Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft (raw, json)
Hash identifier: vbDyU/kk2Gg7Gtg+0Oyz2JYDXcYFWHEPYRb65+D1j5g=
Subject key identifier: F3:EE:1F:06:CA:7A:BC:EF:51:A6:F8:FB:E6:77:4D:9A:26:82:87:11
Authority key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Certificate issuer: /CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Certificate serial: 019D99D017CBFAED337F6B6E10F6E4A83D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
Manifest number: 1925
Signing time: Fri 17 Apr 2026 05:00:44 +0000
Manifest this update: Fri 17 Apr 2026 05:00:44 +0000
Manifest next update: Sat 18 Apr 2026 05:00:44 +0000
Files and hashes: 1: 8k6e6tLHuHflnB7ormvclxauUmc.roa (hash: s9/elzDSDtEaxUqqdzsznzVcfRJE4413P0clrqDdTG8=)
2: y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl (hash: FbzFAQGmxN0LarP4ehJy/u0mf6qikUf7+qublj3AAFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:17:cb:fa:ed:33:7f:6b:6e:10:f6:e4:a8:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Validity
Not Before: Apr 17 05:00:44 2026 GMT
Not After : Apr 18 05:00:44 2026 GMT
Subject: CN=f3ee1f06ca7abcef51a6f8fbe6774d9a26828711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a3:9e:85:84:a0:b4:1c:ef:b3:84:b7:05:87:
e9:e3:b9:02:9c:e4:9b:6f:ac:04:9c:e4:f5:4f:33:
50:dd:4f:ec:b0:80:a0:a1:af:f5:f0:1b:df:73:05:
11:5e:91:84:6d:18:68:2c:09:53:e5:3a:8f:81:14:
a5:eb:c9:47:0f:69:b4:09:af:0c:a1:52:ba:e3:5c:
d0:53:63:47:91:36:ac:c1:72:98:86:8d:02:26:47:
05:1a:b9:20:06:04:95:cd:2b:bc:e8:6b:c9:2d:b6:
5a:0c:4f:29:db:57:ca:5e:9b:76:f1:90:7b:0d:38:
bf:7b:cf:80:5c:70:24:80:1b:86:6a:a4:48:6f:25:
02:83:0d:e0:88:50:ee:71:77:f8:5d:a5:b6:61:7b:
02:ca:87:89:d6:15:9a:90:ff:d0:dc:51:09:69:36:
5c:0e:c8:b7:42:2e:18:c5:9a:96:71:1b:d5:64:45:
27:7f:93:ee:e7:a8:82:07:b3:e9:91:54:2e:8c:6f:
72:87:0f:0f:41:60:b5:c4:be:cc:88:e6:0a:7a:57:
60:37:0e:40:37:45:26:2e:00:6f:e7:e6:b9:ed:61:
e3:2b:04:0c:16:3b:01:e7:e9:58:0d:50:e4:b1:96:
a5:ad:be:94:6a:aa:a0:83:89:c3:1f:d7:4b:3f:53:
77:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EE:1F:06:CA:7A:BC:EF:51:A6:F8:FB:E6:77:4D:9A:26:82:87:11
X509v3 Authority Key Identifier:
keyid:CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:ca:31:f8:eb:e6:95:1e:c9:53:89:46:b4:62:30:d2:17:
64:a9:9e:94:a6:9d:05:59:dd:9b:36:50:ff:f2:e7:7a:2b:7a:
87:2a:cc:fc:2d:69:e2:4a:68:2e:e5:8f:05:b8:cb:72:45:80:
9f:59:4f:bc:6b:59:39:d6:59:14:6f:c3:37:0a:ea:b1:57:b4:
56:42:83:18:cd:1b:58:9f:9c:81:a4:99:1f:f8:ec:f6:3d:57:
6c:b2:e1:bc:f7:f7:f3:ff:80:1b:fc:d1:d5:f2:6e:d8:aa:7a:
c2:6d:b1:35:1f:1b:d2:f8:d6:17:2a:fa:92:6c:7d:3f:52:94:
7e:76:cb:d6:8d:91:18:33:c9:9f:c7:1e:1a:33:e6:1f:47:e4:
2d:3e:a8:d3:f8:99:d9:29:ec:a4:85:2b:3a:2d:e0:e0:ea:0e:
bf:01:65:f2:5c:70:d6:26:b8:74:15:c6:56:d9:10:11:58:16:
fe:7e:82:b4:fe:87:e6:b0:14:d4:8e:80:70:af:9b:ea:41:fc:
97:07:33:79:60:7a:cc:07:cd:3f:b1:fa:0f:28:41:f7:10:53:
6c:57:e7:fe:1d:e8:e8:86:21:29:08:55:7d:e5:6b:46:82:09:
dd:16:f8:71:50:43:ca:9d:8a:7f:55:95:40:a9:bf:58:91:df:
61:b5:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:33 2026 by rpki-client