Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
File: y6AXGgLV5KdftAY1VFrgBkyMzK0.mft (raw, json)
Hash identifier: uq2MYvlEiUXObZZ5yE7T0S0sGGelpAK3tIX9dn7tpmQ=
Subject key identifier: 29:F0:88:42:8B:33:D1:9D:E6:00:E3:AC:6E:28:A9:20:A8:CB:1B:21
Authority key identifier: CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
Certificate issuer: /CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Certificate serial: 019DA4C1AB39B0B282825AF0421FA5A435E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
Manifest number: 15D4
Signing time: Sun 19 Apr 2026 08:00:48 +0000
Manifest this update: Sun 19 Apr 2026 08:00:48 +0000
Manifest next update: Mon 20 Apr 2026 08:00:48 +0000
Files and hashes: 1: UxOjp8XUs-Ky59G3Ao0aGxBbUxk.roa (hash: IG/Uj+pARjcg7xsZwOswZLWfcj4Zeh91EtnXY1KelO4=)
2: y6AXGgLV5KdftAY1VFrgBkyMzK0.crl (hash: e/FY0lqFYCwlp/Ed8tqlItNdPHqB1UPZVZ1lhtUKwq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:ab:39:b0:b2:82:82:5a:f0:42:1f:a5:a4:35:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cba0171a02d5e4a75fb40635545ae0064c8cccad
Validity
Not Before: Apr 19 08:00:48 2026 GMT
Not After : Apr 20 08:00:48 2026 GMT
Subject: CN=29f088428b33d19de600e3ac6e28a920a8cb1b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:57:b1:52:7a:e9:76:ac:7b:c2:6b:8d:7b:
a1:8c:41:16:57:7a:fd:af:a5:c5:14:ff:69:80:9a:
43:dc:6f:a8:6e:9a:11:60:b3:d1:ba:e5:a9:4a:82:
3d:34:cf:8f:99:49:9c:39:d0:2b:33:a4:0b:23:2d:
bb:61:4a:66:29:3c:66:f8:84:b7:d8:2b:67:48:9c:
52:a8:01:19:2c:03:41:f1:33:be:9d:1d:fd:31:05:
23:64:d0:bb:c8:65:4e:7f:95:3c:8e:fc:83:83:6d:
35:5f:08:74:db:f0:29:c7:83:bf:00:02:60:21:9d:
68:4e:77:bc:28:8e:f8:d8:34:bf:41:01:3a:c3:8f:
7f:22:b6:02:dc:89:7a:93:d6:46:1d:9f:8f:93:85:
11:6b:69:66:a3:8a:d1:8c:e5:8f:8b:2a:6d:42:49:
ac:c1:41:ae:7f:fb:68:a1:85:9c:5a:bd:84:44:d9:
29:fa:ee:91:83:da:b9:88:52:75:35:1a:a4:e0:35:
c0:21:20:57:c1:82:32:a5:70:fd:e1:79:67:2d:d7:
16:d1:4d:2f:c4:e8:ca:bd:51:9e:cd:cb:4c:a8:cf:
8d:85:2e:80:53:8d:33:63:65:c0:ef:2e:ef:86:35:
b1:66:88:b0:fa:5b:f9:be:23:9a:78:28:1e:9d:49:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F0:88:42:8B:33:D1:9D:E6:00:E3:AC:6E:28:A9:20:A8:CB:1B:21
X509v3 Authority Key Identifier:
keyid:CB:A0:17:1A:02:D5:E4:A7:5F:B4:06:35:54:5A:E0:06:4C:8C:CC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y6AXGgLV5KdftAY1VFrgBkyMzK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/654433-e320-42ae-bb61-570b14833534/1/y6AXGgLV5KdftAY1VFrgBkyMzK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:47:37:bf:3c:77:d0:9d:cf:7f:31:6f:9b:eb:0a:06:a9:5e:
c2:1b:12:b8:67:be:d8:f6:da:6f:7a:fc:dd:b6:dc:b1:f4:7c:
30:d2:49:0d:2e:fb:69:bb:da:3c:3f:07:64:15:1c:5d:96:77:
ab:1a:3d:e3:64:48:9d:17:8a:49:57:e5:d6:12:a7:99:63:af:
10:f1:3a:b8:9b:aa:f4:c1:32:35:05:34:02:32:40:aa:f4:a2:
ca:80:6c:5c:e5:9d:9b:4b:92:3b:d8:2f:6f:9f:79:ed:7f:ae:
77:5d:96:48:d0:d8:65:37:fd:65:40:4d:c5:b8:e4:7e:ea:b9:
1f:77:33:dc:e0:91:47:23:cb:35:da:47:00:8f:35:d9:33:a7:
24:c7:2a:81:1a:70:4d:f0:b7:56:e7:82:14:e1:f1:55:2f:f8:
78:d9:38:3f:61:05:13:53:6b:30:5d:a6:f3:30:2e:9c:02:d9:
54:56:87:7e:4c:3b:19:a1:df:48:7a:29:39:6e:6b:6a:c9:82:
3a:a0:b9:bd:18:45:6d:13:fc:34:5d:3a:94:fc:08:85:f5:e5:
06:c0:18:40:43:1a:5c:6c:47:4d:c8:f6:3c:95:ee:e3:f5:87:
ca:99:a2:01:fe:6d:8e:86:f4:a4:4a:32:ee:8b:c7:52:ce:7e:
03:bc:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:24 2026 by rpki-client