Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
File: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft (raw, json)
Hash identifier: xgGMtO0fUAM65j2yv53t7mbWOzs33fVKDKMh2GJIt0k=
Subject key identifier: 7C:31:5A:0B:C8:26:F6:4E:19:0E:0A:41:F7:3C:16:2B:02:0F:C9:A9
Authority key identifier: D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
Certificate issuer: /CN=d982791736cdddd1328d0dd0decae92c058d6f25
Certificate serial: 019DA29C542493E071F41A5A655FB719E608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
Manifest number: 04AF
Signing time: Sat 18 Apr 2026 22:00:47 +0000
Manifest this update: Sat 18 Apr 2026 22:00:47 +0000
Manifest next update: Sun 19 Apr 2026 22:00:47 +0000
Files and hashes: 1: 2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl (hash: hNSbsxP4MNpI1IFao/28UacI7fuhjG8SP37B9W6wt9s=)
2: w9Drqjy5pv-xgsWm0Hj9JX1HYxE.roa (hash: X6/QclUhRxI/QNNJjqFf+pxHUaHW1PpD7IKrBpkxN4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:54:24:93:e0:71:f4:1a:5a:65:5f:b7:19:e6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d982791736cdddd1328d0dd0decae92c058d6f25
Validity
Not Before: Apr 18 22:00:47 2026 GMT
Not After : Apr 19 22:00:47 2026 GMT
Subject: CN=7c315a0bc826f64e190e0a41f73c162b020fc9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:93:6f:06:7f:65:08:b4:c6:56:ba:d0:62:
a7:ea:d3:39:f2:e7:22:01:49:e2:18:86:e2:55:61:
60:ae:b8:df:8a:92:b4:a7:c8:75:66:05:1e:41:39:
c0:ec:5e:0f:c4:ba:d1:4b:44:c9:ed:d8:dc:5c:1b:
b9:fb:03:de:37:a3:40:fd:c0:3c:e9:fd:fc:fb:8b:
ab:5d:77:82:f7:ed:37:78:74:f1:a4:12:85:8e:be:
f8:75:8b:f2:0f:af:02:cc:de:41:33:20:ff:51:8a:
2a:fb:16:c6:a0:54:23:e9:99:4e:9e:2c:29:93:ae:
e1:92:32:4f:97:da:8e:f9:63:5c:33:5c:bc:fd:37:
1c:0a:67:ea:f0:c6:5d:f5:2e:b7:3c:5c:80:6f:2f:
b0:50:60:fe:6e:c5:45:08:22:8e:1c:89:b6:6b:2f:
b3:00:39:05:5e:cd:a6:00:5c:da:14:6d:fb:a5:8c:
be:05:3c:56:9e:46:73:4d:7d:09:44:26:dc:ee:7b:
98:ef:9f:39:db:c5:ac:5c:f9:c0:c1:32:89:12:3f:
93:84:0d:28:9e:5b:e2:19:c2:7a:a4:a2:28:ff:b9:
dc:3d:74:d0:52:e3:89:cb:18:c9:26:b1:2b:6d:66:
11:b5:9e:3d:6b:cc:27:0c:5e:de:69:c1:73:ed:db:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:31:5A:0B:C8:26:F6:4E:19:0E:0A:41:F7:3C:16:2B:02:0F:C9:A9
X509v3 Authority Key Identifier:
keyid:D9:82:79:17:36:CD:DD:D1:32:8D:0D:D0:DE:CA:E9:2C:05:8D:6F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c213d4-3e4a-49e6-9b1f-ca6a1cc81a22/1/2YJ5FzbN3dEyjQ3Q3srpLAWNbyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cc:d1:8e:31:8a:7e:59:84:42:c7:92:4b:e7:d1:43:d7:e4:
8d:b4:03:7b:60:1f:a3:45:84:20:60:73:06:5e:06:e9:6c:e0:
70:ff:a5:38:e1:79:46:9c:96:6e:ad:65:91:b6:05:94:8e:c4:
d5:5a:da:49:0d:8f:b9:bd:26:f6:23:94:87:f4:99:82:85:06:
95:f3:4d:fd:7d:7d:62:ff:d8:e5:40:c0:38:8f:c6:a2:9f:de:
cb:3e:2b:29:88:e1:d7:2b:2a:52:e1:85:14:8c:83:a9:70:51:
75:3a:4c:af:96:ef:92:f8:a2:7f:0c:a7:48:52:45:62:7d:9f:
f6:ba:5b:bc:06:38:8f:65:93:08:1e:24:33:63:a8:3a:62:8f:
ac:21:04:16:ae:39:90:91:5b:6f:69:1e:c8:c0:9d:c3:d9:4f:
9d:ef:ff:92:f3:39:18:a5:1a:4b:72:0e:45:43:13:57:32:50:
8b:dc:df:18:91:60:9a:d9:ad:28:eb:97:07:ee:6a:37:4b:90:
ce:2e:3b:45:93:25:b7:4b:5a:c6:7b:c7:77:b0:dd:f9:28:c2:
24:9d:ad:1a:7f:10:16:2d:22:54:db:f5:14:e5:e4:9e:d9:2c:
76:43:8b:4d:28:7a:a1:5d:1b:18:77:b0:06:70:29:bb:11:33:
6f:84:d1:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inFQkk+Bx9BpaZV+3GeYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ODI3OTE3MzZjZGRkZDEzMjhkMGRkMGRlY2FlOTJjMDU4
ZDZmMjUwHhcNMjYwNDE4MjIwMDQ3WhcNMjYwNDE5MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg3YzMxNWEwYmM4MjZmNjRlMTkwZTBhNDFmNzNjMTYyYjAyMGZjOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gmTbwZ/ZQi0xla60GKn6tM58uci
AUniGIbiVWFgrrjfipK0p8h1ZgUeQTnA7F4PxLrRS0TJ7djcXBu5+wPeN6NA/cA8
6f38+4urXXeC9+03eHTxpBKFjr74dYvyD68CzN5BMyD/UYoq+xbGoFQj6ZlOniwp
k67hkjJPl9qO+WNcM1y8/TccCmfq8MZd9S63PFyAby+wUGD+bsVFCCKOHIm2ay+z
ADkFXs2mAFzaFG37pYy+BTxWnkZzTX0JRCbc7nuY758528WsXPnAwTKJEj+ThA0o
nlviGcJ6pKIo/7ncPXTQUuOJyxjJJrErbWYRtZ49a8wnDF7eacFz7duetQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwxWgvIJvZOGQ4KQfc8FisCD8mpMB8GA1UdIwQY
MBaAFNmCeRc2zd3RMo0N0N7K6SwFjW8lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYt
Y2E2YTFjYzgxYTIyLzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jMjEzZDQtM2U0YS00OWU2LTliMWYtY2E2YTFjYzgxYTIy
LzEvMllKNUZ6Yk4zZEV5alEzUTNzcnBMQVdOYnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnszRjjGK
flmEQseSS+fRQ9fkjbQDe2Afo0WEIGBzBl4G6WzgcP+lOOF5RpyWbq1lkbYFlI7E
1VraSQ2Pub0m9iOUh/SZgoUGlfNN/X19Yv/Y5UDAOI/Gop/eyz4rKYjh1ysqUuGF
FIyDqXBRdTpMr5bvkviifwynSFJFYn2f9rpbvAY4j2WTCB4kM2OoOmKPrCEEFq45
kJFbb2keyMCdw9lPne//kvM5GKUaS3IORUMTVzJQi9zfGJFgmtmtKOuXB+5qN0uQ
zi47RZMlt0taxnvHd7Dd+SjCJJ2tGn8QFi0iVNv1FOXkntksdkOLTSh6oV0bGHew
BnApuxEzb4TRWA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:55 2026 by rpki-client