Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
File: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft (raw, json)
Hash identifier: m1xM7100Umeg9XIWZsXMF5i6K2brge+kIqqYsQ6JG1c=
Subject key identifier: AD:EB:E5:E6:20:BF:C8:14:AE:01:E0:21:35:40:BB:5F:74:D9:EC:8C
Authority key identifier: FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
Certificate issuer: /CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Certificate serial: 019DA48A97486AF9E8787022A143E2EFD5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
Manifest number: 0BE4
Signing time: Sun 19 Apr 2026 07:00:39 +0000
Manifest this update: Sun 19 Apr 2026 07:00:39 +0000
Manifest next update: Mon 20 Apr 2026 07:00:39 +0000
Files and hashes: 1: AedgcNL8Ig_vUhjnBiaFjptK-_w.roa (hash: MX7QqsHI59rsb+txANol5zSV6ybo4HBl4AZOtA8MFPQ=)
2: RH-_P69EnY_CfaPrSpeX5TNaUIk.roa (hash: Kh8dA74PAzmGIT95EUvW7CM2vVdmLwl1/1xo5k7UCuA=)
3: _ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl (hash: VtkxbSewrLwHieHoW7JE3QZihYvpELjLL958AC77ZbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:97:48:6a:f9:e8:78:70:22:a1:43:e2:ef:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29e70af2f7e18cbc19f97cca8fd6c05099741d
Validity
Not Before: Apr 19 07:00:39 2026 GMT
Not After : Apr 20 07:00:39 2026 GMT
Subject: CN=adebe5e620bfc814ae01e0213540bb5f74d9ec8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:10:79:80:51:93:d3:43:d7:c3:1b:27:6a:
b4:e8:69:ad:c7:d4:56:7e:79:53:d0:82:13:eb:b6:
ee:aa:21:4d:9a:fb:dc:59:cd:18:12:be:2c:9a:18:
63:c5:dd:3a:7d:99:96:2b:39:8c:63:38:af:da:4e:
8c:e4:0a:c1:db:85:f2:99:1b:58:20:9a:eb:79:c6:
e4:7e:91:8f:9a:8a:7e:a9:64:fa:75:a6:04:7f:b1:
c7:6c:36:a3:7f:23:3b:08:74:bc:e8:e8:8a:5f:5b:
cc:ad:ec:b4:91:c5:dd:cf:86:56:d6:5e:43:b5:e0:
f7:68:ed:36:b3:eb:51:4f:ec:04:2b:b3:5f:29:bd:
35:af:62:79:30:1c:fa:1d:46:5c:95:12:74:1a:25:
da:83:86:6a:2d:ed:bf:5d:da:8f:ce:c8:c4:a4:bd:
fc:8f:06:d8:9f:ed:cc:56:89:78:c1:4d:b3:d0:db:
9a:6c:6e:6d:79:93:22:73:d2:18:56:f8:d0:45:c7:
a5:c6:6e:c3:a3:c1:15:0c:ac:76:0f:0c:b1:b9:51:
4b:1f:16:40:42:69:fd:0d:ed:fc:7d:82:36:44:e6:
c9:50:f2:04:af:5a:cf:b1:c4:87:75:c2:71:10:5c:
ef:f7:46:76:fe:ff:5f:f9:5a:9d:c4:aa:a8:48:7b:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EB:E5:E6:20:BF:C8:14:AE:01:E0:21:35:40:BB:5F:74:D9:EC:8C
X509v3 Authority Key Identifier:
keyid:FF:29:E7:0A:F2:F7:E1:8C:BC:19:F9:7C:CA:8F:D6:C0:50:99:74:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec2d89-44dd-4bab-ae7a-cf20e5b67fc8/1/_ynnCvL34Yy8Gfl8yo_WwFCZdB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9f:a9:6d:1d:43:98:78:53:61:9e:c3:d7:0f:2c:07:0e:85:
5a:f8:99:55:41:34:fa:0d:f1:6a:65:54:32:1b:7f:d9:9d:59:
c3:07:8b:82:96:2e:ec:58:dd:84:1a:04:1c:e1:8e:c7:c5:e3:
49:0a:cb:94:18:47:a5:db:0f:72:70:95:af:4a:4a:bc:0b:c2:
9c:f3:47:5e:20:2d:3c:4f:04:53:5d:fc:ae:61:12:20:f8:38:
3a:7c:39:08:69:ff:6a:f5:77:cb:52:9b:eb:47:1c:7c:26:aa:
7d:75:c3:24:53:80:df:75:5f:6d:bc:2c:97:ed:2c:dd:f7:9f:
58:7f:7e:fc:4c:39:d2:22:61:ed:5f:85:74:ab:c1:79:2f:f5:
d8:64:f5:9d:5c:17:71:48:3f:c6:54:2d:23:8a:7d:e5:76:4a:
b2:65:23:16:03:68:dc:79:53:fb:46:70:e9:85:8a:a1:fc:ca:
6b:47:9f:11:24:bd:e2:3c:ff:6c:fb:b3:96:e3:0c:45:f7:fe:
2d:aa:de:21:1b:49:8f:f1:cf:40:43:91:ac:a7:15:85:60:f3:
8d:e8:a7:88:0b:e4:b3:6e:65:fa:42:16:87:17:7d:df:1e:bb:
d5:07:2b:15:7d:e4:83:b1:d1:c9:f4:c9:2e:5f:10:0d:d0:2d:
1b:ef:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:29:21 2026 by rpki-client