Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
File: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json)
Hash identifier: H8BFwrZDg7FAtAQ5/PHWLqZmhVx9a8iPd84qTthjHc8=
Subject key identifier: 32:91:3A:FE:8A:23:1E:4E:7F:22:5E:78:C4:7A:E7:0D:DA:60:EA:40
Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
Certificate issuer: /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Certificate serial: 019D9AABB3331104121005B7A613633F59F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
Manifest number: 1651
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: ZQDRmVSAS-VQjlQwPz6YndLHMAk.roa (hash: HlwMeTdyXew+ZhiKaF8HUzGdDR+H+dDeb0Vxy+YC2Vo=)
2: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: ofPJ9R0BWHRjCnWVuwBUzWk46V6fn1t8kzVVZ1xeSXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:b3:33:11:04:12:10:05:b7:a6:13:63:3f:59:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=32913afe8a231e4e7f225e78c47ae70dda60ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:4c:8b:a6:1c:0e:72:8b:30:96:75:d2:46:
30:26:f0:db:e6:bc:39:84:4c:af:59:fc:de:d5:06:
b8:77:aa:fa:11:42:7a:a7:76:1d:08:af:c6:5e:9f:
2b:17:3c:dd:45:b7:9e:2d:38:8c:ff:4d:b3:ef:b1:
12:58:04:e0:66:56:b3:16:ca:76:ed:0e:f9:0f:9e:
7b:f8:b4:1a:4b:6b:a1:82:e5:af:30:35:ad:66:ff:
1b:dc:52:f0:3b:dc:75:d8:33:f7:8e:9b:c0:cc:ba:
dc:95:ac:c0:e7:6c:4e:82:55:88:63:30:c7:2b:d5:
8a:c4:e8:a7:4e:5f:77:d0:68:7e:50:4e:32:76:27:
83:7e:b5:a4:c9:38:56:78:c5:bd:59:ad:1b:95:92:
59:16:a6:cb:1c:30:4a:cc:55:7c:71:08:e2:5d:28:
20:b9:2f:31:c1:44:ef:cb:d2:93:8a:4a:47:df:92:
ef:c2:fe:1d:4f:72:df:b2:53:df:f5:47:cb:f7:ba:
0f:bb:47:ea:66:ff:b8:bb:d5:a6:fe:08:72:5d:2b:
f4:7f:23:07:20:43:d2:4a:4f:bd:f1:0f:4d:12:f8:
27:54:98:bc:d7:4b:ad:84:1e:2d:ff:a5:96:27:ee:
88:6a:ae:e3:f9:af:05:ec:9b:4e:eb:d2:30:ba:10:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:91:3A:FE:8A:23:1E:4E:7F:22:5E:78:C4:7A:E7:0D:DA:60:EA:40
X509v3 Authority Key Identifier:
keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a9:62:01:89:2e:cf:7f:ad:9a:c2:8c:c8:82:1a:3f:b0:f5:
28:b6:f3:82:88:d1:55:61:15:fb:27:77:08:78:90:d7:4a:bf:
b5:0f:b5:0c:f3:16:a4:4c:50:0d:ba:0a:07:3f:05:d3:95:b2:
33:53:37:92:ae:97:1c:f2:29:34:ca:fd:ce:45:f2:60:ea:fc:
af:c1:aa:f0:e2:51:f4:91:a4:53:f6:8c:76:37:91:e4:c7:86:
53:34:9d:d2:e8:08:44:b6:04:df:68:a1:1c:2c:29:81:c2:0f:
70:46:87:90:96:4c:27:39:1d:d6:a7:b4:27:35:45:96:87:f1:
74:d9:45:16:4c:90:d1:c5:5c:78:ab:5c:aa:8f:87:33:0c:6b:
d5:63:e7:6c:4a:73:09:38:ce:53:45:77:4e:20:31:f4:e3:31:
29:67:35:fd:c7:17:84:56:1e:52:db:4d:5d:f5:30:97:64:c3:
96:34:9e:f2:90:ba:92:be:97:6e:97:b0:e7:34:2f:54:ba:4d:
17:00:a6:b3:e7:36:1a:3a:c7:c2:77:20:b0:c0:4d:af:07:da:
5d:98:9a:b5:24:cd:b8:df:dd:84:1f:3e:02:39:e7:83:12:99:
10:8d:52:ca:d7:d6:9f:f4:e2:a2:95:56:cb:e7:5c:07:1b:2b:
e2:b5:43:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq7MzEQQSEAW3phNjP1n3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOGUwZTdlODY3NzViNDE1ZDNkNTc4MGNlNGNmZWMwYzg1
OTE4OWMwHhcNMjYwNDE3MDkwMDM2WhcNMjYwNDE4MDkwMDM2WjAzMTEwLwYDVQQD
EygzMjkxM2FmZThhMjMxZTRlN2YyMjVlNzhjNDdhZTcwZGRhNjBlYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw9Mi6YcDnKLMJZ10kYwJvDb5rw5
hEyvWfze1Qa4d6r6EUJ6p3YdCK/GXp8rFzzdRbeeLTiM/02z77ESWATgZlazFsp2
7Q75D557+LQaS2uhguWvMDWtZv8b3FLwO9x12DP3jpvAzLrclazA52xOglWIYzDH
K9WKxOinTl930Gh+UE4ydieDfrWkyThWeMW9Wa0blZJZFqbLHDBKzFV8cQjiXSgg
uS8xwUTvy9KTikpH35Lvwv4dT3LfslPf9UfL97oPu0fqZv+4u9Wm/ghyXSv0fyMH
IEPSSk+98Q9NEvgnVJi810uthB4t/6WWJ+6Iaq7j+a8F7JtO69IwuhD3wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKROv6KIx5OfyJeeMR65w3aYOpAMB8GA1UdIwQY
MBaAFG2ODn6Gd1tBXT1XgM5M/sDIWRicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wNTYyMzUtZGYzNi00ODcwLTg3NDYt
YWU1ZjRjMTJkZTc5LzEvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wNTYyMzUtZGYzNi00ODcwLTg3NDYtYWU1ZjRjMTJkZTc5
LzEvYlk0T2ZvWjNXMEZkUFZlQXprei13TWhaR0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy6liAYku
z3+tmsKMyIIaP7D1KLbzgojRVWEV+yd3CHiQ10q/tQ+1DPMWpExQDboKBz8F05Wy
M1M3kq6XHPIpNMr9zkXyYOr8r8Gq8OJR9JGkU/aMdjeR5MeGUzSd0ugIRLYE32ih
HCwpgcIPcEaHkJZMJzkd1qe0JzVFlofxdNlFFkyQ0cVceKtcqo+HMwxr1WPnbEpz
CTjOU0V3TiAx9OMxKWc1/ccXhFYeUttNXfUwl2TDljSe8pC6kr6Xbpew5zQvVLpN
FwCms+c2GjrHwncgsMBNrwfaXZiatSTNuN/dhB8+AjnngxKZEI1SytfWn/TiopVW
y+dcBxsr4rVDYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:05 2026 by rpki-client