Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: GZ/7Nvm9sEBF4vRA+p8jdPWdm4kLu38tY4ryHUVa81s=
Subject key identifier: 75:64:EB:3E:1E:4F:46:B0:20:4D:E7:9E:91:84:B8:7B:E8:75:83:47
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 019D98F4782B238A068F9E096A31FFE913E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 1246
Signing time: Fri 17 Apr 2026 01:00:51 +0000
Manifest this update: Fri 17 Apr 2026 01:00:51 +0000
Manifest next update: Sat 18 Apr 2026 01:00:51 +0000
Files and hashes: 1: RfdbavmQcT8mIQaqZ9oKJHaDxao.roa (hash: Nx9pU5kvqjdGo4y6nmuhAb86Wl01qIbkTY3uv0AJ+IU=)
2: qnYWJnu7gDjyMxkFI7kZdjJxDKg.asa (hash: zefrDIFHWwKYZMYE/LvGlSTFwHDJ72INmt0VL/GYS4E=)
3: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: 9L8GFAIfNX7VebBEzJLHultIwRAbawY56yiDNmnHOiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:78:2b:23:8a:06:8f:9e:09:6a:31:ff:e9:13:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Apr 17 01:00:51 2026 GMT
Not After : Apr 18 01:00:51 2026 GMT
Subject: CN=7564eb3e1e4f46b0204de79e9184b87be8758347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:ff:71:18:b7:bb:cd:e3:56:b8:90:a9:00:
7a:c8:ec:4a:df:68:db:3c:a2:f7:a3:bb:8c:52:d5:
71:49:bb:88:37:67:c7:95:bf:e5:0b:01:d8:78:41:
30:31:74:69:38:6c:a6:52:80:1f:f7:1a:b6:0d:98:
3a:7c:7d:b0:16:f9:0a:32:b7:4a:b8:c7:56:13:6c:
36:e1:27:95:83:74:06:35:44:a4:5d:27:73:68:a9:
bd:34:b9:a7:89:9f:5e:c4:3e:6e:18:94:24:6f:ab:
01:48:54:b2:77:a1:2a:eb:5f:77:2f:0b:e4:34:70:
98:a0:73:81:53:87:11:7f:c8:3e:3c:ff:02:2a:da:
46:ae:44:0e:89:fc:27:0f:13:d1:a6:b6:4a:34:70:
35:78:d6:24:f6:19:44:09:42:c6:1d:6d:86:cd:65:
7f:99:44:14:88:79:c7:16:16:b4:d5:11:ff:f4:de:
c0:0e:fe:a6:d6:9e:79:0e:d8:6c:01:39:8a:2e:9f:
e7:52:16:2b:c0:bc:80:1b:7c:47:1e:68:e2:69:cf:
56:3c:36:6d:ed:9e:40:1c:aa:43:6c:2c:f0:6a:f6:
3a:9c:8d:44:84:01:68:64:d0:e4:d0:bc:0b:6f:7c:
6e:6b:1e:be:b7:36:c6:be:78:40:2a:8a:6e:eb:06:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:64:EB:3E:1E:4F:46:B0:20:4D:E7:9E:91:84:B8:7B:E8:75:83:47
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:52:2c:a5:89:d5:21:cb:27:f5:14:a6:1a:e8:85:85:1f:50:
d0:24:ee:23:ab:30:5b:ed:f5:cc:28:81:57:b7:44:7f:f4:bc:
86:ea:c9:8f:8e:f6:4b:61:29:bb:ca:d4:ad:07:4e:ea:ca:c6:
22:16:66:bf:24:21:94:98:57:23:a3:2a:1a:38:5b:7d:43:0b:
36:e7:cb:1a:29:f9:88:8a:62:51:67:77:4b:b6:f4:41:86:85:
4b:13:47:55:5f:e4:73:c4:87:f7:62:52:c8:dc:95:db:df:59:
97:0a:62:93:5b:19:45:aa:20:b4:da:6b:67:9f:10:00:05:f3:
11:80:71:f0:f4:bf:99:fd:00:fa:ff:a1:2f:31:ab:ed:bb:8d:
a9:a8:e6:bd:98:dd:12:f8:fa:17:4f:e5:89:2e:76:ba:c6:78:
93:39:6f:cf:34:7b:4c:81:21:33:70:22:a8:ce:38:21:2b:b2:
5a:c5:ae:24:cd:d8:8d:9f:57:a9:95:73:90:bb:eb:f2:70:4b:
c0:a5:74:de:7a:f6:1b:cf:ca:cd:c5:c5:05:dc:5f:98:0c:3e:
a5:c3:3f:1e:cd:8c:ed:45:0b:9d:e4:d7:49:ca:8d:61:d3:ee:
3f:73:14:17:60:85:18:be:1c:86:d7:cb:6a:b6:7c:d2:b1:03:
f1:8c:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:05:02 2026 by rpki-client