Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
File: y5l80U86a8NEosk47g_etU0iEkA.mft (raw, json)
Hash identifier: 0tHj2S5bkfZoCYoVH5VinBBE5lBVJuUdoi6giykiFRk=
Subject key identifier: 14:93:52:89:7E:60:FC:FB:13:98:36:E2:04:E9:09:26:82:C6:4C:33
Authority key identifier: CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
Certificate issuer: /CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Certificate serial: 019D9AE34159648CD8C4EAE034FD5C49CF6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
Manifest number: 0696
Signing time: Fri 17 Apr 2026 10:01:17 +0000
Manifest this update: Fri 17 Apr 2026 10:01:17 +0000
Manifest next update: Sat 18 Apr 2026 10:01:17 +0000
Files and hashes: 1: UeDl4wpZIqQ0I2mlhCHJggGUTGI.roa (hash: jpEDe24rlUn3pxTT1qasWKlz+X8T9bS0HUXdOUhAmHA=)
2: y5l80U86a8NEosk47g_etU0iEkA.crl (hash: vjky1pS7ZnX77pr1PRsVjeB12DB8C3yUObxcikHMkeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:41:59:64:8c:d8:c4:ea:e0:34:fd:5c:49:cf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb997cd14f3a6bc344a2c938ee0fdeb54d221240
Validity
Not Before: Apr 17 10:01:17 2026 GMT
Not After : Apr 18 10:01:17 2026 GMT
Subject: CN=149352897e60fcfb139836e204e9092682c64c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:2d:43:1a:4b:c3:bd:34:48:0f:66:f7:ec:
f6:15:ec:4d:a8:3c:3f:79:a7:0a:ea:25:1b:1a:c1:
14:85:b2:33:77:32:a3:93:00:aa:96:28:28:6f:34:
a2:1f:16:09:08:a2:d8:44:53:d8:ff:8b:0f:f4:7f:
88:20:cc:a9:d0:57:f2:3a:74:c1:8c:a6:1f:e9:45:
04:63:ca:e4:75:aa:ab:2e:ce:8b:3b:69:a8:3b:f4:
8b:47:32:34:49:e7:5b:7a:e2:a2:16:89:41:9f:19:
38:52:8a:b9:98:02:9c:06:17:e4:d6:a6:b4:0a:44:
5b:f6:06:2b:7f:30:8a:1a:df:b9:51:45:0b:53:ec:
d1:e2:bb:63:84:09:89:dd:bc:cf:99:7a:96:cd:e6:
53:ab:cb:7e:0a:1e:29:f4:78:55:5c:e7:c4:d8:ca:
ed:ea:06:ca:f0:dd:5f:8a:65:55:07:78:4f:5e:ac:
f1:5b:8d:a9:77:42:e3:92:12:2e:6c:3b:82:b7:56:
8f:0d:f5:f4:70:48:df:05:38:63:5a:37:56:bf:52:
a6:b0:7d:f3:b9:2a:a8:da:ff:ae:98:0f:ff:30:66:
bb:a9:75:ee:8c:40:93:c0:49:6f:30:79:1c:e2:59:
21:6a:28:71:c1:75:e6:d5:59:af:21:92:9e:c0:98:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:93:52:89:7E:60:FC:FB:13:98:36:E2:04:E9:09:26:82:C6:4C:33
X509v3 Authority Key Identifier:
keyid:CB:99:7C:D1:4F:3A:6B:C3:44:A2:C9:38:EE:0F:DE:B5:4D:22:12:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5l80U86a8NEosk47g_etU0iEkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/22885a-42c8-47e2-90ad-16e8fe3c506f/1/y5l80U86a8NEosk47g_etU0iEkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4f:2a:41:c5:bc:a7:93:8d:58:25:2e:0e:4c:0f:9a:d5:d0:
58:17:00:c8:a5:f7:49:e1:22:9b:cd:17:1c:3d:64:3e:54:1b:
27:85:c3:aa:1d:20:46:a0:59:04:5e:0f:d6:b2:3b:9a:84:13:
f9:0d:2a:ad:01:3f:a6:10:b9:24:35:8c:9d:4c:bb:c3:14:18:
22:fb:cc:8a:c9:c3:fd:ca:63:4f:b4:d2:0f:7b:ea:7f:61:c7:
39:1b:07:42:39:35:64:db:32:7a:bb:a1:ec:69:55:2c:d2:57:
97:91:ee:a4:2b:5f:ee:19:62:b9:ad:ae:bd:ee:44:bc:f0:c1:
b0:d8:72:ba:45:7f:94:1b:e3:cb:b7:06:38:67:df:f1:ba:2c:
49:53:4d:1b:b6:6d:ed:71:45:2b:00:0d:7d:7b:cf:3e:2f:4c:
80:ac:49:da:0b:27:5e:7c:9b:bd:06:fb:7f:59:58:c0:b5:6c:
c9:03:83:f1:3d:22:3d:1a:8d:38:32:9f:d8:02:d8:de:41:ae:
fa:80:69:05:a7:ca:e5:dc:ef:2d:db:60:8d:39:e5:de:85:a6:
c4:0f:28:30:c2:c1:12:67:b8:77:bf:57:b4:ed:ad:4e:1b:a4:
fa:90:d7:55:9d:40:70:68:6a:15:88:6e:9e:18:15:3e:0e:c3:
04:ae:1e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:09 2026 by rpki-client