Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
File: yABBYZAh42MorViY6Jl4cEa48Pk.mft (raw, json)
Hash identifier: 4nyKzld1viSNwp90+MOr3i28OZrdkGIPV/AGW6+51EM=
Subject key identifier: 5E:AC:3C:B6:16:0B:17:42:D3:F3:99:15:FC:97:67:34:BC:72:D8:30
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 019D97AA763E29D077DEF067EDB9FF673C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
Manifest number: 0950
Signing time: Thu 16 Apr 2026 19:00:23 +0000
Manifest this update: Thu 16 Apr 2026 19:00:23 +0000
Manifest next update: Fri 17 Apr 2026 19:00:23 +0000
Files and hashes: 1: BwXbiOo4RjFVj5Dj5ubs0OzhTEg.roa (hash: D/nZqGZDiargJ1WjN4WGCYH05fUuLBJs9tc1eSlRvy8=)
2: yABBYZAh42MorViY6Jl4cEa48Pk.crl (hash: VkOEtBK/I0gbb7VYZ4zDcCiWjv+ofnRh1kAfrcn5Er0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:76:3e:29:d0:77:de:f0:67:ed:b9:ff:67:3c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Apr 16 19:00:23 2026 GMT
Not After : Apr 17 19:00:23 2026 GMT
Subject: CN=5eac3cb6160b1742d3f39915fc976734bc72d830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:7a:dc:bf:33:71:5d:bf:4c:14:75:69:77:
d2:22:26:8e:99:73:b6:44:9c:75:65:a6:3e:f7:ed:
da:9c:32:53:90:e4:11:bd:6d:6b:5f:ce:6d:45:f6:
c1:28:e9:0a:0b:1a:5f:9e:74:13:fb:6e:61:ed:e1:
71:1b:3a:b7:f0:31:06:aa:8e:9e:79:0d:0a:93:44:
28:93:45:02:56:87:1b:e0:3d:89:bf:c1:9b:ff:4a:
63:0c:e1:42:de:4f:94:ae:10:a7:20:51:33:21:a0:
bc:bf:4d:ac:b4:0e:6a:6a:98:9f:64:d5:13:82:f5:
60:1c:ea:46:c3:e3:9d:76:48:71:2c:62:a4:40:b2:
28:f4:7a:3c:57:86:31:43:b4:a9:48:43:b8:82:78:
2e:ce:0f:ad:83:93:d0:71:ee:dd:c9:81:f2:f2:a0:
a9:64:57:86:df:b0:2e:72:6c:81:46:59:da:ab:cf:
7f:f7:f8:9e:14:38:9f:4b:17:60:f4:6c:b1:a8:8e:
50:8e:fa:7a:70:d5:69:39:d5:89:e9:9b:e6:9a:c8:
a3:cb:c6:2c:a9:f1:01:bb:c6:70:b3:a5:92:fe:66:
97:20:d5:2b:3b:37:60:36:cf:a1:2b:dd:7d:15:04:
3f:37:07:dd:cb:af:93:18:15:19:7b:25:50:bc:f8:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:3C:B6:16:0B:17:42:D3:F3:99:15:FC:97:67:34:BC:72:D8:30
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:61:84:98:40:4d:38:c7:fd:52:ff:10:82:1c:10:db:45:52:
22:bc:74:53:52:e4:65:29:73:90:28:e0:19:e7:85:01:26:6e:
f9:58:d2:fa:73:01:bf:8b:1a:06:da:68:bb:55:54:93:e9:c4:
0f:ba:51:8b:fa:12:60:d9:14:75:f1:82:d0:d3:95:5a:76:e9:
95:dc:c8:69:4f:72:99:1e:dd:88:16:92:7d:84:2d:41:48:ea:
91:b5:42:49:3c:26:5e:15:2b:0e:59:06:e5:af:c0:23:4a:f2:
25:1a:77:d7:ba:62:9e:cf:64:ee:f5:e0:46:80:58:22:37:fd:
5f:76:de:3b:54:35:aa:4a:67:dd:35:55:46:4b:2f:6e:29:1a:
a2:d8:c8:2e:b8:07:7c:28:4f:c8:93:eb:db:b5:9d:39:28:c2:
3b:fc:54:27:d7:b1:7d:36:19:68:78:ea:2f:63:e5:a4:c6:ba:
cd:5e:82:13:d7:61:39:eb:38:c0:52:a2:78:3c:f7:e6:7d:2c:
7e:8f:16:7b:51:5e:6c:89:70:f2:31:34:16:a0:ea:30:a2:bc:
af:af:e1:c5:05:d2:5e:24:69:6f:2e:2d:ce:54:36:81:3c:c2:
1b:eb:9b:2c:a2:96:36:b1:c0:fa:a6:9c:c8:41:61:77:1a:ae:
73:7c:d8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqnY+KdB33vBn7bn/ZzxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDA0MTYxOTAyMWUzNjMyOGFkNTg5OGU4OTk3ODcwNDZi
OGYwZjkwHhcNMjYwNDE2MTkwMDIzWhcNMjYwNDE3MTkwMDIzWjAzMTEwLwYDVQQD
Eyg1ZWFjM2NiNjE2MGIxNzQyZDNmMzk5MTVmYzk3NjczNGJjNzJkODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AN63L8zcV2/TBR1aXfSIiaOmXO2
RJx1ZaY+9+3anDJTkOQRvW1rX85tRfbBKOkKCxpfnnQT+25h7eFxGzq38DEGqo6e
eQ0Kk0Qok0UCVocb4D2Jv8Gb/0pjDOFC3k+UrhCnIFEzIaC8v02stA5qapifZNUT
gvVgHOpGw+OddkhxLGKkQLIo9Ho8V4YxQ7SpSEO4gnguzg+tg5PQce7dyYHy8qCp
ZFeG37AucmyBRlnaq89/9/ieFDifSxdg9GyxqI5Qjvp6cNVpOdWJ6Zvmmsijy8Ys
qfEBu8Zws6WS/maXINUrOzdgNs+hK919FQQ/Nwfdy6+TGBUZeyVQvPhM5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6sPLYWCxdC0/OZFfyXZzS8ctgwMB8GA1UdIwQY
MBaAFMgAQWGQIeNjKK1YmOiZeHBGuPD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYt
ZDI5N2RiMjMwYTE0LzEveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYtZDI5N2RiMjMwYTE0
LzEveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2GEmEBN
OMf9Uv8QghwQ20VSIrx0U1LkZSlzkCjgGeeFASZu+VjS+nMBv4saBtpou1VUk+nE
D7pRi/oSYNkUdfGC0NOVWnbpldzIaU9ymR7diBaSfYQtQUjqkbVCSTwmXhUrDlkG
5a/AI0ryJRp317pins9k7vXgRoBYIjf9X3beO1Q1qkpn3TVVRksvbikaotjILrgH
fChPyJPr27WdOSjCO/xUJ9exfTYZaHjqL2PlpMa6zV6CE9dhOes4wFKieDz35n0s
fo8We1FebIlw8jE0FqDqMKK8r6/hxQXSXiRpby4tzlQ2gTzCG+ubLKKWNrHA+qac
yEFhdxquc3zYMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:09 2026 by rpki-client