Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File: Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier: YmJRxwqYoy570pMEG1vTEbEqXcZw0oKFnPnnLK2oh0w=
Subject key identifier: A0:0E:66:83:FE:60:14:4D:08:35:83:56:68:4B:27:0E:AB:8C:CE:58
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 019D9BBF452D2F16C4928622D68765AC44C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number: 093A
Signing time: Fri 17 Apr 2026 14:01:36 +0000
Manifest this update: Fri 17 Apr 2026 14:01:36 +0000
Manifest next update: Sat 18 Apr 2026 14:01:36 +0000
Files and hashes: 1: Qt9b8eH_026x-QvzB2v7OUwPKW0.roa (hash: giCqVfLyiuosSKyEoDq9V/ttZpO9E78wjOrOmrwG9Bk=)
2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: cjxxxBB5Z9jlVgnjaQsNkUGE3dySR9v2UQ9JYpwNP1U=)
3: ctKt52Vn_3gdSjgBKmq9nexMId8.roa (hash: pa3+uZW+zhlAA0AIlYODpGm1QI32hEM/nvyibDrAp2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:45:2d:2f:16:c4:92:86:22:d6:87:65:ac:44:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Apr 17 14:01:36 2026 GMT
Not After : Apr 18 14:01:36 2026 GMT
Subject: CN=a00e6683fe60144d08358356684b270eab8cce58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:a3:8e:d5:d0:c8:7f:b1:8a:89:34:07:d7:
4c:3c:f3:c1:5e:55:9d:be:58:b0:87:14:99:ee:68:
91:50:d8:b0:ae:e9:95:d0:a9:ec:e9:8c:2c:5b:2d:
15:ad:56:7f:cb:21:77:4b:58:64:ec:ab:bb:2c:30:
ac:a0:91:05:0c:4d:91:f6:16:0c:a2:40:e8:c5:ea:
aa:1f:14:98:7c:2a:17:09:8a:bf:0f:e8:ed:53:64:
02:6d:dc:59:de:c0:27:12:35:3a:62:5b:7b:83:71:
94:0e:1f:65:97:64:c2:c5:f8:ed:9f:a7:19:40:3c:
2c:7e:4a:8c:e5:ad:bf:fa:f2:b1:9c:a7:d2:cb:59:
2e:6d:05:d3:55:90:17:19:51:c2:84:d8:72:af:17:
0f:10:3e:aa:7d:6f:c5:90:64:1c:3a:15:3a:f1:4e:
c1:ec:88:17:48:4b:2f:cc:c6:dd:eb:a2:67:2a:7f:
6a:21:09:f0:73:fd:90:f2:21:24:34:74:3d:16:e1:
0f:83:3a:f3:3d:45:4a:b2:11:7e:a0:e0:60:ca:7c:
db:9a:ee:9a:e6:07:6d:bb:2a:7d:5b:5d:83:46:2d:
e8:ae:7a:7f:9f:39:1a:7d:73:95:9b:21:5c:ba:0c:
27:25:53:34:98:f4:d7:6e:a8:75:14:ce:05:cf:d6:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0E:66:83:FE:60:14:4D:08:35:83:56:68:4B:27:0E:AB:8C:CE:58
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ad:43:9e:b1:01:cd:93:26:3b:73:30:49:e5:12:ed:a4:32:
cd:7d:01:a4:02:aa:21:12:50:70:48:24:44:c4:12:8b:85:95:
69:60:d3:38:36:c1:d9:9d:10:ba:04:07:0c:44:85:29:33:37:
9d:94:3c:6c:4b:73:35:e3:ae:52:b3:27:8d:0e:7f:fd:a6:ec:
4a:df:f7:68:ff:ea:bc:5f:0f:8d:a4:62:f0:3e:e7:bf:72:3e:
54:64:52:5c:5d:74:a2:9f:c9:38:88:4a:d2:c4:fb:c2:c5:1f:
c4:ae:8e:c1:ae:01:c4:34:f9:f3:0a:db:53:68:80:47:21:bd:
78:6d:43:0f:a5:19:b9:b1:6a:c1:9b:04:2c:d9:96:e5:87:a7:
9d:50:db:93:f2:b3:e2:bc:d2:66:db:c7:4d:6c:1f:da:1e:a2:
aa:6d:29:73:60:28:4c:e9:73:f0:db:52:bc:0b:d5:4f:f2:9a:
2a:b3:5f:26:b1:07:fa:f6:59:1e:4d:d8:9a:eb:5f:a0:5d:96:
a8:b5:9a:f9:16:eb:b0:1e:f9:71:77:b5:51:37:9b:ef:8f:ab:
2a:8b:eb:87:58:df:ce:f3:62:58:bb:9a:65:72:2e:1b:ef:0f:
f1:21:93:fd:a5:db:14:e9:8c:0c:1d:36:1f:10:45:46:d4:8f:
43:0b:bd:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bv0UtLxbEkoYi1odlrETCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNWQ1YjY0NGUyMmZiNDg4ZTRkNmMwMDEyYjBhYWJmMjM4
ZTYxZTUwHhcNMjYwNDE3MTQwMTM2WhcNMjYwNDE4MTQwMTM2WjAzMTEwLwYDVQQD
EyhhMDBlNjY4M2ZlNjAxNDRkMDgzNTgzNTY2ODRiMjcwZWFiOGNjZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYWjjtXQyH+xiok0B9dMPPPBXlWd
vliwhxSZ7miRUNiwrumV0Kns6YwsWy0VrVZ/yyF3S1hk7Ku7LDCsoJEFDE2R9hYM
okDoxeqqHxSYfCoXCYq/D+jtU2QCbdxZ3sAnEjU6Ylt7g3GUDh9ll2TCxfjtn6cZ
QDwsfkqM5a2/+vKxnKfSy1kubQXTVZAXGVHChNhyrxcPED6qfW/FkGQcOhU68U7B
7IgXSEsvzMbd66JnKn9qIQnwc/2Q8iEkNHQ9FuEPgzrzPUVKshF+oOBgynzbmu6a
5gdtuyp9W12DRi3ornp/nzkafXOVmyFcugwnJVM0mPTXbqh1FM4Fz9bYkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAOZoP+YBRNCDWDVmhLJw6rjM5YMB8GA1UdIwQY
MBaAFGNdW2ROIvtIjk1sABKwqr8jjmHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGIt
ZjVhZjYxNmI1NDgzLzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mZTdmYzItNDFjYy00NjdkLTk4MGItZjVhZjYxNmI1NDgz
LzEvWTExYlpFNGktMGlPVFd3QUVyQ3F2eU9PWWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcK1DnrEB
zZMmO3MwSeUS7aQyzX0BpAKqIRJQcEgkRMQSi4WVaWDTODbB2Z0QugQHDESFKTM3
nZQ8bEtzNeOuUrMnjQ5//absSt/3aP/qvF8PjaRi8D7nv3I+VGRSXF10op/JOIhK
0sT7wsUfxK6Owa4BxDT58wrbU2iARyG9eG1DD6UZubFqwZsELNmW5YennVDbk/Kz
4rzSZtvHTWwf2h6iqm0pc2AoTOlz8NtSvAvVT/KaKrNfJrEH+vZZHk3YmutfoF2W
qLWa+RbrsB75cXe1UTeb74+rKovrh1jfzvNiWLuaZXIuG+8P8SGT/aXbFOmMDB02
HxBFRtSPQwu9nw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:44 2026 by rpki-client