Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: Y4s2kC2jPfvGe95TlZD38j28mxEJIcqZDRX937lbkV4=
Subject key identifier: 7B:FB:03:64:8A:E0:1E:4A:11:01:BE:8B:88:BE:77:E3:DB:16:FF:36
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019D999908217C15287CCA63788E245167DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 10F6
Signing time: Fri 17 Apr 2026 04:00:36 +0000
Manifest this update: Fri 17 Apr 2026 04:00:36 +0000
Manifest next update: Sat 18 Apr 2026 04:00:36 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: CpxQ6jxvgMX9JbY3nM6x6mSr3Rl5d+KspJ3dN15HohA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:08:21:7c:15:28:7c:ca:63:78:8e:24:51:67:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Apr 17 04:00:36 2026 GMT
Not After : Apr 18 04:00:36 2026 GMT
Subject: CN=7bfb03648ae01e4a1101be8b88be77e3db16ff36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:45:33:86:f0:cc:52:5e:dd:0a:51:82:dd:
31:e1:21:08:2a:5e:ee:25:76:0b:18:01:fc:af:e7:
0a:32:be:cf:c0:71:4d:c0:a3:7a:33:df:2d:68:4c:
91:d0:61:ba:75:94:e1:50:87:51:57:df:70:ce:c2:
54:1b:39:72:f9:f9:c1:82:03:fa:4c:7e:11:ca:4c:
7e:8f:82:de:ae:f1:88:0c:da:f5:63:df:e4:0d:1b:
d2:ff:88:9e:a0:1c:26:de:fb:03:86:c6:d4:e5:f8:
ee:bd:b3:a3:8c:f0:73:d2:3e:4d:34:67:2a:9c:c4:
b8:47:18:93:16:c4:8d:e4:d6:04:60:26:1f:7b:b7:
a6:3d:9e:07:24:0a:0c:2f:3a:b0:a6:7e:1b:d7:eb:
5b:0c:ca:c4:26:46:3a:6f:4f:04:1c:66:13:73:d9:
2e:c2:be:83:8c:c0:fd:7d:97:29:51:44:de:40:d6:
f1:37:01:57:71:d9:da:d5:fa:22:aa:77:23:17:f2:
89:d2:a7:f7:59:9f:19:66:32:c4:62:fe:8d:03:c4:
19:9f:10:c5:05:b3:94:a4:ca:e9:6b:70:0a:05:ed:
41:b2:9a:d5:18:ef:4c:f6:35:e4:2a:16:60:71:f3:
5c:dc:e1:5e:c3:14:0f:5a:28:95:e2:d0:d0:cd:70:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:FB:03:64:8A:E0:1E:4A:11:01:BE:8B:88:BE:77:E3:DB:16:FF:36
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:9e:7e:24:f6:86:58:9b:93:01:4c:2f:91:a0:13:f6:9e:
79:c0:93:e5:97:8d:2a:fe:50:bd:37:43:95:e1:0c:54:27:d0:
b3:f5:6c:29:a3:5f:93:db:92:ba:33:84:ad:20:cc:0d:96:fc:
a6:1f:b5:2c:24:bc:0e:96:ab:d1:b1:fb:1f:c2:74:0b:bd:c6:
b0:38:27:90:bf:35:1a:82:f7:9d:d0:c1:7d:21:e9:3a:99:f2:
f0:da:46:17:6a:98:f7:7a:60:73:0b:3f:2c:62:74:0d:ea:f7:
92:c2:8e:00:20:f2:49:f5:21:5e:e3:28:0c:61:23:af:2e:17:
d8:a4:f2:ad:35:fb:ec:ef:a7:c9:1d:7e:dc:c6:aa:bf:49:03:
e6:de:e2:1e:5d:65:04:4a:68:46:83:d4:b8:f3:10:76:0e:bc:
ed:d8:d0:c3:1e:2e:d3:0a:e4:34:4b:d2:58:0a:71:51:5d:34:
85:a6:67:06:0a:f1:d2:5a:4e:b5:87:e9:1c:c7:19:12:e7:df:
92:1e:5b:3c:74:aa:b8:a9:f4:aa:6a:cd:ea:54:09:40:63:cf:
3f:62:63:3c:c4:b8:ff:7a:99:97:a9:11:34:ed:70:5a:90:5b:
35:fc:96:df:1c:62:a5:c2:59:43:70:21:98:da:75:be:5d:92:
86:70:b4:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQghfBUofMpjeI4kUWfbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjYwNDE3MDQwMDM2WhcNMjYwNDE4MDQwMDM2WjAzMTEwLwYDVQQD
Eyg3YmZiMDM2NDhhZTAxZTRhMTEwMWJlOGI4OGJlNzdlM2RiMTZmZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWNFM4bwzFJe3QpRgt0x4SEIKl7u
JXYLGAH8r+cKMr7PwHFNwKN6M98taEyR0GG6dZThUIdRV99wzsJUGzly+fnBggP6
TH4Rykx+j4LervGIDNr1Y9/kDRvS/4ieoBwm3vsDhsbU5fjuvbOjjPBz0j5NNGcq
nMS4RxiTFsSN5NYEYCYfe7emPZ4HJAoMLzqwpn4b1+tbDMrEJkY6b08EHGYTc9ku
wr6DjMD9fZcpUUTeQNbxNwFXcdna1foiqncjF/KJ0qf3WZ8ZZjLEYv6NA8QZnxDF
BbOUpMrpa3AKBe1BsprVGO9M9jXkKhZgcfNc3OFewxQPWiiV4tDQzXBbOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHv7A2SK4B5KEQG+i4i+d+PbFv82MB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOyefiT2
hlibkwFML5GgE/aeecCT5ZeNKv5QvTdDleEMVCfQs/VsKaNfk9uSujOErSDMDZb8
ph+1LCS8Dpar0bH7H8J0C73GsDgnkL81GoL3ndDBfSHpOpny8NpGF2qY93pgcws/
LGJ0Der3ksKOACDySfUhXuMoDGEjry4X2KTyrTX77O+nyR1+3Maqv0kD5t7iHl1l
BEpoRoPUuPMQdg687djQwx4u0wrkNEvSWApxUV00haZnBgrx0lpOtYfpHMcZEuff
kh5bPHSquKn0qmrN6lQJQGPPP2JjPMS4/3qZl6kRNO1wWpBbNfyW3xxipcJZQ3Ah
mNp1vl2ShnC00w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:24 2026 by rpki-client