Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
File: y1bGreHiphfnx3VXuV8GlU2TkLo.mft (raw, json)
Hash identifier: 8DfsK0+MYNubm8QBY4HgJls8HmF4l2EIRF3Be0OHAOw=
Subject key identifier: B3:24:E8:8B:B5:DC:CF:88:A9:B6:65:A8:E6:5E:F6:09:7F:8E:2E:AB
Authority key identifier: CB:56:C6:AD:E1:E2:A6:17:E7:C7:75:57:B9:5F:06:95:4D:93:90:BA
Certificate issuer: /CN=cb56c6ade1e2a617e7c77557b95f06954d9390ba
Certificate serial: 019D9B51169C92F215415EAA3A8E4898ED0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
Manifest number: D0
Signing time: Fri 17 Apr 2026 12:01:15 +0000
Manifest this update: Fri 17 Apr 2026 12:01:15 +0000
Manifest next update: Sat 18 Apr 2026 12:01:15 +0000
Files and hashes: 1: 1-lY38nhDVvu5ZSrT6Z3R4RmIIVc.roa (hash: O4GfhlXh/C7NHP0rQL1wBLfHvkzMi75adQIiTOFpZhk=)
2: y1bGreHiphfnx3VXuV8GlU2TkLo.crl (hash: C02t2IKIXYNQV23jE+X34Ezf+sEWvJE65z7Um2irRYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:16:9c:92:f2:15:41:5e:aa:3a:8e:48:98:ed:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb56c6ade1e2a617e7c77557b95f06954d9390ba
Validity
Not Before: Apr 17 12:01:15 2026 GMT
Not After : Apr 18 12:01:15 2026 GMT
Subject: CN=b324e88bb5dccf88a9b665a8e65ef6097f8e2eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:e6:f6:42:6a:85:7c:38:5f:f2:1b:ad:e4:
39:a5:b9:02:bf:02:5f:16:3f:00:34:64:0b:26:c2:
32:88:70:c1:8d:e5:cc:24:b8:8f:22:fe:51:60:b4:
1a:8b:59:37:e3:9e:50:be:2f:54:dd:47:b9:04:3d:
42:6d:7b:8d:70:f9:cd:6a:61:9c:3a:fd:76:20:be:
7d:2b:93:fc:62:08:a0:4a:aa:5f:ef:fa:a5:50:d9:
48:34:0a:86:8e:0f:af:ec:3a:6d:9a:e7:92:60:b4:
01:3c:7c:75:fa:4c:55:f0:4e:2b:bc:04:45:64:42:
83:a0:39:c6:20:8d:80:e6:59:2d:33:ed:75:8e:67:
71:98:d2:75:78:9b:f9:f2:0c:e2:ea:55:ac:a7:50:
49:04:1d:20:fb:54:56:34:ed:a7:d1:a7:55:df:1b:
cf:47:16:eb:4a:a0:64:08:f7:8f:d5:5d:2e:18:66:
12:cc:0d:ec:e7:78:3a:d5:17:db:b4:2b:5b:2d:c0:
9d:38:f3:c0:76:c1:61:9e:30:37:c7:50:a5:33:b3:
59:7c:fb:5e:d1:ae:f8:12:b8:b5:3a:b4:23:5c:19:
5a:0f:66:b0:e0:a3:93:27:dc:45:ae:ac:51:ae:2a:
c5:37:17:aa:d3:9d:61:7e:a5:6d:1b:98:c6:dc:a8:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:24:E8:8B:B5:DC:CF:88:A9:B6:65:A8:E6:5E:F6:09:7F:8E:2E:AB
X509v3 Authority Key Identifier:
keyid:CB:56:C6:AD:E1:E2:A6:17:E7:C7:75:57:B9:5F:06:95:4D:93:90:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1bGreHiphfnx3VXuV8GlU2TkLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f3e494-ea53-413c-ae14-a1f859517c1b/1/y1bGreHiphfnx3VXuV8GlU2TkLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6e:96:61:1b:8c:24:22:a3:9e:a2:cd:e9:cc:d3:01:46:10:
8b:46:e6:71:00:b6:b7:cf:ae:c6:c5:a3:b4:58:8b:eb:1d:2a:
8d:95:ca:24:8a:c5:73:04:70:5c:10:23:ae:02:5c:80:5b:0b:
97:2d:d9:2e:3a:a1:e0:1c:c2:53:c1:f8:38:29:6b:dd:cc:de:
66:1e:fb:a6:ac:29:77:b9:2a:c5:b8:8f:26:5f:fc:1c:d6:10:
6b:3f:5b:d8:b2:45:ae:7b:61:fc:28:bc:63:b8:7f:a1:31:26:
30:d5:d0:6f:26:7d:74:8a:9f:55:0a:71:3f:27:3c:3a:fa:2f:
bc:f4:b9:c2:72:a7:74:91:9b:a1:24:da:5b:7d:4c:bd:33:d0:
43:d4:ae:c0:05:f0:73:a9:3a:24:52:da:c0:2e:af:9a:db:50:
3c:b6:ac:51:ca:f4:16:57:06:00:c8:95:16:76:ef:7f:40:e5:
6d:d7:c0:97:29:e0:d9:63:8e:07:96:5c:48:d0:95:0f:ce:66:
d4:89:f1:1e:53:3d:51:94:a9:2c:e6:5f:67:50:77:ee:46:e4:
4c:fd:2d:bd:fb:5a:ce:ef:fd:fd:5f:d5:72:4d:20:f0:b7:e4:
94:b2:e6:0d:4b:58:d2:b5:f8:4e:b5:ef:88:55:58:a8:50:59:
64:ba:a0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bURackvIVQV6qOo5ImO0PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNTZjNmFkZTFlMmE2MTdlN2M3NzU1N2I5NWYwNjk1NGQ5
MzkwYmEwHhcNMjYwNDE3MTIwMTE1WhcNMjYwNDE4MTIwMTE1WjAzMTEwLwYDVQQD
EyhiMzI0ZTg4YmI1ZGNjZjg4YTliNjY1YThlNjVlZjYwOTdmOGUyZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTfm9kJqhXw4X/IbreQ5pbkCvwJf
Fj8ANGQLJsIyiHDBjeXMJLiPIv5RYLQai1k3455Qvi9U3Ue5BD1CbXuNcPnNamGc
Ov12IL59K5P8YgigSqpf7/qlUNlINAqGjg+v7DptmueSYLQBPHx1+kxV8E4rvARF
ZEKDoDnGII2A5lktM+11jmdxmNJ1eJv58gzi6lWsp1BJBB0g+1RWNO2n0adV3xvP
RxbrSqBkCPeP1V0uGGYSzA3s53g61RfbtCtbLcCdOPPAdsFhnjA3x1ClM7NZfPte
0a74Eri1OrQjXBlaD2aw4KOTJ9xFrqxRrirFNxeq051hfqVtG5jG3KgXJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMk6Iu13M+IqbZlqOZe9gl/ji6rMB8GA1UdIwQY
MBaAFMtWxq3h4qYX58d1V7lfBpVNk5C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTFiR3JlSGlwaGZueDNWWHVWOEdsVTJUa0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mM2U0OTQtZWE1My00MTNjLWFlMTQt
YTFmODU5NTE3YzFiLzEveTFiR3JlSGlwaGZueDNWWHVWOEdsVTJUa0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mM2U0OTQtZWE1My00MTNjLWFlMTQtYTFmODU5NTE3YzFi
LzEveTFiR3JlSGlwaGZueDNWWHVWOEdsVTJUa0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT26WYRuM
JCKjnqLN6czTAUYQi0bmcQC2t8+uxsWjtFiL6x0qjZXKJIrFcwRwXBAjrgJcgFsL
ly3ZLjqh4BzCU8H4OClr3czeZh77pqwpd7kqxbiPJl/8HNYQaz9b2LJFrnth/Ci8
Y7h/oTEmMNXQbyZ9dIqfVQpxPyc8OvovvPS5wnKndJGboSTaW31MvTPQQ9SuwAXw
c6k6JFLawC6vmttQPLasUcr0FlcGAMiVFnbvf0DlbdfAlyng2WOOB5ZcSNCVD85m
1InxHlM9UZSpLOZfZ1B37kbkTP0tvftazu/9/V/Vck0g8LfklLLmDUtY0rX4TrXv
iFVYqFBZZLqgjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:07 2026 by rpki-client