Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: TPe0U4l4xzc+QnowyhAmCwobH5gcPuTavP38yamWqVY=
Subject key identifier: 9E:8F:B0:9F:2B:70:F1:55:74:B9:F0:C0:70:6C:50:7B:53:DC:BE:91
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 019D97E263408EAF8AD6DB066D65D3CF150E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 052E
Signing time: Thu 16 Apr 2026 20:01:29 +0000
Manifest this update: Thu 16 Apr 2026 20:01:29 +0000
Manifest next update: Fri 17 Apr 2026 20:01:29 +0000
Files and hashes: 1: amLES0luVq3iLHPQKyufyNQwgaI.roa (hash: UsdGqDJsnylUEzlDTC7n05/NMnzeFnVJjS3/bK29FXs=)
2: jIwaLjqt-xdZuLLeeQ6b9JM9ktU.roa (hash: NBpvqEDHRttth2lk+QrdtGdQaHXJVWBfDcwb8ITbXwo=)
3: u_iWvzN4ZsIj-85aLk82H6-rRe4.roa (hash: LwmASP5C8j7zpf+fcC+xGqEebuer0tW8AmUmigdVvI8=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: AXR3IegcWDflrD4PGkAax4zZYM5duzKcAzQ4nErZ8x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:63:40:8e:af:8a:d6:db:06:6d:65:d3:cf:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Apr 16 20:01:29 2026 GMT
Not After : Apr 17 20:01:29 2026 GMT
Subject: CN=9e8fb09f2b70f15574b9f0c0706c507b53dcbe91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:71:83:a7:d7:d1:17:5e:f5:3e:24:b0:24:
5d:31:f4:e0:20:d0:f6:5e:fa:7a:cf:1e:6c:01:c9:
83:9b:56:28:7e:13:b7:90:aa:75:cc:dd:cc:17:72:
25:4a:51:c4:f7:d8:52:10:de:51:1f:3b:22:10:8f:
14:34:35:8e:fb:b7:d7:55:f4:2a:56:6b:0c:18:ac:
72:9e:3d:7e:81:ea:d2:1f:fb:a5:bc:14:f8:54:d2:
10:70:ff:8d:47:0c:ff:dc:73:f4:05:4c:ff:ca:5e:
ff:93:a7:57:94:19:6a:c3:83:30:f0:f1:2c:af:48:
8b:e2:3b:ab:e8:06:26:63:2f:71:8e:d9:48:18:e7:
76:4f:ec:95:f0:6f:68:14:97:6b:7e:5d:d3:c2:04:
b4:83:52:4f:00:0d:b3:0b:36:2a:33:fd:0f:4b:9f:
c4:6c:18:79:21:76:14:e8:af:55:b8:3f:4a:a6:db:
f9:22:e3:89:fb:e6:4d:bd:ed:b4:3a:e0:54:c2:54:
17:05:50:2c:21:15:4b:02:fb:54:04:92:a0:6f:78:
df:eb:9a:e9:73:a2:99:89:e4:53:9b:2e:ed:17:15:
ed:3d:62:bf:1f:75:63:1d:3b:34:73:6e:28:c4:44:
ca:5c:7c:4f:bf:a4:45:23:7e:df:be:a9:b3:73:55:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:B0:9F:2B:70:F1:55:74:B9:F0:C0:70:6C:50:7B:53:DC:BE:91
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:2b:9b:32:58:13:55:f0:9e:89:43:b2:b3:10:5a:45:fe:a1:
21:c8:ab:30:10:be:33:fe:28:3a:b6:b9:48:e9:8f:b8:c1:90:
1d:02:47:cd:8f:43:ca:34:a2:0f:bc:c8:28:b2:af:96:d7:d1:
d4:c0:3e:34:3e:d9:e4:5a:98:95:71:4b:21:3b:49:b2:da:7a:
dc:d2:1f:98:66:d5:28:a5:c9:f9:25:36:1c:50:60:27:d3:70:
e6:06:70:ff:4b:b8:22:ae:6e:e5:90:36:5a:3b:60:83:fd:6a:
8c:e3:b7:d5:00:1e:1b:28:ab:c7:20:bb:3f:d7:50:e8:60:f3:
7d:31:71:8b:5b:b6:9c:cd:30:2f:6a:28:29:33:fa:97:5b:a5:
85:af:96:41:47:f3:ee:34:e8:06:6c:47:53:24:a3:d7:9a:7b:
2b:e0:46:60:c8:57:c4:ab:ea:44:a6:01:88:1c:ad:ec:79:6e:
5a:b2:ed:f4:69:e5:ac:1f:fc:82:b5:b4:b4:76:fd:17:ae:08:
ec:92:48:37:58:1f:72:66:c3:e2:e9:c3:96:77:e9:fd:7c:36:
7d:28:cb:b8:4d:59:85:67:ba:67:41:96:af:5c:7b:fe:19:0a:
33:a6:2c:8a:6a:17:b7:ec:6f:0c:1a:98:cb:46:eb:30:86:57:
e2:83:b7:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4mNAjq+K1tsGbWXTzxUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMzVmNTRhM2IwZTJlNDhkZDVlZmIzNjI0YzFmZTBlODVm
ZTI2MWQwHhcNMjYwNDE2MjAwMTI5WhcNMjYwNDE3MjAwMTI5WjAzMTEwLwYDVQQD
Eyg5ZThmYjA5ZjJiNzBmMTU1NzRiOWYwYzA3MDZjNTA3YjUzZGNiZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQpxg6fX0Rde9T4ksCRdMfTgIND2
Xvp6zx5sAcmDm1YofhO3kKp1zN3MF3IlSlHE99hSEN5RHzsiEI8UNDWO+7fXVfQq
VmsMGKxynj1+gerSH/ulvBT4VNIQcP+NRwz/3HP0BUz/yl7/k6dXlBlqw4Mw8PEs
r0iL4jur6AYmYy9xjtlIGOd2T+yV8G9oFJdrfl3TwgS0g1JPAA2zCzYqM/0PS5/E
bBh5IXYU6K9VuD9Kptv5IuOJ++ZNve20OuBUwlQXBVAsIRVLAvtUBJKgb3jf65rp
c6KZieRTmy7tFxXtPWK/H3VjHTs0c24oxETKXHxPv6RFI37fvqmzc1XuywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6PsJ8rcPFVdLnwwHBsUHtT3L6RMB8GA1UdIwQY
MBaAFMo19Uo7Di5I3V77NiTB/g6F/iYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUt
NTFjOTliYzhlOGQwLzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC85YTA0OTctY2QwZC00OGRjLTg2YWUtNTFjOTliYzhlOGQw
LzEveWpYMVNqc09Ma2pkWHZzMkpNSC1Eb1gtSmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1yubMlgT
VfCeiUOysxBaRf6hIcirMBC+M/4oOra5SOmPuMGQHQJHzY9DyjSiD7zIKLKvltfR
1MA+ND7Z5FqYlXFLITtJstp63NIfmGbVKKXJ+SU2HFBgJ9Nw5gZw/0u4Iq5u5ZA2
Wjtgg/1qjOO31QAeGyirxyC7P9dQ6GDzfTFxi1u2nM0wL2ooKTP6l1ulha+WQUfz
7jToBmxHUySj15p7K+BGYMhXxKvqRKYBiByt7HluWrLt9GnlrB/8grW0tHb9F64I
7JJIN1gfcmbD4unDlnfp/Xw2fSjLuE1ZhWe6Z0GWr1x7/hkKM6YsimoXt+xvDBqY
y0brMIZX4oO3wQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:40:31 2026 by rpki-client