Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
File: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft (raw, json)
Hash identifier: JesYFeU6VSH9XzVLh+oLzXDwEF9r43YhJgC3cHpeGQw=
Subject key identifier: 37:7C:86:81:E6:9B:53:2F:0C:AD:6D:FB:86:DC:CE:44:9E:00:10:AF
Authority key identifier: CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
Certificate issuer: /CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Certificate serial: 019D984FD5A5C331348C44C04DDBE2426BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
Manifest number: 09C9
Signing time: Thu 16 Apr 2026 22:01:02 +0000
Manifest this update: Thu 16 Apr 2026 22:01:02 +0000
Manifest next update: Fri 17 Apr 2026 22:01:02 +0000
Files and hashes: 1: Yk7Zbmt1P-AiIfkBAo3jSWo7vlg.roa (hash: GlJGpBWeWcsOeO74Qp/VHrmeF+iq8Z/F3boS8FvHYJQ=)
2: y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl (hash: 82Vo2dHQ8+9bIZfAT4VYHHe1bT/+hxdQQnSiLetHOxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:d5:a5:c3:31:34:8c:44:c0:4d:db:e2:42:6b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb5427fd5d20585e97c2f2771d4809bf6341daa1
Validity
Not Before: Apr 16 22:01:02 2026 GMT
Not After : Apr 17 22:01:02 2026 GMT
Subject: CN=377c8681e69b532f0cad6dfb86dcce449e0010af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:9e:d3:2e:c7:8d:92:8f:aa:9c:32:7c:fd:
cf:0d:d3:77:4f:73:ea:9e:70:ae:e9:b4:13:92:4c:
ea:d8:3d:5c:ea:1d:28:0f:fb:8e:07:19:7c:34:48:
d2:3d:04:34:65:9e:2f:75:ab:35:10:09:a9:ae:23:
24:b3:5c:4e:d9:d6:14:f1:5c:46:4a:ae:3e:c3:1c:
ad:11:ca:a7:78:91:6e:d5:48:81:c4:54:97:81:12:
35:b4:64:87:d1:32:e3:71:80:06:4b:9a:c1:8d:df:
92:79:28:8f:80:51:b4:2b:01:ea:83:bc:b2:82:52:
20:d6:88:4c:85:96:b4:07:a6:41:4b:9e:73:78:b5:
bd:3c:16:67:ea:0d:5e:74:d7:b7:e2:1e:5d:17:22:
b2:ef:c3:89:70:c9:ec:10:92:27:24:e4:02:ed:b5:
04:e3:3a:cf:1a:2b:ea:11:e7:6c:bb:c8:24:b1:99:
63:4e:5f:a1:60:c3:61:d8:53:29:45:83:2f:16:31:
65:cf:0b:a3:fb:06:35:3a:8b:2c:5a:99:55:59:46:
63:3a:ad:ec:16:66:ee:95:9a:28:d5:a9:59:00:2d:
04:ee:2c:c9:5a:53:c7:0a:c2:7d:5e:25:9b:f9:08:
d7:42:9b:29:41:05:55:8e:7c:09:0f:10:f9:31:aa:
8a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7C:86:81:E6:9B:53:2F:0C:AD:6D:FB:86:DC:CE:44:9E:00:10:AF
X509v3 Authority Key Identifier:
keyid:CB:54:27:FD:5D:20:58:5E:97:C2:F2:77:1D:48:09:BF:63:41:DA:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b89e86-bfb4-4af6-8448-1f0dd9fdf5f3/1/y1Qn_V0gWF6XwvJ3HUgJv2NB2qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:ba:f8:2c:6c:98:e4:9a:c9:f5:5b:08:26:97:71:07:ac:
3a:b4:b8:1e:ab:e3:47:bd:6b:bc:50:b6:35:2e:66:3b:69:d1:
01:e6:12:71:0b:45:e3:a7:bc:87:2f:e9:03:a9:87:ae:3b:4b:
ba:56:95:c3:ee:9f:99:b2:be:60:14:f8:b0:19:94:56:b6:3b:
5b:5b:55:2a:a9:0e:83:4b:84:60:00:91:68:35:ee:37:6f:b1:
7a:ce:ab:7e:81:8d:c6:95:dd:0a:2e:96:0a:47:d7:85:e5:1b:
51:27:28:a9:09:0e:a0:b4:85:9b:b6:bf:db:54:e9:3a:6f:1b:
2c:6b:82:bc:f0:56:a1:0f:bd:52:a1:78:75:78:c4:88:74:ee:
ff:03:bc:07:ea:9d:79:e5:44:61:6c:62:ab:87:ed:3c:60:9a:
eb:e9:42:86:2b:28:05:78:95:bf:b2:90:d7:10:e8:a7:8b:e9:
d5:13:ce:d9:01:25:d9:ce:a1:9e:60:35:9e:b6:74:69:94:4f:
22:de:64:c9:48:30:67:4a:f5:0a:43:5f:ad:e1:fc:db:9c:37:
70:e4:ff:e6:52:c9:6f:08:4f:b6:a3:a9:38:a6:f5:27:2d:68:
10:3b:5b:9a:a9:84:01:c6:5a:db:eb:6e:ab:c7:7a:24:2e:e7:
e5:ad:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:33 2026 by rpki-client