Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
File: y_FtyaS1vU0MQnioXAhVkwIL6jE.mft (raw, json)
Hash identifier: IREVUcPlViTZxlk4LgEcW7EW9DcxnTO6XWiqHCqTUVE=
Subject key identifier: 66:22:2E:2E:71:24:86:CB:5D:99:9F:F5:6B:EC:76:16:02:87:B9:3F
Authority key identifier: CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
Certificate issuer: /CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Certificate serial: 019DA378C655641F406F76EB660A8DABA22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
Manifest number: 1559
Signing time: Sun 19 Apr 2026 02:01:34 +0000
Manifest this update: Sun 19 Apr 2026 02:01:34 +0000
Manifest next update: Mon 20 Apr 2026 02:01:34 +0000
Files and hashes: 1: GlWizv2ImorDlJ5qdqf22l6axV0.roa (hash: FPuxge79aWSqPlsBlXbn55Kr6pHUqkAHkE0a0KRPnXI=)
2: y_FtyaS1vU0MQnioXAhVkwIL6jE.crl (hash: dVei8376x58kql9UH14NQAUZUQnUvilprwtHxD+K5Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:c6:55:64:1f:40:6f:76:eb:66:0a:8d:ab:a2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbf16dc9a4b5bd4d0c4278a85c085593020bea31
Validity
Not Before: Apr 19 02:01:34 2026 GMT
Not After : Apr 20 02:01:34 2026 GMT
Subject: CN=66222e2e712486cb5d999ff56bec76160287b93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:b6:a0:20:99:6b:b0:04:2f:ac:7a:ef:c9:
a1:c3:4a:12:64:72:f4:1f:3e:05:3e:8c:77:81:82:
2c:d8:7b:93:b8:32:e0:8d:76:55:a1:a2:62:05:f7:
b9:f0:c8:33:a7:ab:fe:b4:d2:83:c8:9f:d6:dd:18:
05:9e:d1:22:41:28:09:54:c5:8b:6d:2f:c8:e6:de:
89:58:1d:15:50:a9:44:f1:1f:fd:8b:be:58:c6:30:
2f:bb:d7:c7:80:ac:08:3c:2d:91:72:61:0d:37:cf:
5c:1c:17:05:28:b3:cf:95:f1:20:42:52:b9:26:70:
b7:cd:48:3f:fb:77:a9:28:14:4b:83:d9:38:83:ac:
aa:a6:e0:08:0f:41:d4:e9:4e:8f:fe:10:06:2c:62:
1a:bb:29:fc:c9:bb:c3:08:39:3d:ba:58:fc:98:29:
3e:62:c0:1a:bd:8c:bb:ae:57:a0:42:16:8d:0e:3c:
66:8d:d1:ff:96:d6:7b:df:da:6a:91:9a:99:2a:a0:
8a:77:3d:16:0a:d4:b3:2b:11:17:29:36:aa:89:85:
74:33:1a:b2:af:d4:f7:28:24:60:d6:ba:c2:0e:31:
a1:6c:15:52:4d:f2:40:06:a8:c2:28:64:33:15:b4:
44:26:6f:65:f3:94:c3:cd:69:3b:e7:5d:90:8b:e2:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:22:2E:2E:71:24:86:CB:5D:99:9F:F5:6B:EC:76:16:02:87:B9:3F
X509v3 Authority Key Identifier:
keyid:CB:F1:6D:C9:A4:B5:BD:4D:0C:42:78:A8:5C:08:55:93:02:0B:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_FtyaS1vU0MQnioXAhVkwIL6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0748bb-e7e2-4268-b79c-8e652940a09d/1/y_FtyaS1vU0MQnioXAhVkwIL6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:45:12:72:21:c1:15:18:94:f6:4e:cc:a5:4e:53:9f:de:e7:
19:db:98:eb:79:91:df:89:93:0b:a2:27:14:61:36:27:d6:25:
aa:ee:c3:6e:94:40:77:c6:c1:51:e7:2c:ab:9b:a6:fc:9a:0c:
40:0b:f3:b0:c1:6f:9a:d7:05:cd:6e:b7:1e:fa:74:75:6c:76:
5e:b4:0c:48:11:fe:eb:97:e2:0d:0a:f0:cb:65:ec:67:82:c5:
7f:fd:bf:f0:15:76:dd:ab:6d:62:11:f1:90:22:fd:d4:5a:0a:
2e:30:f3:95:1e:c6:e0:9f:66:d7:8b:27:94:53:b1:f2:ec:02:
62:26:14:57:86:a5:e2:aa:3f:2d:e1:f7:3f:25:a2:da:bb:86:
56:43:a0:6b:a9:38:5a:f8:b9:97:34:5c:bb:5b:bf:49:a3:cb:
6f:15:2d:0f:72:4b:a5:19:99:f5:0a:1e:0e:75:62:02:a3:ff:
5b:5e:27:a3:95:04:3d:96:fd:a3:91:69:a4:b9:2e:e1:0a:c4:
15:f9:77:83:21:cb:2b:e8:c4:2b:1c:ad:42:62:65:ff:84:c0:
15:af:dc:b8:40:fc:b5:b4:52:67:da:b4:76:83:84:ac:2b:28:
64:15:ae:6d:4c:86:67:69:14:85:1e:58:f0:41:f9:ce:3f:cf:
dd:3b:25:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeMZVZB9Ab3brZgqNq6IsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjE2ZGM5YTRiNWJkNGQwYzQyNzhhODVjMDg1NTkzMDIw
YmVhMzEwHhcNMjYwNDE5MDIwMTM0WhcNMjYwNDIwMDIwMTM0WjAzMTEwLwYDVQQD
Eyg2NjIyMmUyZTcxMjQ4NmNiNWQ5OTlmZjU2YmVjNzYxNjAyODdiOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzy2oCCZa7AEL6x678mhw0oSZHL0
Hz4FPox3gYIs2HuTuDLgjXZVoaJiBfe58Mgzp6v+tNKDyJ/W3RgFntEiQSgJVMWL
bS/I5t6JWB0VUKlE8R/9i75YxjAvu9fHgKwIPC2RcmENN89cHBcFKLPPlfEgQlK5
JnC3zUg/+3epKBRLg9k4g6yqpuAID0HU6U6P/hAGLGIauyn8ybvDCDk9ulj8mCk+
YsAavYy7rlegQhaNDjxmjdH/ltZ739pqkZqZKqCKdz0WCtSzKxEXKTaqiYV0Mxqy
r9T3KCRg1rrCDjGhbBVSTfJABqjCKGQzFbREJm9l85TDzWk7512Qi+JG8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYiLi5xJIbLXZmf9WvsdhYCh7k/MB8GA1UdIwQY
MBaAFMvxbcmktb1NDEJ4qFwIVZMCC+oxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMt
OGU2NTI5NDBhMDlkLzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8wNzQ4YmItZTdlMi00MjY4LWI3OWMtOGU2NTI5NDBhMDlk
LzEveV9GdHlhUzF2VTBNUW5pb1hBaFZrd0lMNmpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUUSciHB
FRiU9k7MpU5Tn97nGduY63mR34mTC6InFGE2J9Ylqu7DbpRAd8bBUecsq5um/JoM
QAvzsMFvmtcFzW63Hvp0dWx2XrQMSBH+65fiDQrwy2XsZ4LFf/2/8BV23attYhHx
kCL91FoKLjDzlR7G4J9m14snlFOx8uwCYiYUV4al4qo/LeH3PyWi2ruGVkOga6k4
Wvi5lzRcu1u/SaPLbxUtD3JLpRmZ9QoeDnViAqP/W14no5UEPZb9o5FppLku4QrE
Ffl3gyHLK+jEKxytQmJl/4TAFa/cuED8tbRSZ9q0doOErCsoZBWubUyGZ2kUhR5Y
8EH5zj/P3TslSQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:26 2026 by rpki-client