5WIQNo4wuxfvSKj4dyer
twceWSmhlH+EmVbdW4GSszRNsinqStLFjHG/cDq9Okklt2LQ3y0Sduj1W0muty6u
c1PrglOSkce7VDOLyIvCVKYtF81mx1kfcsA2ENXwwNXJv12eXplTzfM/NWSFURMQ
Tl+Q4JBtDFfJuQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:30:57 2026 by rpki-client