Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
File: yzgoFbJRYTZakWEMva1x9mKG94E.mft (raw, json)
Hash identifier: Gw2TUO5MtiqCnZsGnprzDuGF2hLbIhcrmZKuDgj0QHQ=
Subject key identifier: 0D:B6:F7:42:84:7C:BE:07:D9:49:2E:EB:9F:73:E6:58:DD:11:D3:50
Authority key identifier: CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
Certificate issuer: /CN=cb382815b25161365a91610cbdad71f66286f781
Certificate serial: 019D99D0B4B9CB699048A9E77BF0B670777F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
Manifest number: 0CAF
Signing time: Fri 17 Apr 2026 05:01:24 +0000
Manifest this update: Fri 17 Apr 2026 05:01:24 +0000
Manifest next update: Sat 18 Apr 2026 05:01:24 +0000
Files and hashes: 1: QaQXyt1JUOdGAiMPwz_506zawSw.roa (hash: E1jcvO//eEWdMES9KtTK7xOBQZ3PG7iMEerQv3LjsUk=)
2: yzgoFbJRYTZakWEMva1x9mKG94E.crl (hash: 8KW8IJ7X/WVUFbVyXZ+g3G4SHYAaJZPvYRJXMQkLazY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:b4:b9:cb:69:90:48:a9:e7:7b:f0:b6:70:77:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb382815b25161365a91610cbdad71f66286f781
Validity
Not Before: Apr 17 05:01:24 2026 GMT
Not After : Apr 18 05:01:24 2026 GMT
Subject: CN=0db6f742847cbe07d9492eeb9f73e658dd11d350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:b3:42:4f:7c:30:d9:cc:2f:3e:5a:5a:a4:
4a:98:01:c2:7b:fe:7c:34:cd:a2:c0:2f:0e:a4:5f:
8c:64:f0:75:97:00:33:e6:b3:33:cf:40:52:1e:09:
5c:6a:c8:b0:ab:13:9b:02:cd:e4:85:4c:59:12:e2:
c8:57:99:98:76:76:31:92:d2:fe:f5:eb:63:e7:77:
c9:7a:a8:ab:b9:27:0d:b1:04:d4:3c:a5:46:48:56:
28:0d:60:e6:0c:8d:3b:fa:16:0c:cf:2b:82:89:7c:
7d:5a:5b:5b:03:54:97:32:79:e7:f2:f4:f1:1f:bb:
a7:e3:05:2d:d6:7e:e9:e7:86:76:29:40:46:fc:5b:
d8:67:d8:82:6c:a6:89:b4:01:f6:4c:44:7c:e4:59:
99:a6:cb:de:69:90:e7:7a:45:21:16:c0:f1:f6:8d:
45:2b:6e:a6:15:60:e4:91:25:fc:c5:64:8d:08:e2:
0c:63:e9:76:a1:a9:cd:b6:71:96:db:2f:3f:72:80:
d1:99:1b:75:2a:ab:df:35:52:b4:52:20:13:45:93:
5b:ae:ab:9b:c3:d1:91:9f:5b:4f:10:36:da:fa:66:
b9:33:a2:f0:57:c7:6f:27:29:e7:1a:25:91:b2:65:
d0:ed:25:78:e6:e1:83:40:57:62:1e:28:ff:26:05:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:F7:42:84:7C:BE:07:D9:49:2E:EB:9F:73:E6:58:DD:11:D3:50
X509v3 Authority Key Identifier:
keyid:CB:38:28:15:B2:51:61:36:5A:91:61:0C:BD:AD:71:F6:62:86:F7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzgoFbJRYTZakWEMva1x9mKG94E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ef70f1-52a1-4e7a-b3c6-414238c5bbc2/1/yzgoFbJRYTZakWEMva1x9mKG94E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3b:c5:26:ea:a0:c8:c3:c8:4b:cc:b8:c6:0d:52:61:1c:a6:
1d:2e:5f:03:bf:d7:c3:89:10:92:76:fc:3f:c6:73:49:8a:41:
36:54:4b:de:e3:69:aa:25:ca:cb:7d:03:1b:f6:f6:55:1b:ee:
b4:6e:a5:df:54:2a:5c:20:a1:41:6a:2e:17:91:1a:98:cc:7d:
12:2e:34:f2:3b:81:09:41:5d:f3:7e:db:22:c5:17:61:50:cc:
79:dc:40:b6:c0:d6:32:47:65:d1:7a:69:3d:44:74:c8:0b:5e:
7d:e9:a1:d2:6d:06:ea:3d:39:2c:17:13:53:db:fe:06:fe:df:
34:98:d0:b1:09:1d:18:72:55:64:c8:49:66:2d:e0:b2:79:73:
7e:2c:96:24:f6:9a:70:cf:57:a4:31:07:11:58:d6:a3:ab:00:
a9:c6:6c:82:07:52:6d:06:96:5a:58:86:79:30:3f:65:5f:09:
4d:a7:24:bd:18:4c:df:b4:08:bb:60:aa:cb:99:3a:22:c0:20:
5d:a3:00:5d:c6:94:aa:58:59:83:db:aa:e2:1f:7e:d5:2a:58:
2b:64:88:64:79:76:a6:75:75:e6:fb:24:c6:9d:4c:76:06:6b:
56:b3:bb:fa:92:3c:b7:a2:14:07:7b:5a:0d:25:3f:ea:79:73:
5e:6e:ea:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0LS5y2mQSKnne/C2cHd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMzgyODE1YjI1MTYxMzY1YTkxNjEwY2JkYWQ3MWY2NjI4
NmY3ODEwHhcNMjYwNDE3MDUwMTI0WhcNMjYwNDE4MDUwMTI0WjAzMTEwLwYDVQQD
EygwZGI2Zjc0Mjg0N2NiZTA3ZDk0OTJlZWI5ZjczZTY1OGRkMTFkMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoazQk98MNnMLz5aWqRKmAHCe/58
NM2iwC8OpF+MZPB1lwAz5rMzz0BSHglcasiwqxObAs3khUxZEuLIV5mYdnYxktL+
9etj53fJeqiruScNsQTUPKVGSFYoDWDmDI07+hYMzyuCiXx9WltbA1SXMnnn8vTx
H7un4wUt1n7p54Z2KUBG/FvYZ9iCbKaJtAH2TER85FmZpsveaZDnekUhFsDx9o1F
K26mFWDkkSX8xWSNCOIMY+l2oanNtnGW2y8/coDRmRt1KqvfNVK0UiATRZNbrqub
w9GRn1tPEDba+ma5M6LwV8dvJynnGiWRsmXQ7SV45uGDQFdiHij/JgUIowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2290KEfL4H2Uku659z5ljdEdNQMB8GA1UdIwQY
MBaAFMs4KBWyUWE2WpFhDL2tcfZihveBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYt
NDE0MjM4YzViYmMyLzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lZjcwZjEtNTJhMS00ZTdhLWIzYzYtNDE0MjM4YzViYmMy
LzEveXpnb0ZiSlJZVFpha1dFTXZhMXg5bUtHOTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTvFJuqg
yMPIS8y4xg1SYRymHS5fA7/Xw4kQknb8P8ZzSYpBNlRL3uNpqiXKy30DG/b2VRvu
tG6l31QqXCChQWouF5EamMx9Ei408juBCUFd837bIsUXYVDMedxAtsDWMkdl0Xpp
PUR0yAtefemh0m0G6j05LBcTU9v+Bv7fNJjQsQkdGHJVZMhJZi3gsnlzfiyWJPaa
cM9XpDEHEVjWo6sAqcZsggdSbQaWWliGeTA/ZV8JTackvRhM37QIu2Cqy5k6IsAg
XaMAXcaUqlhZg9uq4h9+1SpYK2SIZHl2pnV15vskxp1MdgZrVrO7+pI8t6IUB3ta
DSU/6nlzXm7qHA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:21 2026 by rpki-client