Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
File: _yNu-MNnK1qw0si3J_fkUU6EV0s.mft (raw, json)
Hash identifier: TeQJhMAOjuZJWn+S+/3SQJlEdrfj9Af4djCa3kPzAlw=
Subject key identifier: 9B:64:20:0E:66:98:1B:2F:6F:FA:C0:60:C0:33:6B:5D:9D:FA:1C:EB
Authority key identifier: FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
Certificate issuer: /CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Certificate serial: 019D9B50FFABB4EEFA3A20124F8A5190DA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
Manifest number: D3
Signing time: Fri 17 Apr 2026 12:01:09 +0000
Manifest this update: Fri 17 Apr 2026 12:01:09 +0000
Manifest next update: Sat 18 Apr 2026 12:01:09 +0000
Files and hashes: 1: X_T0FWjs8sv99TO96Nigw_PWdoI.roa (hash: IF+H0gvY6TuEuAilrDvZ1qnXKE+yBwSYsjOx1dwn1C8=)
2: _yNu-MNnK1qw0si3J_fkUU6EV0s.crl (hash: HQTBmSM2Nrk7DiFeRf2rqU4L83zH4MEKN/w44jtcxw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:ff:ab:b4:ee:fa:3a:20:12:4f:8a:51:90:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff236ef8c3672b5ab0d2c8b727f7e4514e84574b
Validity
Not Before: Apr 17 12:01:09 2026 GMT
Not After : Apr 18 12:01:09 2026 GMT
Subject: CN=9b64200e66981b2f6ffac060c0336b5d9dfa1ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a6:aa:05:6a:eb:ca:9b:c9:e4:1d:21:e9:73:
da:e7:79:9f:63:f1:0a:72:fa:92:52:1f:46:65:5f:
d5:da:b7:53:b9:fa:ba:ba:7c:a7:e0:e2:76:02:75:
0d:18:e8:8f:eb:88:12:c3:db:de:ab:9b:c5:c6:73:
b9:6f:4b:d5:63:99:20:d7:5c:56:86:62:cf:37:70:
0e:65:93:c3:27:9a:10:ff:4c:55:ba:57:d9:85:87:
dc:cc:c8:b9:f0:8e:68:79:41:c0:d6:25:6b:6c:f7:
7a:90:ed:77:75:36:48:d1:74:93:92:10:a9:d2:a4:
fc:24:a4:ec:e6:56:4b:30:02:05:3d:d9:fd:b3:6e:
50:31:26:61:f6:ac:e7:92:de:9c:2d:75:ef:57:8e:
ff:be:a1:30:f7:03:3a:b7:c0:5c:e8:3d:16:9b:68:
5b:9f:b1:5c:47:cb:43:d6:21:05:a0:97:90:d3:df:
a7:42:54:01:bd:0e:5a:cb:6e:e2:1f:7f:c2:35:9a:
79:f0:a7:db:d5:a7:a2:2a:ea:a1:9b:af:08:60:91:
59:47:5a:2d:4a:51:44:fd:22:b3:f8:77:a4:23:6d:
15:7a:8a:06:b7:9f:fe:26:5d:a1:a8:78:f8:0d:07:
de:90:64:d2:6a:23:a7:19:04:90:c6:f4:c6:87:03:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:20:0E:66:98:1B:2F:6F:FA:C0:60:C0:33:6B:5D:9D:FA:1C:EB
X509v3 Authority Key Identifier:
keyid:FF:23:6E:F8:C3:67:2B:5A:B0:D2:C8:B7:27:F7:E4:51:4E:84:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yNu-MNnK1qw0si3J_fkUU6EV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bae647-82fb-4aa9-9029-23a056e1d2f1/1/_yNu-MNnK1qw0si3J_fkUU6EV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9f:24:bb:36:83:fb:c9:ae:12:48:ac:82:3e:c8:65:32:77:
f2:3b:bd:cf:b4:09:3c:14:5c:f0:7a:07:27:f2:65:3f:8e:57:
42:d6:32:d9:1a:64:f7:3f:99:dd:ca:44:e4:0d:11:80:39:b4:
47:20:9c:c9:46:de:8b:76:f4:1d:42:d5:ae:2f:5f:60:84:b4:
65:ea:1d:77:44:14:5a:93:2e:40:ef:b3:4d:c1:87:42:ba:02:
8a:1d:e3:1e:0e:78:c6:04:03:93:69:8e:8a:2d:73:3b:86:4a:
82:22:e3:d6:2b:50:57:a0:65:bd:b9:68:fb:43:f7:7d:1d:71:
59:08:94:b1:3d:96:46:ec:12:15:da:b6:98:9d:1b:5c:38:fd:
ff:de:47:ca:91:cd:fe:5f:87:b2:33:d9:bd:dd:72:5f:fb:26:
d3:d0:21:e2:1f:17:9e:ad:5a:79:a1:6f:d5:ed:40:8c:e9:44:
54:b8:a2:0d:f3:e3:51:d8:0e:01:c7:cf:8e:50:a1:08:41:2e:
ea:f2:46:38:07:c1:e7:cc:9c:5d:bd:61:86:b5:79:6f:77:b4:
8b:69:4f:84:72:c8:4e:c9:00:f2:e9:ac:ac:85:02:5e:da:4c:
e8:1b:78:34:62:0f:07:10:73:d5:b5:14:99:4f:88:dc:a4:c0:
f9:68:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:35:47 2026 by rpki-client