Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
File: y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft (raw, json)
Hash identifier: /f0WPwBU8JFkes1dsEikKYMkE1zsIh30M+kq+81QOog=
Subject key identifier: 89:1B:CA:E7:DD:5D:FE:B7:1B:93:98:31:96:0E:9F:CA:C1:DA:80:09
Authority key identifier: CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
Certificate issuer: /CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Certificate serial: 019D98188C9EDD71EA88CEC587FBE66C191B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
Manifest number: 0D9C
Signing time: Thu 16 Apr 2026 21:00:38 +0000
Manifest this update: Thu 16 Apr 2026 21:00:38 +0000
Manifest next update: Fri 17 Apr 2026 21:00:38 +0000
Files and hashes: 1: gISB5XKycKPv5hrE5ng7DwaTFZs.roa (hash: sJhtL2wlmJpjXzVIWne8fY+2r1IBnfbZ2BjwXpNs+R8=)
2: y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl (hash: WAKpnW1W2AeKSS6DMk+OXbGyP07o2fPzy7E+eQNxFnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:8c:9e:dd:71:ea:88:ce:c5:87:fb:e6:6c:19:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbb996ff055d6575e01f2e64d9a3b382834702d1
Validity
Not Before: Apr 16 21:00:38 2026 GMT
Not After : Apr 17 21:00:38 2026 GMT
Subject: CN=891bcae7dd5dfeb71b939831960e9fcac1da8009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:14:7b:f8:7b:18:92:a6:cd:f9:d9:18:06:
da:5c:f6:49:1e:27:d5:68:81:70:e5:f5:18:cc:71:
19:c0:10:a3:c8:8a:6c:6e:55:99:06:75:ea:a3:f2:
f1:0e:a3:d7:eb:f3:0c:29:2c:23:73:ad:c5:84:23:
1b:b9:cf:bf:b5:f4:6d:b7:02:71:10:4d:6d:bb:c2:
a4:5a:e7:c0:01:e9:43:4b:3a:ad:20:da:85:9a:65:
2b:76:97:32:47:43:5d:b4:1c:e8:e1:2a:6a:10:18:
2e:18:1e:db:f9:75:cd:fe:52:22:7d:b3:68:5d:83:
0d:9d:20:c2:56:ab:1e:4b:ab:48:49:21:66:1a:b6:
cd:ae:24:d1:ac:6f:d5:23:e4:33:b2:13:c7:ea:ab:
37:15:61:67:59:4d:68:a7:8a:b8:72:81:f6:fc:1f:
82:76:47:f3:3a:b2:02:e2:2e:be:ed:46:11:19:ff:
d6:d0:b0:55:ca:0a:71:41:64:bb:18:b0:cb:23:d2:
ea:5f:1e:43:86:3d:10:d9:92:ca:40:7a:07:27:c7:
cd:64:0c:fb:f8:16:c2:2b:a8:1a:6b:90:7d:db:d5:
18:8e:b6:a5:9e:42:dd:99:71:0f:10:78:3e:d2:2d:
6c:46:df:5e:1b:51:aa:7d:2e:99:18:73:07:7f:74:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1B:CA:E7:DD:5D:FE:B7:1B:93:98:31:96:0E:9F:CA:C1:DA:80:09
X509v3 Authority Key Identifier:
keyid:CB:B9:96:FF:05:5D:65:75:E0:1F:2E:64:D9:A3:B3:82:83:47:02:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y7mW_wVdZXXgHy5k2aOzgoNHAtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5571f9-d9bb-4e78-bad6-09d4231c1c99/1/y7mW_wVdZXXgHy5k2aOzgoNHAtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:99:21:1c:10:db:ce:71:ef:1a:29:d6:13:f1:d3:4e:4d:ac:
63:8a:00:bf:0f:98:3b:89:8b:a0:56:13:8c:de:ea:68:d1:ab:
17:fa:e4:f9:c1:e7:4b:ff:4a:3b:48:30:56:f9:3f:34:09:82:
b7:81:5e:56:d3:59:85:31:08:cf:4d:ea:90:32:d5:84:d2:2d:
53:3a:23:61:29:3a:d7:9a:61:d0:7e:05:12:c5:14:ab:21:fe:
9c:a9:08:a8:b4:a0:31:34:eb:95:4a:79:ab:cd:1e:2f:37:c3:
03:a3:77:fe:a8:f5:48:e2:e7:a7:c9:be:d3:d8:38:42:8f:2a:
1a:bf:96:7d:c9:86:c4:3f:8e:57:1f:21:ad:6d:13:2c:7e:cd:
d9:ca:2e:e9:36:e3:58:29:bb:57:98:17:44:ab:6a:0c:8b:f6:
b5:4e:28:95:d7:e7:d5:05:15:00:1b:94:42:04:b5:6c:78:e3:
18:2b:03:88:cf:ee:78:81:46:71:ec:a9:72:b4:a6:9f:5f:68:
ce:cf:dd:fa:d5:9d:3a:a2:35:d8:54:12:e2:fd:ca:47:41:ec:
ad:e3:77:7e:6e:7e:a7:75:fc:1a:a5:29:66:f3:6d:75:07:bb:
8a:dc:3c:a2:99:c3:70:b6:54:c5:ba:15:c4:42:1d:c2:12:c0:
f0:88:d0:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGIye3XHqiM7Fh/vmbBkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiYjk5NmZmMDU1ZDY1NzVlMDFmMmU2NGQ5YTNiMzgyODM0
NzAyZDEwHhcNMjYwNDE2MjEwMDM4WhcNMjYwNDE3MjEwMDM4WjAzMTEwLwYDVQQD
Eyg4OTFiY2FlN2RkNWRmZWI3MWI5Mzk4MzE5NjBlOWZjYWMxZGE4MDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS4Ue/h7GJKmzfnZGAbaXPZJHifV
aIFw5fUYzHEZwBCjyIpsblWZBnXqo/LxDqPX6/MMKSwjc63FhCMbuc+/tfRttwJx
EE1tu8KkWufAAelDSzqtINqFmmUrdpcyR0NdtBzo4SpqEBguGB7b+XXN/lIifbNo
XYMNnSDCVqseS6tISSFmGrbNriTRrG/VI+QzshPH6qs3FWFnWU1op4q4coH2/B+C
dkfzOrIC4i6+7UYRGf/W0LBVygpxQWS7GLDLI9LqXx5Dhj0Q2ZLKQHoHJ8fNZAz7
+BbCK6gaa5B929UYjralnkLdmXEPEHg+0i1sRt9eG1GqfS6ZGHMHf3Rr+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkbyufdXf63G5OYMZYOn8rB2oAJMB8GA1UdIwQY
MBaAFMu5lv8FXWV14B8uZNmjs4KDRwLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYt
MDlkNDIzMWMxYzk5LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81NTcxZjktZDliYi00ZTc4LWJhZDYtMDlkNDIzMWMxYzk5
LzEveTdtV193VmRaWFhnSHk1azJhT3pnb05IQXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapkhHBDb
znHvGinWE/HTTk2sY4oAvw+YO4mLoFYTjN7qaNGrF/rk+cHnS/9KO0gwVvk/NAmC
t4FeVtNZhTEIz03qkDLVhNItUzojYSk615ph0H4FEsUUqyH+nKkIqLSgMTTrlUp5
q80eLzfDA6N3/qj1SOLnp8m+09g4Qo8qGr+WfcmGxD+OVx8hrW0TLH7N2cou6Tbj
WCm7V5gXRKtqDIv2tU4oldfn1QUVABuUQgS1bHjjGCsDiM/ueIFGceypcrSmn19o
zs/d+tWdOqI12FQS4v3KR0HsreN3fm5+p3X8GqUpZvNtdQe7itw8opnDcLZUxboV
xEIdwhLA8IjQpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:12 2026 by rpki-client