Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
File: y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft (raw, json)
Hash identifier: bVzwutJf1pmTMGnjzNfm8+veCimW7xEarr972kX5AKQ=
Subject key identifier: 69:96:6B:9D:1E:49:A5:B9:60:D4:F1:82:B0:A1:BD:16:D8:37:B9:D3
Authority key identifier: CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
Certificate issuer: /CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Certificate serial: 019D9A0730AD70D94B71E90A6E81C348B656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
Manifest number: 11AF
Signing time: Fri 17 Apr 2026 06:00:55 +0000
Manifest this update: Fri 17 Apr 2026 06:00:55 +0000
Manifest next update: Sat 18 Apr 2026 06:00:55 +0000
Files and hashes: 1: YFo06dx0o1PHDC6LUgSFCDM_MLE.roa (hash: i0OcIk2lCb0oZECkABY1EIzkvkdWAble7uuQNpGV6Q8=)
2: cIShs-dj-a-jUHC5O2QcH4JFtqE.roa (hash: sqvBQpMmwNFJ+qbqQywFjzcQM3kVnXmjI7ID549RLQI=)
3: gd9FyMAEx2zDcAvRasWsSCt8jII.roa (hash: 3gHwGEwP5km+DCt4+0KzZKC5xkxi0OUUMqCX1cypjtI=)
4: y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl (hash: Lho7pqBe+7BJUoVFgeq4peh8aOzL9lisS2mFEZ/OFVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:30:ad:70:d9:4b:71:e9:0a:6e:81:c3:48:b6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb7c20b55a470dab892f4c91ea0010bd1c39f34
Validity
Not Before: Apr 17 06:00:55 2026 GMT
Not After : Apr 18 06:00:55 2026 GMT
Subject: CN=69966b9d1e49a5b960d4f182b0a1bd16d837b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:72:47:b4:75:a8:71:31:41:34:55:38:e9:
f8:09:b0:0f:bc:fb:57:25:51:c1:92:55:52:f4:37:
98:be:86:0b:67:13:64:34:f3:ae:3f:00:c6:50:b5:
b3:de:e8:d2:47:71:5c:a1:f3:ec:a7:6a:a3:5b:98:
9c:ed:35:0b:46:56:36:a6:a5:36:b2:0e:df:60:d8:
fc:21:17:fe:33:51:3a:bc:76:39:8a:88:f0:79:96:
df:a9:bc:ab:e7:78:cb:e7:2f:d9:d5:a9:27:40:b8:
f8:02:aa:52:65:93:f0:15:e1:ce:40:66:9d:19:e1:
fa:3b:72:10:c1:51:5a:3b:fc:78:8a:6f:29:06:15:
ad:3c:d8:e5:bb:51:3f:d7:9f:33:a0:31:a2:10:40:
9f:21:e8:ab:a8:c6:72:61:97:06:8f:57:e2:cf:fd:
2f:9e:f6:44:4c:c9:2f:49:2a:1a:7e:0c:b1:48:d1:
cf:01:a6:d8:b0:43:a9:5b:e0:0c:d7:de:0f:b0:e6:
4d:24:30:f5:be:96:ba:e1:a6:46:87:6e:af:ef:43:
75:3a:ad:b0:f8:05:93:9e:08:16:e0:7a:ef:42:05:
8b:ae:19:09:c5:18:20:76:3f:3f:47:15:71:fb:ba:
2e:bb:81:3f:ea:af:f5:8a:82:36:c5:20:47:6e:b8:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:6B:9D:1E:49:A5:B9:60:D4:F1:82:B0:A1:BD:16:D8:37:B9:D3
X509v3 Authority Key Identifier:
keyid:CB:B7:C2:0B:55:A4:70:DA:B8:92:F4:C9:1E:A0:01:0B:D1:C3:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7fCC1WkcNq4kvTJHqABC9HDnzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f0c24-440a-4ff7-a0c8-256339736c2b/1/y7fCC1WkcNq4kvTJHqABC9HDnzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:20:9a:85:26:bf:84:81:33:a2:4d:99:5d:f1:7b:c4:9c:
ce:1b:8d:27:e3:f8:d6:7e:d5:ce:81:6b:c3:dd:2b:91:fa:47:
0d:bb:27:e9:e4:cc:cc:70:04:f9:3b:6c:18:57:ec:37:7f:ee:
f6:29:ea:49:eb:cc:37:30:28:00:97:8a:56:61:1c:17:ed:5f:
b8:35:6f:c3:3b:89:2a:8d:90:e8:af:0d:98:96:52:04:27:3c:
53:88:49:74:82:6c:4c:58:51:33:c1:c5:80:fb:70:83:6d:65:
3f:87:62:ec:78:f0:3a:94:83:94:f5:ae:c9:ae:95:d0:13:1e:
24:8c:5d:55:58:d3:20:07:76:79:8b:03:36:37:fe:35:e5:49:
34:54:18:90:a8:1e:e6:b6:44:ec:c2:fc:88:38:92:10:d3:dc:
fc:1c:1a:89:9f:fd:be:3e:9e:4a:36:96:d0:8e:5a:56:0f:32:
c9:d7:f8:9f:1f:af:16:7e:b7:83:cc:c6:52:e4:a0:ae:85:97:
b3:f0:b2:b5:b6:ce:01:50:b1:08:d9:d9:23:08:56:d4:e0:0c:
97:e6:ec:e5:57:60:a9:c6:ca:af:a9:c2:08:4b:31:26:3a:18:
2f:c3:bb:29:a5:3a:46:b2:cf:a5:7e:53:d9:a7:3c:2e:a4:0d:
bd:88:86:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:57 2026 by rpki-client