Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
File: y0JLQMH4QIT41A8rncvh4fkWrz4.mft (raw, json)
Hash identifier: Zd5UeKPKXK0bFNvAWGbz4Jhoms7XVI+zalYQpB+BAok=
Subject key identifier: EF:F9:8D:B0:22:3A:77:69:01:28:F2:68:CA:3E:94:63:1E:DC:12:00
Authority key identifier: CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
Certificate issuer: /CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Certificate serial: 019D9818EBC032364C9F11EDD054185A5B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
Manifest number: 09F9
Signing time: Thu 16 Apr 2026 21:01:03 +0000
Manifest this update: Thu 16 Apr 2026 21:01:03 +0000
Manifest next update: Fri 17 Apr 2026 21:01:03 +0000
Files and hashes: 1: aZ3Yoe0ZQdIXylk1FrtEwAkUD8k.roa (hash: q1ah2hweQU+cFtZrhhXan7MxnsmHv01bYbCdDje0NNY=)
2: y0JLQMH4QIT41A8rncvh4fkWrz4.crl (hash: 2aEVTzzpkzeKktM6zjwstFlyH55b7/weuWKvVOM9pKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:eb:c0:32:36:4c:9f:11:ed:d0:54:18:5a:5b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb424b40c1f84084f8d40f2b9dcbe1e1f916af3e
Validity
Not Before: Apr 16 21:01:03 2026 GMT
Not After : Apr 17 21:01:03 2026 GMT
Subject: CN=eff98db0223a77690128f268ca3e94631edc1200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:c6:e7:75:2d:5d:2a:87:dd:c3:a8:20:60:
e9:14:33:ae:99:04:f0:cd:96:7e:be:b8:3c:bd:dd:
e7:a9:5f:8e:69:b3:21:11:b5:5b:4b:41:c9:25:17:
f6:a3:bc:1f:b1:06:65:d8:f8:8a:ee:cc:18:46:15:
2b:36:01:84:e1:ef:c4:2f:e9:5c:f4:0f:41:15:f8:
7b:84:51:82:50:e3:19:c7:43:65:01:77:2b:ee:13:
47:bb:65:9c:06:c0:34:e4:8d:d2:66:49:b5:b6:ed:
ed:ff:9a:72:55:aa:7f:d5:1f:55:ac:d0:d4:dd:e9:
e4:4e:ae:d5:82:63:fb:ba:27:75:02:dc:f6:9b:44:
71:ef:0a:5f:54:8b:19:03:e1:b7:61:a7:03:d2:24:
39:2e:c2:e1:ba:ea:4c:bf:dd:88:80:af:16:1a:45:
05:82:84:d4:91:79:96:7f:69:2d:73:7a:10:78:b5:
e9:92:b6:21:13:46:75:a0:28:35:87:7d:5b:e7:53:
6f:56:d0:7c:53:df:f5:b2:0e:49:67:81:bb:43:0d:
94:77:86:ea:e5:76:b1:25:71:54:36:2f:25:b5:7e:
34:a9:10:82:70:c3:e4:40:9b:53:df:4e:b3:b6:9a:
b6:bd:b0:fd:12:9e:8d:fb:28:1d:01:59:f3:58:ff:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:8D:B0:22:3A:77:69:01:28:F2:68:CA:3E:94:63:1E:DC:12:00
X509v3 Authority Key Identifier:
keyid:CB:42:4B:40:C1:F8:40:84:F8:D4:0F:2B:9D:CB:E1:E1:F9:16:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0JLQMH4QIT41A8rncvh4fkWrz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/51bfd9-7ffb-4159-9ed5-3a5fecacd49a/1/y0JLQMH4QIT41A8rncvh4fkWrz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:47:99:1a:5d:e0:22:33:66:38:63:98:f9:28:88:60:c4:63:
6f:c9:1d:63:94:d9:a8:47:f7:91:2a:93:5e:86:1b:1e:19:67:
5c:b6:b6:17:6d:81:40:73:73:76:fc:02:dd:02:a6:61:90:e8:
e9:45:37:3d:a1:c3:a0:ac:37:1f:30:b9:01:fc:f5:16:cd:ad:
6e:93:a4:c1:ea:60:b7:1b:51:67:78:e6:2b:a6:5e:60:15:8f:
de:a1:75:cb:97:90:0a:a1:4c:85:42:6e:7a:ca:46:2d:30:a2:
21:76:fc:d3:3e:f0:26:58:85:1c:f2:c6:ca:ef:78:ce:ad:2b:
71:3b:7c:00:6a:61:45:48:31:59:a1:75:d5:e3:24:c7:1b:e8:
47:7d:1d:77:24:23:93:87:d0:4b:45:86:a6:8e:43:48:69:39:
17:2a:30:d6:d0:64:3f:a5:98:2a:d8:81:18:7f:33:62:24:40:
ed:21:4d:87:ad:97:c6:38:7f:4e:fe:52:67:5b:a5:6d:9c:8b:
91:47:e2:7b:b8:67:07:51:0f:55:f2:95:0d:fa:4f:7c:e5:f4:
96:97:69:05:f8:81:eb:7c:f2:48:c5:86:39:53:c9:a8:99:77:
22:47:25:63:ea:c5:2d:46:4b:4f:dd:b4:8c:60:c7:12:d7:23:
61:d7:57:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:29 2026 by rpki-client