Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
File: y9lerW0qHa8u9oestMKedgdrKAk.mft (raw, json)
Hash identifier: EYTETvjYdgb+xjE8muggi0UV1pSeNGRI/nK6AU+E4ec=
Subject key identifier: 16:BA:8B:79:3C:1A:18:11:53:D3:0F:C3:90:5F:67:AB:FD:88:D9:B1
Authority key identifier: CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
Certificate issuer: /CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Certificate serial: 019D9B513C3C24A0A61DFCA001026562905E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
Manifest number: 0CA4
Signing time: Fri 17 Apr 2026 12:01:25 +0000
Manifest this update: Fri 17 Apr 2026 12:01:25 +0000
Manifest next update: Sat 18 Apr 2026 12:01:25 +0000
Files and hashes: 1: ghGc2Lv7TcfrmuH9YITRm12nsM0.roa (hash: qhSH7nSb+oaxjGNhsFsYHQ6vShtNbUb1gAOSPr8PZts=)
2: y9lerW0qHa8u9oestMKedgdrKAk.crl (hash: T/1OIrFxgZpmlxBZT27Uo92ASJaZh4ccjiJdUPhbIdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:3c:3c:24:a0:a6:1d:fc:a0:01:02:65:62:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd95ead6d2a1daf2ef687acb4c29e76076b2809
Validity
Not Before: Apr 17 12:01:25 2026 GMT
Not After : Apr 18 12:01:25 2026 GMT
Subject: CN=16ba8b793c1a181153d30fc3905f67abfd88d9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:e6:2b:1a:b1:d1:d0:38:14:77:09:6b:75:
06:cb:41:22:cc:ed:f5:ef:c6:1a:bd:ce:59:d7:b7:
e9:f3:ab:27:06:7c:33:4b:5e:4c:26:6a:77:0f:07:
f8:a2:9b:a1:1e:99:84:36:04:2e:c0:cb:49:01:f6:
b3:27:a1:5a:e8:4e:18:77:84:9c:f5:7a:b1:7e:c8:
ff:a1:7e:dc:00:e3:12:7b:d9:87:75:5d:3a:32:0d:
c7:73:6c:cc:9b:98:fe:70:a1:14:ba:94:ba:4c:7b:
3b:bc:8b:c7:9e:31:24:d9:b2:7b:0f:82:6e:4d:3b:
f9:9c:ea:99:03:dd:bd:f4:6a:1f:72:63:c6:ae:ec:
32:94:c8:5e:c5:04:7f:46:f1:0d:40:31:65:c2:bb:
26:06:a8:0c:09:34:d1:c9:ae:90:e9:b5:09:aa:a2:
24:58:e6:cb:25:54:1a:88:04:e9:39:1d:9f:7a:ee:
dd:fc:17:97:11:2b:cb:1f:47:66:c4:e8:fb:d8:95:
e4:ff:31:1c:39:f5:6e:ab:11:e4:75:21:5b:de:24:
d8:26:3c:c6:22:fa:43:51:4e:83:1f:5d:27:ba:a8:
97:dc:99:9e:93:38:f0:75:e0:c6:73:8d:6b:eb:45:
0c:c3:03:36:0e:24:bb:5e:2d:41:86:a0:2d:5f:f7:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:8B:79:3C:1A:18:11:53:D3:0F:C3:90:5F:67:AB:FD:88:D9:B1
X509v3 Authority Key Identifier:
keyid:CB:D9:5E:AD:6D:2A:1D:AF:2E:F6:87:AC:B4:C2:9E:76:07:6B:28:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9lerW0qHa8u9oestMKedgdrKAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16463-89be-4f5b-b2f2-acc41cacf7e1/1/y9lerW0qHa8u9oestMKedgdrKAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:82:d7:3a:5e:ce:98:b0:a8:c1:e6:5a:36:de:d1:f4:52:fd:
b2:e6:88:5e:53:a4:8b:65:23:19:3d:6a:24:d8:87:f0:94:f8:
e4:f3:c9:06:23:89:0e:2d:31:d9:e6:4a:0f:67:92:30:28:e2:
fe:0a:b4:ec:a7:1e:ac:2d:16:be:eb:23:e2:28:0e:51:fe:85:
de:9e:5b:78:93:ea:33:38:f5:65:b5:97:cc:22:d1:45:65:e4:
b0:ad:ec:d8:11:c7:fa:59:8a:c9:d9:46:0a:d8:32:b1:e7:9d:
37:1e:54:08:ee:07:33:62:b5:62:4e:d8:ff:59:a1:c5:c0:f6:
a4:57:70:ab:01:ec:55:7c:9a:61:21:12:ce:08:a6:e8:5e:74:
04:2a:28:f8:ba:ff:90:81:69:74:9f:ee:e7:60:b3:73:02:d9:
89:f6:c8:67:fc:16:63:a2:95:5b:61:a3:fa:ee:04:3e:a7:1e:
a2:9a:fb:ab:be:11:d0:57:fa:e0:4a:fb:76:6d:9a:89:6e:db:
00:bc:bc:30:41:fd:06:ba:2f:83:bb:00:08:fb:69:20:dc:c3:
b8:42:17:f2:0a:67:8b:52:29:d7:48:72:9a:b6:76:71:94:c0:
6c:f6:60:0f:e0:34:c7:13:04:bc:70:2a:a3:2c:3c:9b:19:b2:
11:67:f0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:20 2026 by rpki-client